Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: OE1ISpxgll50UjrOyvD3WdTloBjii6sr3gHYdbSSRyg=
Subject key identifier: B2:14:AA:E3:CD:44:18:17:89:BC:C0:45:F1:B7:9D:F0:FA:E5:B6:32
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 019748C2D85E21027CBE01A19B58181C5406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 0101
Signing time: Sat 07 Jun 2025 05:00:18 +0000
Manifest this update: Sat 07 Jun 2025 05:00:18 +0000
Manifest next update: Sun 08 Jun 2025 05:00:18 +0000
Files and hashes: 1: YhU5HITXmEzEZK077V2NUQi5G0E.roa (hash: hsmvHe6gnKNA2Q3OE6zeLGrGjvqCoU3tN+crhtSom4Y=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: Nyn4OSBnrfPSjwt0GTFE4zMbmef6xtsd6jLUndbynnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:d8:5e:21:02:7c:be:01:a1:9b:58:18:1c:54:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Jun 7 05:00:18 2025 GMT
Not After : Jun 8 05:00:18 2025 GMT
Subject: CN=b214aae3cd44181789bcc045f1b79df0fae5b632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:50:50:3e:74:6e:e2:0e:ba:ed:84:74:88:
42:a4:29:7a:f8:80:ae:7e:ff:12:12:e7:ba:3c:8d:
0f:dd:2c:af:b5:87:e1:e4:9a:26:9c:d2:bb:5b:13:
59:ef:c7:dc:8f:6f:e3:f3:56:71:90:49:a0:b5:b0:
dc:da:08:90:30:ed:cc:33:58:a1:4e:0a:c3:e3:e4:
98:37:5e:96:9a:5c:83:c9:f2:e0:cf:6d:05:03:ee:
79:d1:9b:f6:6d:14:38:d2:36:2b:b4:a9:b5:11:c3:
be:3c:ba:fc:c2:8e:33:92:59:d6:01:d0:6c:5c:09:
8d:5a:40:7f:2d:df:39:17:8d:c4:15:54:aa:71:e1:
da:ef:dd:49:a1:ab:a0:c8:4a:03:21:bc:f9:17:35:
25:b7:2d:76:ef:d1:a2:5a:51:15:12:94:8b:f5:51:
05:ab:65:83:43:1b:b3:5f:86:9f:7f:24:74:f8:8f:
52:c2:d2:ab:3a:54:a4:9d:81:3e:0b:d5:a0:ab:64:
8d:bc:a2:24:a5:6b:86:45:8f:a9:7c:27:62:72:f7:
4b:f6:fb:b2:01:aa:e9:a4:fb:bf:9f:d3:ee:d6:c1:
35:73:39:da:24:0f:c2:8b:28:a4:d7:2f:2b:f7:49:
18:19:d8:7b:01:d1:60:d9:e7:91:8f:d9:27:9b:76:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:14:AA:E3:CD:44:18:17:89:BC:C0:45:F1:B7:9D:F0:FA:E5:B6:32
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:70:8b:2f:fc:4b:dd:8e:7b:1e:48:a5:1b:36:7a:74:72:2c:
db:a2:3d:ea:92:ea:54:72:f2:4c:d2:c9:37:e0:d0:65:a8:05:
e1:4c:c2:e6:1e:e4:7e:54:78:8c:66:2c:0f:3d:f1:dd:f9:36:
37:14:72:17:1a:4c:a9:29:42:9c:c4:f1:ae:a9:45:91:1d:5d:
cb:10:fc:39:bd:93:6a:f5:fc:2b:f8:4c:1d:18:bb:3f:98:d3:
95:15:cc:85:01:4e:1c:06:cd:df:c5:20:35:2c:ae:18:24:a7:
ec:9f:92:20:19:5a:d9:d1:ce:b8:9b:13:ef:85:10:a2:50:36:
30:97:06:88:a3:74:5d:5c:4d:af:d4:89:a8:c6:f2:bb:64:38:
d6:fc:4d:86:23:ac:f1:cb:43:be:3c:ab:82:6e:bd:01:7f:18:
e8:bc:f1:29:45:47:63:61:9d:25:41:dd:7b:d8:e3:08:6b:52:
29:98:67:e1:ac:a5:a2:3a:cc:7e:f2:4a:b1:3c:c9:99:09:e4:
fd:c7:66:a4:1b:c9:04:d7:1e:30:d8:1a:43:be:ef:34:ba:8f:
ef:36:e8:2b:6b:39:8e:03:21:b7:4d:02:ea:00:39:be:ba:7a:
04:d2:fe:c6:2f:ac:63:08:3f:17:75:71:ef:3a:ea:09:d4:46:
7b:02:53:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:26:33 2025 by rpki-client