Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
File: p-cKBbmGOc165X_rGkCzZ-ycQ60.mft (raw, json)
Hash identifier: QpRCxe+wpHl6xW0CmBNXhtTlYKKucjXXSiYo47Eu8fI=
Subject key identifier: 7A:48:9B:74:8E:05:E6:F8:42:FF:10:4F:8A:0C:A1:EB:DD:0D:62:26
Authority key identifier: A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
Certificate issuer: /CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Certificate serial: 01974AE867135E168DF42D5CC6F54E180835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
Manifest number: 09C1
Signing time: Sat 07 Jun 2025 15:00:34 +0000
Manifest this update: Sat 07 Jun 2025 15:00:34 +0000
Manifest next update: Sun 08 Jun 2025 15:00:34 +0000
Files and hashes: 1: fbHkL-NwzOez_gqY2PAh-dqPCjE.roa (hash: Q4MsLL7SIokgLjLmWwHX1Dj+xIpsxjtJ9IG++E0gJUc=)
2: p-cKBbmGOc165X_rGkCzZ-ycQ60.crl (hash: sIM3mwC2fZfGHDcgr7AG5iBnoRU9fjhpqnuG2fr/vbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:67:13:5e:16:8d:f4:2d:5c:c6:f5:4e:18:08:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Validity
Not Before: Jun 7 15:00:34 2025 GMT
Not After : Jun 8 15:00:34 2025 GMT
Subject: CN=7a489b748e05e6f842ff104f8a0ca1ebdd0d6226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:6b:88:9c:44:21:0f:dd:1d:aa:8a:51:aa:
1d:7a:52:f0:66:8c:55:21:ab:e9:91:a2:be:c7:80:
c3:22:20:f0:db:94:c9:01:26:d7:16:02:ba:51:59:
b4:0d:ac:70:b4:4f:b1:78:02:d6:6b:6a:9d:01:f7:
c7:fb:8f:fd:ec:21:4f:d4:af:4a:c4:fc:85:06:01:
20:84:3a:36:f0:c1:db:c9:00:76:fb:f1:1d:e6:b1:
86:78:df:a5:55:a0:22:0f:0e:8d:46:d7:14:84:ac:
22:8c:27:0d:51:a9:a1:74:49:d7:3d:75:f1:8f:34:
18:d3:bc:84:d4:09:80:16:05:95:8d:a8:2e:d2:23:
83:a4:02:99:78:9b:e8:ab:21:bd:a3:9d:02:b9:fb:
7a:1c:d5:95:88:8f:db:ab:2c:73:e3:92:0a:4f:06:
7b:4a:2f:ea:dc:25:94:0c:09:25:e5:23:84:ea:61:
7c:eb:4a:36:b5:a6:98:aa:7c:77:a4:0f:a1:43:18:
9a:e3:a8:c3:d9:ad:19:d1:d8:f3:c9:9c:74:52:a7:
5b:aa:d2:24:2a:1c:1e:8f:1c:ef:16:d6:29:37:2f:
a4:b7:c3:a3:f9:d3:f8:de:af:75:d8:9e:ba:16:aa:
df:c6:cb:92:ba:32:66:89:89:e6:47:49:77:b9:d4:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:48:9B:74:8E:05:E6:F8:42:FF:10:4F:8A:0C:A1:EB:DD:0D:62:26
X509v3 Authority Key Identifier:
keyid:A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:80:ad:3b:a4:50:19:83:43:ec:90:bc:c6:10:57:ef:02:15:
2a:a2:00:90:77:c9:05:51:bf:ec:03:a4:97:3e:37:f9:4c:2a:
b9:fb:cf:f7:49:58:b3:fa:09:09:28:65:85:db:20:fa:6c:b2:
69:d3:3b:ca:4d:f4:33:ad:b8:6b:78:cb:41:92:83:f1:3a:8a:
31:7e:b1:ef:2d:67:20:99:79:43:1a:c6:aa:85:76:c6:72:97:
e6:de:87:3d:88:bc:be:6f:55:42:c8:70:a6:be:55:a5:79:93:
12:72:2b:4f:5c:2b:3c:f3:a7:d4:04:2c:5c:ac:14:87:9b:9f:
87:ee:16:7f:e7:87:b7:be:21:86:c5:4b:ed:64:6c:33:b5:2b:
73:76:bb:b6:67:9b:33:ea:cc:24:8b:da:49:70:36:19:57:dc:
62:93:44:5e:d0:4b:87:e1:b6:fc:0f:e3:5c:e7:0d:94:b5:8b:
eb:24:1d:92:54:2a:a4:b8:8d:a1:96:da:d9:0a:7b:05:01:ec:
6c:b8:f5:30:e1:98:16:7a:de:4c:f8:7d:c1:66:ad:c5:0c:f9:
7b:2d:d2:3a:5a:6d:44:71:ab:63:68:11:b8:93:1f:b4:5a:13:
25:b1:7a:74:f5:46:69:28:86:52:dd:b6:45:5d:5f:df:7c:20:
ac:68:34:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:34 2025 by rpki-client