Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: PBapEV06x9qa6KPE83DNAL//htz52F+/2tOdf8Axg2c=
Subject key identifier: A8:47:FF:4E:2C:08:7E:34:67:F0:2B:FF:BB:DD:2A:50:53:EC:D8:4C
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 019747E7B232649DFAFC85972148EC23FABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 150C
Signing time: Sat 07 Jun 2025 01:00:56 +0000
Manifest this update: Sat 07 Jun 2025 01:00:56 +0000
Manifest next update: Sun 08 Jun 2025 01:00:56 +0000
Files and hashes: 1: Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa (hash: gVw1MMRDs2rY597vN0xWVEhdeHW2cAUodm7HsTOIyc8=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: /jl6zX00mF+LpzH7F+30GWQ8PBS0McMTm187TXAWIP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:b2:32:64:9d:fa:fc:85:97:21:48:ec:23:fa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: Jun 7 01:00:56 2025 GMT
Not After : Jun 8 01:00:56 2025 GMT
Subject: CN=a847ff4e2c087e3467f02bffbbdd2a5053ecd84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:ce:95:a2:d5:42:97:fa:9f:db:69:55:b2:
f8:f6:1d:f6:c1:1d:1e:5a:a0:54:f2:75:5e:00:35:
fc:88:e7:88:ff:55:26:92:85:d2:66:eb:c8:fd:80:
a0:de:63:25:29:29:15:ea:dc:bc:13:89:c8:18:dd:
66:7c:e0:f9:41:04:07:08:72:02:d9:ce:69:2b:b4:
21:45:79:b5:dd:f4:0c:b2:4a:72:14:7c:b0:d4:5b:
db:eb:18:aa:69:d5:d1:79:ac:c2:a3:15:d0:72:19:
81:73:11:d3:fa:e3:fe:3e:6a:25:a1:3a:13:3c:11:
af:97:be:f4:0f:d5:fa:c9:90:b9:59:14:9d:29:a4:
a3:8b:5c:83:51:8a:27:ef:82:05:d7:83:63:f2:be:
9b:55:25:38:01:03:d1:85:af:a9:4c:f1:6b:64:e9:
4f:9e:14:a5:1b:df:6d:0b:80:ea:82:9e:50:af:ac:
dc:fd:98:3e:9a:41:41:2e:c8:c1:da:93:57:d6:a6:
e4:ab:64:09:6a:b2:4b:68:05:7c:20:04:3f:6b:f7:
35:bd:db:db:3a:df:71:e7:db:6d:cb:2b:05:6b:07:
dd:ed:8e:5c:94:3f:ad:17:61:67:01:c0:30:52:e6:
61:f2:6f:a7:a7:f7:98:d1:76:83:94:45:9e:48:d4:
7a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:FF:4E:2C:08:7E:34:67:F0:2B:FF:BB:DD:2A:50:53:EC:D8:4C
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:d1:9d:67:32:82:59:35:b7:9c:e3:6f:3b:ca:67:17:6e:ba:
96:a1:0d:c8:85:fa:61:b9:ea:dd:c5:16:15:bb:6d:79:68:3d:
7a:4a:ad:0e:99:54:1c:f6:bc:3e:c7:d7:4f:e9:be:b2:96:2d:
b7:62:c4:14:02:aa:40:c9:f7:25:ea:d1:ae:7d:12:b9:5c:33:
f7:3d:74:63:25:b2:d1:51:c1:ae:f0:23:88:cc:b8:ef:32:e5:
c5:1e:aa:18:c1:17:fd:ca:14:71:32:f6:55:e0:fc:44:6a:07:
77:fe:c1:f4:1c:b1:db:3b:26:5e:78:b9:cf:cf:bb:c0:2a:db:
0a:8b:c0:02:c1:9e:23:86:e2:ac:a7:d5:7a:ca:18:f9:db:5e:
14:f0:2d:db:e2:06:3c:cf:5d:c5:aa:53:ce:48:98:36:c3:38:
41:98:75:95:d3:b2:b4:7b:e1:84:c8:3b:4c:f4:b9:31:38:b4:
a0:2c:9f:3b:64:78:ec:06:e3:ba:e3:d7:e6:3f:01:39:14:05:
54:c0:c4:55:e4:21:e0:d8:11:1d:60:9e:df:7e:72:cb:cd:0d:
b2:a5:38:f3:94:1d:4f:2d:50:56:05:86:1b:fc:d2:5f:5e:1a:
15:16:5f:34:19:ce:27:c6:0e:c0:3a:34:d0:52:12:09:be:ae:
28:41:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:09 2025 by rpki-client