Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier: QkRHy3+9X2Be2Rk0CsGEJJgJY6ZqpSxyRqsu9EJS+0A=
Subject key identifier: 8A:C1:AC:DE:DF:AC:54:45:80:3E:F9:12:A6:E5:12:6F:84:83:EB:B1
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 01974AE83D89888BCEB81422ADA94B98298E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number: 1100
Signing time: Sat 07 Jun 2025 15:00:23 +0000
Manifest this update: Sat 07 Jun 2025 15:00:23 +0000
Manifest next update: Sun 08 Jun 2025 15:00:23 +0000
Files and hashes: 1: 8-SPB1FRD1dqgSwieEEafk1GdQA.roa (hash: vazRE5ylOn6vVMnXFU4rXRZh7sO8QjAU8zOnvhOztXo=)
2: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: kKnsDUG/f9vI35Ttcee6oTGcuFXt49yFmc4NLdx3Wq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:3d:89:88:8b:ce:b8:14:22:ad:a9:4b:98:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: Jun 7 15:00:23 2025 GMT
Not After : Jun 8 15:00:23 2025 GMT
Subject: CN=8ac1acdedfac5445803ef912a6e5126f8483ebb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:0b:f2:e3:9f:e1:8e:23:01:8c:45:1f:0a:
03:89:d3:ee:f1:92:24:e7:46:62:7b:25:82:23:b4:
7b:21:71:bd:93:d4:2b:f2:0e:f5:dd:9d:d4:89:ae:
e1:d4:9d:00:15:ac:59:ae:e1:40:7c:f6:ea:c4:06:
e8:23:0d:87:61:7e:f5:64:ef:62:28:40:9f:d5:d5:
ea:10:e5:bb:e4:8e:af:72:f8:3b:64:de:a0:be:65:
ba:15:16:00:71:03:1b:11:01:43:0c:0e:8f:32:52:
c1:90:ed:4b:e5:e9:89:d3:ff:00:77:f8:4c:cf:0e:
19:80:43:cc:84:12:9c:23:c3:44:69:13:50:c6:4a:
f5:c9:7c:3c:51:50:38:5f:e3:2b:bb:b0:43:7c:ea:
99:26:e9:b8:46:a9:3c:57:68:57:c5:3d:1c:7a:d1:
34:d3:be:9e:d8:db:ae:41:b3:a3:ad:b0:81:07:c3:
b1:0a:bc:6d:70:da:e5:fd:af:8b:d7:5f:9c:ca:44:
62:ce:55:97:50:40:e3:7b:66:b3:18:40:50:e4:82:
64:a8:fc:14:4c:35:48:c1:d5:8b:68:b7:3d:89:a8:
3e:95:a1:82:43:c5:f7:00:4b:24:32:11:07:00:10:
f8:5c:5f:84:31:a4:f6:86:d2:8d:5c:a9:c2:fd:4a:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C1:AC:DE:DF:AC:54:45:80:3E:F9:12:A6:E5:12:6F:84:83:EB:B1
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4a:59:0a:10:16:17:e1:04:c4:9a:12:99:ae:e8:d3:d6:34:
5c:54:2b:d5:1b:22:73:31:0c:b7:b1:15:5f:95:a5:28:bb:80:
33:4b:9e:49:3b:f0:95:3b:50:58:60:77:57:27:bf:37:02:b2:
02:6e:75:da:9f:91:01:5a:73:c7:3e:db:c2:72:24:dd:ba:16:
32:43:34:bf:14:8b:85:a0:a8:82:a5:0a:8b:11:ad:d5:23:44:
49:a9:d8:e6:54:63:37:09:e9:00:a9:69:34:15:d6:93:23:3f:
6e:b1:62:c0:a7:50:52:b0:60:86:21:f8:d5:ee:ff:27:10:b8:
b7:fc:58:08:9b:77:0f:ec:8d:3d:9d:8f:e6:95:83:7a:bc:95:
3d:80:ab:19:89:79:46:e7:2e:f9:5e:95:4c:9f:af:c9:44:4c:
8f:76:1d:77:29:a8:a0:fd:0d:f7:31:0e:b0:e9:c1:a3:b6:ef:
c2:6f:88:2e:99:f2:d4:cc:f5:2e:50:5a:fd:43:cf:1a:be:45:
0e:d8:7d:39:9a:f3:3e:16:03:ff:ba:e0:70:8a:e0:94:26:d4:
4b:b3:03:4c:da:79:45:4d:f4:dc:d6:ef:45:7e:d0:3b:77:68:
5a:ef:7d:73:4c:cd:ab:b4:45:2d:61:ed:48:7a:01:26:48:03:
ed:06:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:28 2025 by rpki-client