Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
File: S_2cFAbIyhL_UAsf1MgAQUai2ks.mft (raw, json)
Hash identifier: /dvnmu47hkF9s3b4fg1Ycl5Er6g1rRlFMzJWxqcTyGs=
Subject key identifier: F8:E3:FB:C1:16:4D:91:FB:24:2D:FF:00:5E:35:89:C3:94:86:85:94
Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
Certificate issuer: /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Certificate serial: 0197B6D76BF3F440340FB3E6C8356397B362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
Manifest number: 013A
Signing time: Sat 28 Jun 2025 14:01:00 +0000
Manifest this update: Sat 28 Jun 2025 14:01:00 +0000
Manifest next update: Sun 29 Jun 2025 14:01:00 +0000
Files and hashes: 1: S_2cFAbIyhL_UAsf1MgAQUai2ks.crl (hash: NkheoQmAxN4gHJ8inkB+xF1Hp4t+Ft0hFwmn5AXdJlw=)
2: nMfaA-8pTlQ2Ik01XjOzaXsz8S4.roa (hash: 9j/+zG1+gdxJdHggAHxvXOVulCvMT9Y+f9TRZ3Vf7+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6b:f3:f4:40:34:0f:b3:e6:c8:35:63:97:b3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Validity
Not Before: Jun 28 14:01:00 2025 GMT
Not After : Jun 29 14:01:00 2025 GMT
Subject: CN=f8e3fbc1164d91fb242dff005e3589c394868594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:96:12:87:66:6d:3f:b1:01:f1:e6:e4:da:
00:9c:33:a9:cd:be:bc:f7:95:97:86:ba:e9:e2:5a:
b1:ec:ac:db:56:b6:e5:a8:b4:73:7a:ba:b3:eb:df:
9c:24:66:b0:77:b0:35:54:31:c4:68:3f:51:70:14:
12:f7:99:6c:c8:cd:cd:72:27:e1:e2:f3:b9:9c:53:
12:55:df:5d:87:d3:98:9f:49:c4:65:da:15:37:84:
09:ec:c1:d0:e0:66:b6:e0:0d:1e:e7:d6:12:c4:75:
74:ee:47:44:b9:25:15:a1:7b:c6:8e:50:36:8d:78:
83:e7:1b:18:eb:72:b0:e0:bd:c7:9b:94:87:86:ba:
59:e1:2c:a3:f7:7e:67:6e:66:0c:4b:a5:43:04:8e:
e3:ff:26:1b:19:0a:6c:06:45:7f:0c:0e:ec:32:95:
9c:a2:0f:25:49:7e:37:06:43:e4:f1:ad:c1:40:81:
e5:bb:16:58:8c:12:df:94:63:ca:8b:a6:e5:eb:6c:
5d:f9:ca:c8:a0:15:4b:a5:6a:d7:62:8a:65:5f:2c:
9d:cd:36:2d:98:44:1d:fb:0a:30:4e:7c:6e:b7:10:
bd:08:d6:24:04:8e:00:d6:f3:8d:f3:ee:05:b2:a0:
eb:53:ec:43:32:a7:0e:16:ed:16:dd:b5:45:c9:b1:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E3:FB:C1:16:4D:91:FB:24:2D:FF:00:5E:35:89:C3:94:86:85:94
X509v3 Authority Key Identifier:
keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fb:67:42:3f:c0:b6:ad:93:21:ec:89:2c:ef:8e:60:35:89:
d3:18:3c:49:81:d6:d5:21:8c:a5:dc:c7:ae:c4:91:e6:cf:fb:
05:8b:ee:09:57:ae:e5:ee:49:80:15:e4:3e:f2:80:7e:b6:1e:
f1:12:f2:a4:b3:24:6f:39:0f:f7:7f:7d:cf:78:18:10:8c:a0:
06:a5:fc:cb:fe:10:96:97:9a:77:c6:07:a9:ab:b1:80:6e:80:
87:a3:fd:7a:f5:d0:ba:db:05:93:73:f2:03:1c:1f:da:e6:90:
6a:87:20:d6:67:4a:4c:87:2b:e3:54:5a:bc:f4:15:8f:38:da:
0e:53:39:49:49:05:b7:25:15:b5:07:0b:65:b4:2b:6c:87:d4:
60:12:90:42:fa:ac:62:f0:e0:9f:a1:5f:56:70:60:4d:27:c0:
20:89:73:c7:65:13:1e:ac:36:a2:5e:5e:d2:a2:b7:0c:6d:8a:
f9:eb:9e:c0:7b:99:b0:5a:27:87:8e:0c:7a:60:6c:27:d9:92:
af:14:bb:a4:80:86:4a:7e:95:eb:90:1e:f3:24:da:13:5d:ba:
b3:ee:b8:08:f3:81:16:bb:df:4f:3f:5b:4e:c8:2f:dd:00:61:
0f:9f:4d:ae:71:f7:df:bf:62:0d:41:e0:49:1b:c5:93:16:a8:
a6:f7:4f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:43 2025 by rpki-client