Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: ETDf8RtAFmkGDsdv+GIOyAglL6NPZmM1/YPH+4GSwKY=
Subject key identifier: C8:BD:6F:D0:FA:9F:BD:63:4B:CB:16:0E:F3:52:9A:EF:EA:BC:8A:30
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 01974E8E42B4059D57BC5C806118E5BF5670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1511
Signing time: Sun 08 Jun 2025 08:00:35 +0000
Manifest this update: Sun 08 Jun 2025 08:00:35 +0000
Manifest next update: Mon 09 Jun 2025 08:00:35 +0000
Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: bknRih52NBmu9V35TgVnSWysMlMRgiVTcYHUZPPNkPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:42:b4:05:9d:57:bc:5c:80:61:18:e5:bf:56:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Jun 8 08:00:35 2025 GMT
Not After : Jun 9 08:00:35 2025 GMT
Subject: CN=c8bd6fd0fa9fbd634bcb160ef3529aefeabc8a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:d9:ac:df:01:b9:ba:45:f4:25:bb:04:04:
7c:74:c4:92:ba:e4:91:e2:a3:4e:78:34:45:51:32:
f3:38:cc:96:5a:51:5b:d5:8b:40:40:09:cc:dd:d7:
2f:e7:1b:eb:c6:7f:12:30:7c:1d:e3:4f:0c:4a:84:
62:28:2c:00:fb:e6:f1:dc:ac:32:61:ef:4d:eb:e7:
78:43:9a:35:50:81:2e:92:8e:c5:29:2f:76:46:27:
ad:76:fb:89:a3:e3:15:0a:0a:c0:09:90:d0:c6:e8:
2b:c3:b3:2d:12:9a:42:7c:14:1f:8e:48:7c:7c:84:
7a:0c:fa:5b:86:ff:cc:23:62:44:f1:bd:fd:50:33:
e8:78:b4:dd:d3:1b:91:b1:f0:e1:91:c5:12:87:bb:
3e:52:cd:f7:f0:b9:bb:73:27:1a:99:49:6a:f6:f4:
40:cc:ca:4b:2c:76:6d:f9:f8:31:97:7e:a1:7e:9a:
38:da:f1:7a:e8:2b:b3:3f:ea:3e:39:7b:26:e4:7d:
c6:53:18:3d:d4:f0:cc:dc:f0:63:2a:96:a6:5d:d2:
52:1d:4d:53:9a:19:87:77:53:7b:2c:36:06:f1:53:
8d:a7:b1:4e:21:62:a3:cb:4a:5c:91:d9:cd:82:1f:
df:7d:2a:6e:0a:b6:f1:9a:e7:8c:d0:5c:cf:b1:fe:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BD:6F:D0:FA:9F:BD:63:4B:CB:16:0E:F3:52:9A:EF:EA:BC:8A:30
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:73:d1:23:ff:39:cb:97:71:91:3b:7e:a4:35:7c:db:e3:93:
d8:73:4d:5a:6f:0b:ed:22:be:ea:75:4c:88:cc:6e:ec:5d:de:
df:b2:24:cd:42:97:47:51:29:47:24:b6:07:36:56:90:15:c8:
3d:4e:17:77:a5:95:cd:56:1a:b1:02:ce:a7:c7:4b:b6:02:48:
77:15:ec:ab:91:73:dc:56:ac:e2:76:a9:f1:ed:3c:55:19:55:
6f:93:7a:bc:51:dc:85:38:6d:36:30:57:64:45:65:25:fd:3e:
8d:1f:bb:42:97:84:3e:48:66:1c:1e:34:cf:71:7f:12:d3:a1:
0f:aa:47:ce:94:b9:ca:7d:de:36:7a:4c:b0:c1:d3:32:a4:44:
f2:3b:17:03:4a:c6:1b:7c:0b:1b:50:c6:1f:7a:5f:0e:86:8b:
e7:06:71:43:c4:da:66:42:ee:f5:55:96:05:13:52:19:2f:f4:
b5:5b:3c:15:ef:00:44:fd:c1:c9:9e:dc:f5:57:48:d8:a9:35:
26:d8:9c:7b:db:65:68:36:b5:fb:5b:75:65:3c:41:c7:93:21:
35:bc:eb:d3:2e:0c:f4:c7:8f:ad:a3:01:7a:bf:ef:90:6b:66:
43:30:dd:f7:7e:a1:08:44:a9:f6:c2:0a:94:78:b1:c8:a2:b8:
72:a0:0e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:51:36 2025 by rpki-client