Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: P0n9PhCSoTdo3uEC7xADue6/h0aL41ykV85EPSp3Aqg=
Subject key identifier: 95:CA:11:4F:1C:44:E8:41:46:49:EB:FE:2F:AB:C4:32:6C:B2:85:CF
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 019747E7D0EF7D0EED946B2FBA2496A4D254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 1370
Signing time: Sat 07 Jun 2025 01:01:03 +0000
Manifest this update: Sat 07 Jun 2025 01:01:03 +0000
Manifest next update: Sun 08 Jun 2025 01:01:03 +0000
Files and hashes: 1: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: AHwPFL+xTJfV/BoCbDQI5QnHMQNO7XOUZ9Yz4Oo2CQc=)
2: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (hash: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:d0:ef:7d:0e:ed:94:6b:2f:ba:24:96:a4:d2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Jun 7 01:01:03 2025 GMT
Not After : Jun 8 01:01:03 2025 GMT
Subject: CN=95ca114f1c44e8414649ebfe2fabc4326cb285cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:0e:7b:8b:59:1e:6f:81:94:ed:b4:8e:be:
3b:a8:35:3b:55:0f:f6:8a:30:fd:57:41:f2:5b:6d:
54:b0:e9:76:b2:cd:39:2b:d8:13:68:ee:9b:34:40:
f3:4c:ed:51:c9:5a:7a:1f:c0:23:b9:02:cf:2b:f2:
cd:aa:94:ca:76:16:44:9a:b4:77:de:11:4d:df:d9:
06:d0:ac:87:f4:b3:76:45:43:3c:e0:50:b8:a9:17:
79:74:3a:62:4b:a2:51:80:6a:48:c0:71:e3:c2:d6:
26:56:0b:0a:49:14:4f:52:55:9e:08:ca:a1:42:31:
6f:39:e7:54:49:68:9d:4e:fc:bf:2e:68:9f:e3:01:
3a:18:69:e6:f9:b6:1d:d8:c1:3e:f7:ca:8d:f4:30:
41:36:ec:a9:52:40:4e:16:50:c7:92:0a:b3:3f:35:
14:d5:6b:49:d4:67:16:53:d7:1b:cf:9a:b9:db:45:
66:7b:49:63:9e:7d:47:95:c0:33:ac:12:94:75:b8:
12:22:e9:a1:31:b1:aa:88:2a:0d:fc:2e:a2:3f:18:
fa:a8:c5:75:86:58:a4:bd:c6:75:f1:25:cd:15:2b:
90:8c:e0:1a:3e:29:a7:1a:85:63:94:45:ef:00:f2:
8b:f0:d3:22:5c:83:84:db:94:aa:0c:a0:9f:44:6a:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CA:11:4F:1C:44:E8:41:46:49:EB:FE:2F:AB:C4:32:6C:B2:85:CF
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:51:64:23:3c:5e:34:d2:3b:d8:53:14:38:63:83:f3:4b:10:
ba:b0:77:10:da:8f:70:1d:5f:80:57:78:b8:64:09:51:39:d3:
8b:44:c4:9b:2d:4d:35:c0:9d:3c:47:7a:ea:8b:d0:84:b6:26:
5a:83:23:00:ef:23:bd:33:5c:27:94:dd:46:d1:77:c2:e9:95:
2a:72:d5:ac:65:a4:57:d3:95:d0:5e:a9:16:54:99:af:4b:a1:
95:14:78:d8:8f:09:19:bf:e9:cd:a2:88:2c:2e:cf:b9:23:ac:
a0:b6:34:06:fd:1d:a7:15:a2:08:46:c1:79:52:86:fb:4a:54:
52:41:56:92:2b:e0:09:8a:2e:5a:22:2b:4e:6c:cb:2c:1c:2c:
55:e7:11:8c:8c:e0:d5:4c:f8:d6:fc:0e:21:60:1e:2a:d7:da:
4c:95:d9:f4:f7:80:77:e8:76:4a:74:65:46:ee:93:82:ce:4e:
f4:e6:96:a4:45:76:49:11:5d:12:cb:d6:fd:3c:9a:53:bb:bd:
7a:57:e3:f4:f8:df:f6:56:dd:27:ad:07:7a:db:00:5f:6e:ae:
b3:94:28:a6:d8:60:c0:be:ae:f0:86:b5:63:1d:bb:a4:d0:f7:
27:9c:bc:7b:f8:c1:40:16:24:f7:02:53:51:40:80:d2:cb:29:
3b:32:42:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:50 2025 by rpki-client