Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: ehH59ucrHVM5FD4IlQkyGPjVWx3+FHWCMsJcggGmDsI=
Subject key identifier: DA:70:DB:8C:08:91:61:5C:88:B2:21:E9:35:A5:01:65:05:0E:C1:A0
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 019748C35F7937C1517704A66EEC864922BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 114D
Signing time: Sat 07 Jun 2025 05:00:52 +0000
Manifest this update: Sat 07 Jun 2025 05:00:52 +0000
Manifest next update: Sun 08 Jun 2025 05:00:52 +0000
Files and hashes: 1: 6nn-10KbmPgCc6evrpm-TWzQPN8.roa (hash: o4INP15AI01CmXxJKcY1+iiTvm9rSpAtz6YN4QZ0dG0=)
2: ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa (hash: rQ9TfGtesxjebHDlAk08FQJ/mYhxwGmDbJSu6X6Tu58=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: gNfoaKSPus0iTSug7MxaGUkl23RGlvgC6n2BY7M1EyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:5f:79:37:c1:51:77:04:a6:6e:ec:86:49:22:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Jun 7 05:00:52 2025 GMT
Not After : Jun 8 05:00:52 2025 GMT
Subject: CN=da70db8c0891615c88b221e935a50165050ec1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:7b:9b:f9:69:ec:de:26:0c:80:fe:67:33:
1c:0f:39:92:3c:2c:39:55:b7:2e:62:bc:e4:3b:28:
c3:ee:74:bc:3d:4c:55:97:9f:60:4e:88:e0:c2:7a:
16:9f:1a:52:a4:72:6a:6f:22:3a:70:c8:11:94:69:
1b:e5:fa:e2:e7:92:4d:8c:c7:53:5b:19:35:3b:11:
eb:ce:25:9a:64:34:f2:bc:02:51:16:6d:bd:87:5f:
4a:2b:54:17:2e:12:3c:c5:1c:62:bf:f2:df:10:47:
a8:37:26:98:5b:b4:e1:b0:64:e4:9a:f1:dc:ce:1f:
f5:a6:e0:cb:0c:cb:a9:c6:1b:e0:ab:ab:6c:e2:6f:
d9:9b:f8:2c:89:ac:47:26:96:28:dd:f8:bf:8e:de:
56:1d:8a:5d:4f:31:a1:be:ba:f4:e3:31:61:9c:0c:
09:4a:32:f2:7d:e8:9c:cb:54:67:cf:eb:0a:a3:e9:
98:a3:1f:52:c1:16:99:3a:b9:ed:b6:af:38:08:11:
8c:91:64:7b:30:dc:f8:57:ed:70:62:2a:c0:3c:d6:
bd:1e:4e:ec:b7:ab:20:8c:97:37:2c:e5:16:81:17:
a9:02:24:b6:0e:e3:6a:79:5c:3f:36:57:c8:10:6f:
41:94:2d:9a:ce:9b:e1:6a:a7:63:65:2f:d0:2e:17:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:70:DB:8C:08:91:61:5C:88:B2:21:E9:35:A5:01:65:05:0E:C1:A0
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:38:4c:ea:be:ba:70:31:7c:ad:5b:e1:ac:c2:08:52:51:a1:
05:a8:3c:02:c2:29:dd:5f:00:ce:f1:8f:d8:a2:56:b8:16:54:
1b:65:9f:f3:6c:d6:2b:03:f9:35:9d:a2:7b:82:9c:a9:27:8f:
5c:11:a4:94:98:60:9f:72:6d:48:57:b4:cf:f4:ea:1a:ff:b3:
5f:69:5d:a5:ef:a6:35:c6:1f:74:97:17:5d:fd:32:bc:c5:dd:
57:f4:5a:46:27:b5:d8:7a:72:7a:6a:7c:c6:b1:a5:f4:03:07:
a5:da:d0:83:da:8a:3f:42:06:e2:d7:e1:16:77:9c:67:8d:93:
33:c2:09:77:7b:19:3b:a5:8b:af:b0:7a:6f:57:d5:c9:cb:4c:
4c:a8:26:db:8d:5b:cb:f0:86:2f:48:82:4f:b6:51:f2:d2:b3:
8f:79:c7:86:85:4c:78:4f:61:64:74:4c:92:3a:af:59:97:03:
01:31:fc:56:46:47:d2:67:fd:36:65:a0:a8:6f:57:f7:14:7b:
bd:ce:ff:f1:77:35:ed:90:42:a9:70:f4:c8:7a:93:5e:56:50:
60:ef:0a:cb:7f:37:0f:8f:f7:2f:78:90:78:2a:4f:7b:a4:82:
a9:70:cd:5e:5d:29:9d:37:a8:42:e1:5e:cd:df:a4:a0:cc:82:
1d:f1:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:35:33 2025 by rpki-client