Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: c3Zdnmu+2AW/FsqCchh5VcyV4Jx8CNYgXgctqZFs9Ik=
Subject key identifier: A4:6B:F0:AA:71:F5:36:C0:85:31:28:5F:2C:A9:DC:33:90:C2:93:6F
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 0197469EE63F7BA892EDC37B7BB936895DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 1582
Signing time: Fri 06 Jun 2025 19:01:48 +0000
Manifest this update: Fri 06 Jun 2025 19:01:48 +0000
Manifest next update: Sat 07 Jun 2025 19:01:48 +0000
Files and hashes: 1: BAFnA8E_-fRHFvJR66V5dNg4Xzc.roa (hash: zli04q+UUFDZ6LvNlKF4wEZntdZy+cQL9il9Oh4rSZo=)
2: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: g6SKtqJF3mDr7yVWSACdcnEgZptygFUh9euxJSYdzMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:e6:3f:7b:a8:92:ed:c3:7b:7b:b9:36:89:5d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Jun 6 19:01:48 2025 GMT
Not After : Jun 7 19:01:48 2025 GMT
Subject: CN=a46bf0aa71f536c08531285f2ca9dc3390c2936f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a6:5c:c5:44:b6:8c:cc:f2:bd:69:fa:3d:ee:
93:db:6a:1a:c0:6b:c3:b7:bf:eb:86:cb:37:1b:38:
13:6e:de:db:14:d7:e3:83:c1:8d:ef:96:80:1b:4b:
88:06:27:c0:64:5c:7e:71:91:39:a0:39:39:5c:fc:
9a:c8:19:4a:cc:26:fb:fa:a0:bd:33:41:d4:cf:9a:
f7:e0:59:eb:43:4d:73:00:a3:91:8e:c1:f2:1a:03:
04:f5:73:12:6e:ec:15:50:98:ff:b4:df:79:b8:5c:
33:f6:24:7a:b5:50:ea:26:8a:31:e9:8a:0f:7d:b3:
23:34:fe:64:3e:2a:f6:b8:f2:e7:8f:55:5c:77:4d:
b1:58:7e:42:31:fe:e3:6e:b2:26:a0:08:4b:54:3b:
31:70:24:5c:0b:b9:f3:17:c2:d3:a0:2b:7a:97:68:
ee:bd:88:90:67:d2:71:80:13:fe:38:e6:f1:64:f9:
2e:d8:07:25:0e:c5:5d:20:c8:b2:cd:03:b4:94:29:
36:85:0c:7b:34:5d:da:b1:bf:26:6f:5b:dd:2e:cb:
be:b5:ae:c4:7f:b1:82:74:99:ba:f2:c1:79:49:fc:
ef:15:9a:cc:50:e5:ed:88:28:eb:f4:cc:97:8e:95:
6e:e4:1a:5f:e5:ac:3c:80:56:9a:88:b5:47:4d:e4:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6B:F0:AA:71:F5:36:C0:85:31:28:5F:2C:A9:DC:33:90:C2:93:6F
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:90:2a:9f:93:eb:49:07:ce:82:c8:01:a1:27:0d:66:5d:09:
3b:dd:a7:8f:8b:f1:76:a2:04:61:a1:93:6d:86:ee:aa:e0:c2:
fb:ea:97:eb:4d:76:15:2a:70:eb:1c:64:59:f3:b2:b5:bd:6c:
0e:09:5d:31:23:a9:8e:9d:b5:54:bd:03:3e:64:22:89:f8:5b:
81:b0:2d:45:77:d1:2e:eb:31:3b:f3:38:ad:17:54:8b:d4:89:
21:fc:34:d1:8f:4b:ae:3a:98:1d:db:5b:e4:75:5b:88:90:cc:
e3:23:14:5d:1e:a7:8e:9d:27:89:5f:57:50:cb:50:d7:11:1c:
e8:12:30:33:68:ca:e6:9d:24:58:4b:d8:4c:d5:95:b6:95:49:
2d:91:75:31:50:dc:02:83:dc:96:f9:44:b2:49:5f:f0:c6:9e:
c2:f4:1b:18:6d:df:7f:56:c1:a1:48:15:98:16:7a:50:48:08:
78:58:0d:f4:ce:aa:35:9e:95:c6:e9:ba:7b:e0:26:e4:1d:56:
90:62:65:b4:26:bf:7a:ac:7c:48:79:86:ee:c8:55:9d:71:9d:
81:31:a3:1a:6d:fc:7c:d9:23:bc:07:fe:f1:89:43:08:cc:f1:
86:10:dc:92:16:b1:db:03:f1:42:21:f2:2e:9c:bb:60:c5:e8:
b1:1c:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:18:28 2025 by rpki-client