Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: Q/UCYRKXGZrclA56Zv7r2eqgtrsit34sjWxgnAZjxII=
Subject key identifier: FF:5B:8C:52:B1:ED:3D:A8:A4:40:4D:B7:68:67:76:88:02:14:50:DC
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 019739875B5850DBBF8B97562B6D2F9AF49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 0FFC
Signing time: Wed 04 Jun 2025 06:01:01 +0000
Manifest this update: Wed 04 Jun 2025 06:01:01 +0000
Manifest next update: Thu 05 Jun 2025 06:01:01 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: J30M2hPRxCyADOFQYNFk3zyoWZLOEHI3ClYY9ktYPts=)
2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:87:5b:58:50:db:bf:8b:97:56:2b:6d:2f:9a:f4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Jun 4 06:01:01 2025 GMT
Not After : Jun 5 06:01:01 2025 GMT
Subject: CN=ff5b8c52b1ed3da8a4404db768677688021450dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:30:2c:44:a3:54:8d:a2:42:29:e2:aa:30:
6c:2f:5a:ac:51:9a:96:12:ee:86:20:c6:62:fd:4b:
71:7e:12:9c:fc:3a:90:b9:10:02:27:b7:52:75:f5:
f8:b8:31:53:44:d0:4b:7e:61:d2:d1:ac:ba:37:81:
2d:c6:8a:3a:1d:ab:ac:0b:f5:6d:06:84:03:a6:33:
a2:10:32:97:23:46:d5:a0:06:75:cb:ef:f3:c9:b6:
45:8d:50:5c:73:ba:e5:2d:40:22:37:4f:57:6d:57:
73:32:bd:bf:29:bc:31:76:47:ac:b1:c4:c2:4d:57:
9d:2f:39:a8:ad:10:8e:ce:dd:b9:81:92:6d:89:c4:
e7:64:c8:f4:60:c9:ac:24:ab:ef:c9:9a:f8:78:6d:
13:28:21:9b:bf:90:31:6b:4c:5f:7f:fe:60:2e:ff:
34:cd:7c:8a:75:ef:9b:08:25:3e:66:3a:d1:d6:01:
53:89:13:d9:99:eb:74:36:44:2a:0d:31:cd:ab:7c:
76:8e:b5:66:f6:23:c9:95:c0:3a:4e:aa:d1:17:f3:
d8:bd:c5:e5:47:57:8a:27:3c:2c:06:0f:96:c8:8f:
24:66:8c:2f:41:39:e2:8e:4a:29:a5:a2:38:d5:a7:
ee:a4:11:00:77:34:1d:d8:1c:60:2a:dd:4a:d8:cc:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5B:8C:52:B1:ED:3D:A8:A4:40:4D:B7:68:67:76:88:02:14:50:DC
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f5:88:41:6e:c4:38:eb:11:91:d8:d9:3d:33:b9:1d:86:e6:
53:51:31:be:be:c3:b0:53:5e:1c:35:cc:39:fc:3b:ed:20:85:
dd:f8:37:ae:cc:b9:d5:fc:79:fe:e7:3c:2f:04:aa:c6:df:82:
c3:24:2c:0b:78:35:6b:0e:2c:5e:e1:e1:69:0c:47:6c:d9:06:
17:2d:e9:57:76:72:ea:d6:fb:55:b2:8d:27:c2:2e:ff:f3:ea:
d1:2a:cb:9f:1d:4f:80:51:a1:1e:98:68:fc:06:ab:59:63:68:
2c:fc:ff:64:a1:15:52:88:a3:f2:74:64:5f:dc:01:86:8d:08:
1c:b3:86:0f:1b:f6:5c:e3:73:3b:6c:a5:c8:fa:48:82:b5:be:
d0:40:f0:6d:2b:63:d7:b1:a4:4d:11:42:0c:58:97:0c:51:ba:
1a:0b:b1:7b:e1:80:04:b4:40:d3:82:c8:95:b1:76:38:5f:f6:
f2:4e:b2:76:92:e1:71:bd:3d:90:27:06:ca:d4:90:2b:f3:e5:
79:05:a9:1a:90:8c:a4:9c:05:f9:ae:c2:3f:5a:09:50:5a:b7:
84:ca:7f:0f:6b:09:54:47:a6:42:dd:a5:68:ff:9d:2f:7f:44:
e7:60:0c:b8:69:3e:ee:89:79:14:b0:74:a2:9f:1f:cd:f8:1d:
50:e2:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:06:17 2025 by rpki-client