Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File: acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier: dvjJTk9/l5ceLNI2EEboXObSIBUReTj74QHyYeeMFg8=
Subject key identifier: 96:70:43:CB:68:04:66:9F:0B:20:57:71:0D:43:DF:48:98:07:EE:47
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 0197B6D74ABC18CA0A201F6D40FC7270D8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 14:00:51 +0000
Manifest this update: Sat 28 Jun 2025 14:00:51 +0000
Manifest next update: Sun 29 Jun 2025 14:00:51 +0000
Files and hashes: 1: RkLlZjAasSrGiOmklIx_O-q25zk.roa (hash: Gwgv1/PPnszGyK+vUndl8BVc2mtdNprpDuh7CKowocQ=)
2: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: VXnBeqHuZqK/+eko0M7D7mbEFFVwsHPi1goSUQ1QMgk=)
3: iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa (hash: KCNb4IsFzC9RfJdx7AFbupcSXkYx7SjrNORvTA5EESA=)
4: jyBvJ0cOfKi9WwiQt60pyraI-oY.roa (hash: y3Y58DOqvcc4jvZsYybVxfvwXagMIIOulZAsS9iNgBc=)
5: s9L9BNwHKJhVemHf55wRw3Mdhbk.roa (hash: beDBJWuacokDomSZPce/uodduuYfGqhfMVgZDVtONCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4a:bc:18:ca:0a:20:1f:6d:40:fc:72:70:d8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Jun 28 14:00:51 2025 GMT
Not After : Jun 29 14:00:51 2025 GMT
Subject: CN=967043cb6804669f0b2057710d43df489807ee47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:7e:3b:a5:8d:04:a8:c6:80:e1:33:6b:79:
c0:b7:f1:0c:a0:d2:4f:03:c8:93:e6:6c:03:76:2a:
2c:29:40:1b:1d:c7:04:f9:e7:bf:e2:e6:e4:0f:aa:
74:2c:3f:24:0e:f6:31:83:dc:e1:06:97:41:ac:b0:
36:1c:e3:c8:48:63:1b:8b:e4:7c:50:dd:53:c9:d5:
71:6d:19:06:37:09:0e:c9:7c:22:9d:c6:49:c0:07:
54:80:7f:3d:a4:12:30:48:a2:2f:6c:1d:cb:ba:70:
66:35:14:df:75:36:ca:99:2f:c0:f1:f1:2a:3a:35:
23:5e:ba:cb:d3:f6:cf:09:2a:c9:51:59:a3:51:2e:
95:be:b9:dc:31:ca:cc:aa:85:23:a0:2b:98:45:e5:
87:c1:c7:1f:3b:24:10:20:b4:09:c4:78:52:37:4f:
bf:c0:12:aa:a5:d7:97:05:95:93:37:2c:44:c6:b7:
f1:5e:bd:fd:e1:32:56:43:5c:21:90:8e:24:1a:1f:
c9:4f:9b:85:fb:15:85:c0:56:0c:2d:ae:1f:ec:28:
ba:e5:be:5a:ea:af:1b:50:e3:bb:de:07:83:f4:69:
e2:bc:1a:69:1b:ec:fb:da:42:59:73:0d:c0:8c:31:
4b:3a:d0:88:a2:3f:25:b4:f6:77:1b:6f:66:77:c4:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:70:43:CB:68:04:66:9F:0B:20:57:71:0D:43:DF:48:98:07:EE:47
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c0:08:3f:53:d9:4a:74:25:f6:3f:53:a3:c4:6b:99:57:19:
ed:e0:e0:4b:1c:d6:49:06:ee:0f:79:f1:ca:03:0f:85:48:68:
fe:c1:2b:e5:b2:98:3b:c2:e6:f7:de:01:6f:20:8e:7e:90:5b:
fa:88:c7:2e:1c:ad:5b:9d:b6:97:1a:58:b7:43:0b:dd:33:d3:
0c:26:ff:1b:90:9f:a9:d5:76:11:d4:7a:fa:9e:85:2f:ef:c7:
10:84:a8:67:62:d5:2e:9d:13:f4:1e:63:8f:d5:90:2f:e3:8c:
ea:82:88:64:09:75:5c:f0:e2:a8:79:0b:24:32:5d:c8:41:be:
6d:62:dd:12:03:83:42:f5:a7:7a:50:47:57:99:c8:31:48:86:
ad:e4:0a:5a:42:25:2a:59:03:83:73:7a:8c:1a:c5:c1:69:f3:
b4:c7:ff:8a:45:27:0b:fb:91:6a:c3:7f:25:49:b9:e1:cf:52:
9f:71:74:dc:a8:10:91:a0:75:e1:cd:91:14:4b:7e:5e:db:c9:
e6:91:fa:9f:9c:f1:95:f2:72:a9:29:35:44:79:10:9a:10:10:
b2:6c:62:7b:33:5a:b2:41:4c:6c:1a:4d:78:d5:6e:cc:e1:24:
40:c3:5b:f0:20:62:11:35:b5:1e:5c:48:b1:05:b4:27:59:cc:
02:ec:ce:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:22 2025 by rpki-client