Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
File: 8CDLT5tfebnaa0gnutnFSiqAxTE.mft (raw, json)
Hash identifier: 6sLL8iWPbYl39jIYlfAztVl+HGez53WxkzC+mn7vKIs=
Subject key identifier: 78:75:BD:37:ED:50:59:2C:B8:84:E7:99:A2:00:14:06:AB:32:AD:AE
Authority key identifier: F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
Certificate issuer: /CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Certificate serial: 0197B77C233C22B15DB2214468EB62178C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
Manifest number: 0E4C
Signing time: Sat 28 Jun 2025 17:00:55 +0000
Manifest this update: Sat 28 Jun 2025 17:00:55 +0000
Manifest next update: Sun 29 Jun 2025 17:00:55 +0000
Files and hashes: 1: 8CDLT5tfebnaa0gnutnFSiqAxTE.crl (hash: +0jWAMcU+CNeE01cW/OyMg8sn6nnmV+5Z+4qVWhUV9U=)
2: amkS5SoIvujCi9yce4d8VftUldc.roa (hash: +cELHuiQeJpKMXecyPF27q6ZAbek7zvwZNYTMIlI2SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:23:3c:22:b1:5d:b2:21:44:68:eb:62:17:8c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Validity
Not Before: Jun 28 17:00:55 2025 GMT
Not After : Jun 29 17:00:55 2025 GMT
Subject: CN=7875bd37ed50592cb884e799a2001406ab32adae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:6e:ff:d5:c7:b0:aa:90:bf:22:9b:93:28:
e7:0b:00:19:8d:ba:80:a4:29:e0:72:de:0d:fe:63:
47:ca:81:6c:b3:71:b0:83:b9:46:93:4c:c6:9d:f5:
cf:f1:62:6b:d5:82:fb:11:6c:7e:9e:80:a5:5f:e2:
58:eb:69:59:a7:05:cc:f9:ac:57:e1:b7:f0:b9:18:
4b:52:2a:43:e0:be:de:b8:70:a5:9e:e5:6c:e8:70:
16:a5:be:c0:1a:98:1f:7f:4b:7b:cf:17:50:f6:6c:
41:a4:e6:31:18:ac:4f:57:44:0c:2a:a6:bc:6c:c2:
6b:30:e9:6c:ce:91:cc:c6:5e:cc:20:63:68:03:00:
0c:16:a1:22:3e:a3:40:bb:0c:03:46:f3:06:0a:6e:
25:88:5e:cf:20:4b:86:cc:b4:b6:7f:7e:07:de:f7:
5a:bb:1f:8a:a0:54:01:12:e4:43:08:97:10:83:5e:
27:1c:a4:be:40:5e:fb:99:ce:d1:ae:b9:68:68:41:
9e:c9:82:36:04:05:00:ea:5e:6a:3b:6d:86:2b:1f:
03:c2:d2:b1:55:1b:e8:e7:95:ef:4a:f7:e9:7a:55:
9e:d4:ad:8d:c7:b6:39:2d:26:f3:0d:d4:15:c7:46:
ad:b4:c8:29:ca:ed:c5:e8:cb:dc:6c:53:e5:e1:31:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:75:BD:37:ED:50:59:2C:B8:84:E7:99:A2:00:14:06:AB:32:AD:AE
X509v3 Authority Key Identifier:
keyid:F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8f:0a:6d:39:6d:b9:79:18:6f:fd:ad:61:e7:c9:d8:cb:e1:
5c:19:0d:84:22:fb:f8:8f:3b:b6:35:32:cd:4a:9f:03:ff:a9:
c9:d9:16:e1:dd:f2:54:e6:72:64:6a:79:7d:25:dc:aa:82:39:
a3:f7:68:90:81:18:d8:12:a1:45:94:b0:4a:c5:19:22:07:37:
e7:1e:46:1d:f9:22:e8:80:b0:39:3a:7f:96:a0:92:b7:11:1e:
a8:05:5d:40:b3:09:87:39:0e:b2:30:28:d9:f8:72:10:a7:91:
64:10:07:7e:84:08:b8:38:e2:8e:c9:19:74:de:80:84:9d:7d:
9c:b3:0e:f5:f7:cf:a5:c2:72:33:e9:6b:fb:97:40:ba:df:c1:
8b:60:c7:88:8c:55:62:44:b2:6e:9a:90:5a:69:68:73:6a:83:
53:d4:4d:eb:60:2f:33:39:68:79:3b:4c:c8:f2:b8:42:87:e2:
d3:d9:92:25:29:6e:45:1e:f1:16:7e:1d:f2:17:87:53:8a:47:
87:51:3c:42:96:81:49:94:68:ea:2e:e0:7f:7b:9a:b4:ac:85:
6e:18:05:ea:b0:9b:59:3b:a8:4f:fa:e2:b7:ff:71:09:ee:e3:
6d:4c:b1:22:a1:26:ae:24:38:fb:9e:32:86:6c:07:58:6c:d3:
e1:3e:a2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:40 2025 by rpki-client