Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier: TPVtMhLh4Xyt7PottcotYed+zGEv3q3SJj8bsYfGb50=
Subject key identifier: C0:98:CB:4A:D0:47:13:6F:C9:6E:55:A8:7A:8B:DA:23:1F:99:00:6D
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial: 019749D5E5486F9DA224FEF60063FDCEA8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number: 09DB
Signing time: Sat 07 Jun 2025 10:00:44 +0000
Manifest this update: Sat 07 Jun 2025 10:00:44 +0000
Manifest next update: Sun 08 Jun 2025 10:00:44 +0000
Files and hashes: 1: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: lT1Kre4YVRV6JJBhqXIKShVwUyF2RkYTu5h3ZpcjgoU=)
2: y434m32YaOSFWfdjMrvD69-28ws.roa (hash: 2wH2CADXRiwQAKzkBQR9rJEZcF/YGQDp6VtufnWzYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:e5:48:6f:9d:a2:24:fe:f6:00:63:fd:ce:a8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Validity
Not Before: Jun 7 10:00:44 2025 GMT
Not After : Jun 8 10:00:44 2025 GMT
Subject: CN=c098cb4ad047136fc96e55a87a8bda231f99006d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:6b:ec:72:60:89:53:68:a2:98:5c:86:a2:
5c:a7:0a:b9:02:53:2b:69:42:17:97:a5:b5:8c:9d:
a4:72:b6:86:23:01:eb:27:76:f5:2e:fc:49:54:e7:
e5:16:6c:2b:09:22:dd:b0:01:12:b2:3d:96:5f:1a:
88:94:25:f6:c7:dd:bf:1b:42:43:11:ba:99:fc:c0:
39:5d:b6:63:e7:c4:62:15:53:32:ee:02:ca:5e:84:
1f:31:70:33:70:a9:cf:47:53:3d:26:7d:89:3c:97:
39:ea:04:c6:62:18:4d:2d:e8:6f:fa:b5:69:37:37:
b3:87:20:0c:31:4c:5a:0c:84:6f:25:cb:b1:e8:1c:
d6:af:32:35:4f:a2:ae:a3:da:50:9b:f4:26:68:ed:
b8:cd:d8:c9:2d:2d:c7:8d:df:d5:a9:b1:31:ca:86:
e0:5d:84:d1:54:11:3a:ed:b4:72:59:b5:ff:01:be:
45:97:2b:fd:9c:d3:93:6d:1f:7e:48:c6:1c:ba:6a:
99:ae:d9:41:82:14:fb:a6:e0:bd:01:a3:cf:3f:ab:
57:e5:c8:e1:08:a4:92:4b:76:8d:aa:d9:05:f8:3e:
a4:e0:5a:de:dc:96:0d:c4:dd:ab:ad:ab:be:b2:15:
e0:8b:77:12:15:08:33:78:fe:3b:95:a1:3e:2a:b5:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:98:CB:4A:D0:47:13:6F:C9:6E:55:A8:7A:8B:DA:23:1F:99:00:6D
X509v3 Authority Key Identifier:
keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0c:94:ef:25:f5:44:2c:9d:7a:db:39:7f:5f:49:d8:db:3e:
9f:6c:ab:ad:df:84:98:57:fc:81:df:62:d6:6d:4c:13:fa:13:
d8:2d:68:fc:55:9a:ec:c0:ae:a8:6f:49:af:43:00:c8:13:cb:
ea:ea:41:0c:f1:52:fb:2e:ea:99:e4:b8:13:5c:da:12:8e:49:
7b:e1:3e:a1:a4:b2:9f:b7:fa:71:cf:00:98:87:5a:72:63:bb:
1c:24:df:fb:3d:f9:cd:5d:e6:b1:9c:5f:ed:cb:d5:26:45:c3:
6c:5c:0d:01:0a:3e:f1:90:1e:a7:78:00:e8:de:d8:87:f0:59:
e4:bf:fe:1d:4a:31:77:1f:8a:b3:e3:4f:ae:38:e7:fe:ed:c1:
3e:81:94:a2:51:93:c4:5c:b4:ef:f5:0e:48:47:ca:fc:8a:0f:
94:42:c5:f7:ab:40:24:87:11:4a:40:21:62:5a:82:c4:c7:84:
47:0a:77:45:5d:db:b3:a2:b2:de:d7:df:52:cc:04:22:22:b1:
7a:ca:a5:62:a5:db:2c:20:9c:0b:10:25:d9:79:33:66:05:fd:
b0:a3:94:6b:96:a2:1a:ea:94:55:4c:af:f5:cc:b8:fe:6d:3c:
ee:09:76:5a:a6:9d:a5:e7:aa:fa:4f:10:7e:1e:39:06:3a:b9:
90:fc:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:17 2025 by rpki-client