Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: aDXYV/IeB9nHxDHxQ0/jMx2UkpqCoq48TrqEyVd2Gmc=
Subject key identifier: 86:DE:8F:86:F3:07:43:3C:4F:1F:B8:29:86:40:5C:28:9C:AB:82:7E
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 0197488C8568448FDA7FCE71FD15F9BCF173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 0924
Signing time: Sat 07 Jun 2025 04:00:58 +0000
Manifest this update: Sat 07 Jun 2025 04:00:58 +0000
Manifest next update: Sun 08 Jun 2025 04:00:58 +0000
Files and hashes: 1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
2: XdmrjuWzZy62aNAP27lIvhOU4pg.roa (hash: GLuRF8qY+3QymEUwnc/Z5m+7OQeVn6lmu8CHrOCaebE=)
3: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: T/pq21TDNBxcJcAXY/fg9CDDrhZzYBIzC5jEEwoygAU=)
4: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:85:68:44:8f:da:7f:ce:71:fd:15:f9:bc:f1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Jun 7 04:00:58 2025 GMT
Not After : Jun 8 04:00:58 2025 GMT
Subject: CN=86de8f86f307433c4f1fb82986405c289cab827e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:ff:aa:4f:12:dd:9d:8f:79:4d:85:ee:a0:
1b:72:3c:3a:39:46:c3:da:5c:1a:20:01:cf:62:d8:
e1:69:d2:dd:b1:d5:1f:e4:6b:ea:78:1f:b0:56:5b:
70:b3:fd:87:a6:5b:55:eb:63:a9:f6:36:46:cf:fc:
ea:54:45:2b:35:c0:6c:a8:5c:a9:c4:c5:a3:b2:de:
48:45:05:3c:45:0d:33:0a:05:d6:f5:75:b7:6a:93:
4a:19:42:24:01:65:bb:4b:1a:a9:7e:73:b0:31:f6:
0f:b1:ca:5a:84:5c:6e:fb:59:a5:9d:c1:d4:21:70:
9f:01:4a:ea:6f:85:f0:12:b0:b4:cc:18:a0:6d:b6:
a1:af:88:38:92:9e:03:1b:9d:2f:d0:75:51:5a:54:
06:89:85:77:fd:b8:37:41:c7:eb:39:26:86:c2:48:
9c:5a:63:8c:21:64:f3:89:4a:42:21:ff:21:2c:4e:
f0:eb:ff:0f:1c:39:4c:d5:b4:3a:44:d6:90:30:11:
a3:32:cd:83:56:10:75:37:f6:73:b0:73:5d:a9:87:
5e:3a:5b:8f:03:a0:9f:e7:0a:74:a5:03:c6:b0:fc:
e2:e4:ae:e2:e0:a4:b8:fa:89:a1:1e:6f:61:e8:ae:
1b:f4:48:6a:54:1f:94:d1:8b:bc:d9:0d:ae:54:35:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DE:8F:86:F3:07:43:3C:4F:1F:B8:29:86:40:5C:28:9C:AB:82:7E
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:63:db:a1:7e:e3:54:62:5c:1d:75:62:40:20:c7:98:39:9c:
4b:c1:a1:05:bb:6c:2c:c9:c3:43:c2:87:fd:81:7a:47:8b:b7:
c5:db:60:e2:bd:5b:d7:66:bb:91:aa:04:09:b7:e0:94:03:32:
ff:fc:55:10:0e:1a:eb:df:9c:fd:1a:b3:46:e5:2e:3b:49:01:
62:c6:a2:e8:08:90:19:68:50:80:fb:13:a0:28:e1:2e:a8:67:
24:19:06:21:f1:0f:de:a3:65:98:26:33:a6:c2:11:2f:6a:d2:
3c:b3:e2:e5:c9:fc:f3:89:57:9f:94:ff:7f:79:b9:11:43:50:
44:ca:61:e9:10:2f:d2:e9:db:1a:5d:32:e1:9f:64:e2:65:7c:
d2:db:3c:81:32:85:28:6f:79:f7:3a:14:70:c4:c9:a7:9c:35:
08:67:a8:87:36:ef:9f:c1:d0:96:22:43:19:dd:61:2a:0b:8c:
b3:1d:5a:6d:0c:fd:2c:e2:55:8b:a4:74:2a:25:23:af:a8:b3:
83:b5:07:4f:9d:d8:69:79:dc:ba:48:9b:5d:d9:0f:b8:86:6a:
6c:4b:70:bc:ec:c8:2f:d5:dc:e1:64:66:af:13:a3:b5:9c:e4:
54:a5:07:08:12:bb:b7:d1:97:10:9a:05:f8:28:da:e8:db:87:
aa:77:4b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:56 2025 by rpki-client