Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: ptI2H67bedp8F8t8HIzgBNsulChwkFABwVulsjzfU3o=
Subject key identifier: 85:F1:E2:FD:C0:8F:1F:8C:D4:E1:10:FC:4C:A7:E5:FD:77:3C:86:7C
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 019749D5DC3D449DA273F8844A1C5F1E01D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 0F7A
Signing time: Sat 07 Jun 2025 10:00:41 +0000
Manifest this update: Sat 07 Jun 2025 10:00:41 +0000
Manifest next update: Sun 08 Jun 2025 10:00:41 +0000
Files and hashes: 1: 8Wti1PH3KuI5W3Ps9JfxSql0m7Q.roa (hash: CpKe22p+vfF1GPX/Ydl6oGQUK80PsEj4zMJRNQ1KdVw=)
2: ON3iIV_oOMJOwBGtDykVdsbeibU.roa (hash: 9WvGCqlVAIcwLRzryj0uvMHkAzQLE90GQaNR429D0NE=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: ZVNKH5xJvzPSw5ZbbUukui15cinIAQohwxD2llW4j8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:dc:3d:44:9d:a2:73:f8:84:4a:1c:5f:1e:01:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Jun 7 10:00:41 2025 GMT
Not After : Jun 8 10:00:41 2025 GMT
Subject: CN=85f1e2fdc08f1f8cd4e110fc4ca7e5fd773c867c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:e2:01:c9:a0:43:87:6f:79:ae:53:0f:5c:
09:bd:d5:45:72:f1:1e:fd:66:b6:2a:23:61:9d:b3:
96:50:d2:47:62:41:1d:0f:a4:e6:0e:35:14:66:59:
7c:aa:b0:91:23:de:12:c4:59:68:fa:83:ba:14:ff:
d2:7f:4c:54:c2:5e:0e:51:a5:ed:b1:f1:f3:0c:76:
42:46:b3:8f:74:ce:22:dd:3e:fa:42:a5:84:71:8c:
4c:26:09:61:3e:fb:ee:e1:63:aa:02:7a:01:23:b0:
39:a7:6b:6b:6b:d4:fc:ad:d0:31:c9:4b:49:68:1f:
97:19:6e:85:83:c8:16:f7:9f:4d:2f:df:b4:c1:ed:
de:b5:fd:4d:26:6a:cb:e3:e0:20:c5:0a:3a:bd:90:
fb:6f:87:82:7d:21:07:11:eb:f7:37:ff:a0:ff:61:
a2:14:ff:63:38:07:a9:cc:9c:ad:d9:65:e1:ca:e8:
14:ef:98:41:7c:cf:6c:05:8c:2f:ba:ff:6e:5a:6b:
88:d4:71:36:08:1e:c4:90:7c:a2:08:09:08:cf:37:
40:22:1d:e8:7a:8b:a4:9b:73:b8:3a:fe:e9:3b:89:
5d:44:69:7f:76:2b:14:6e:42:46:7b:66:29:96:f9:
1e:0d:24:ff:11:c1:12:87:15:4f:62:b3:43:f2:6a:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F1:E2:FD:C0:8F:1F:8C:D4:E1:10:FC:4C:A7:E5:FD:77:3C:86:7C
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:db:1e:f4:3e:26:19:a5:cc:7c:fc:2d:9c:cc:57:96:58:9c:
78:a3:71:6e:a1:02:90:e4:73:96:44:98:c8:e3:73:f8:63:36:
39:39:99:40:a1:02:74:18:78:ee:33:94:4a:91:3f:cf:70:f0:
05:06:66:d6:2a:25:29:dc:83:d2:1a:65:7d:72:e2:9c:14:f4:
d9:75:57:c2:65:a4:8b:4f:59:f3:16:52:6a:d5:d8:39:f1:c8:
e6:ee:ad:6f:53:22:e6:60:ae:af:52:d6:cc:61:b9:39:2a:17:
57:fd:b4:0c:a1:11:de:dd:a6:8f:df:8f:a5:22:64:e1:2d:06:
e2:9a:04:00:69:2c:a0:75:c8:e5:e6:c7:f3:20:35:bf:cd:ab:
2f:2c:cd:4c:63:7d:9b:cd:ed:b2:3b:e3:9c:a8:4a:22:ad:2d:
6f:0b:6f:18:7e:36:b3:88:d2:fa:e8:78:9c:64:31:33:34:99:
55:2d:3a:91:a3:d0:39:4a:d4:b7:88:4c:24:b1:41:71:82:de:
ba:6f:4f:94:41:2e:85:01:54:33:cb:e5:58:9d:3b:b5:42:34:
04:5e:a8:46:5a:1d:f0:26:5c:8c:11:3a:9d:07:a1:04:1e:16:
ed:43:f4:22:16:6c:44:b1:f9:83:ff:09:95:fb:7e:f6:41:f6:
cf:c1:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:24:39 2025 by rpki-client