Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: CS//BkYJgFzawBIVg3ttGRKROJM7zZZF4Ee1TeShK3k=
Subject key identifier: C6:75:6F:96:70:D3:EC:8F:E8:B1:78:8A:22:9A:49:D7:2E:F1:A7:CA
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 01974779CBCFD48BD2B36587D97E97BC7C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 09E8
Signing time: Fri 06 Jun 2025 23:00:53 +0000
Manifest this update: Fri 06 Jun 2025 23:00:53 +0000
Manifest next update: Sat 07 Jun 2025 23:00:53 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: a9zlHJvdJZeJZ7oiisJ9cFMCBvI/6TtiEnpQ++Qcfr8=)
2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:cb:cf:d4:8b:d2:b3:65:87:d9:7e:97:bc:7c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Jun 6 23:00:53 2025 GMT
Not After : Jun 7 23:00:53 2025 GMT
Subject: CN=c6756f9670d3ec8fe8b1788a229a49d72ef1a7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:1d:b4:2a:42:40:fe:4b:dc:15:8f:a1:fa:
ae:5f:80:1e:1d:25:22:2d:92:2f:f1:e7:8f:a9:cb:
31:82:67:2d:01:3d:cf:eb:1a:50:e9:c1:70:fb:b2:
f5:dc:5a:ef:cc:df:f1:0b:c8:69:47:14:c9:59:8d:
9c:61:23:38:83:d2:52:02:72:e1:38:63:4c:92:55:
2b:6e:33:9c:8e:a8:17:47:c4:ee:d2:a9:d3:21:ea:
90:0b:21:86:08:84:e7:19:88:83:25:36:8c:58:07:
7d:cd:a4:c1:83:5b:1b:5b:f7:4a:33:ed:6e:2a:73:
6e:cd:cd:2b:58:5f:80:83:3b:d4:13:69:c8:88:e1:
3d:fc:88:a4:4b:bd:1f:e2:4a:75:b5:e0:49:63:3f:
8f:db:bd:bd:7a:c5:c6:a8:6a:28:45:77:1b:4a:82:
5d:0d:85:e5:8c:90:92:26:e0:d2:77:7c:f8:56:6c:
eb:d0:61:6e:b4:91:11:cb:25:4f:23:09:0d:00:36:
ba:93:5d:d6:58:09:d3:27:c3:fb:c0:01:4e:67:77:
ed:66:af:4c:cf:55:9f:45:07:87:54:b7:7f:fe:7f:
d7:89:95:dc:7a:0a:80:ab:ce:76:75:72:a0:77:aa:
74:80:74:4d:04:dc:96:ad:6d:20:66:d3:6b:71:1a:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:75:6F:96:70:D3:EC:8F:E8:B1:78:8A:22:9A:49:D7:2E:F1:A7:CA
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e2:b2:ac:12:0b:0e:9d:9b:34:eb:6e:d6:4d:5a:da:3f:96:
e3:3b:29:f1:a1:b4:dd:09:eb:d6:71:d2:e2:f1:8c:8d:00:7d:
5a:71:3c:0d:65:c8:f9:96:2b:ed:d7:03:ac:10:bd:20:ce:3d:
bb:b8:4a:44:2a:52:41:58:5e:e5:64:a8:0c:3f:30:c3:e1:95:
c3:1c:9a:ac:c0:dd:da:b9:e4:94:e5:16:aa:d9:86:e8:27:9f:
c0:60:dc:e4:03:79:e0:54:f7:a3:e8:6f:39:1f:3e:2d:68:c9:
91:b7:99:e7:48:0d:a9:ad:9d:f6:5a:4b:2a:5e:65:87:dc:68:
d8:8f:db:bb:6a:38:da:81:58:e0:97:c9:ff:97:a3:3c:26:9c:
f4:0d:c7:26:d4:25:bb:a7:64:b7:4e:cd:5f:a8:d5:f0:3c:e6:
15:db:9e:7c:fd:b2:af:49:3f:c7:51:ba:65:26:ca:02:57:48:
a2:52:57:a4:f3:0b:dd:5a:59:69:2a:30:dd:ee:7f:1f:e7:1d:
4e:d0:8c:b9:3b:50:81:45:1c:5e:1d:2e:34:05:83:63:18:3f:
67:56:7f:dc:1e:a0:eb:33:12:06:da:38:b1:00:90:06:57:d9:
80:74:60:f0:3b:c8:15:fc:3d:a3:9a:e2:41:94:7a:36:ca:85:
ba:4e:94:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:09 2025 by rpki-client