Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: v57ec33QPWyImPeg5TW7rbBNafgO0lTcZyH8Obcddls=
Subject key identifier: 2C:9E:0A:4C:48:63:D4:8A:AD:6B:70:5F:A1:9A:AE:84:62:B9:50:66
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 0197B77C6E55D0453594D47A7A1CC53B331B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0A22
Signing time: Sat 28 Jun 2025 17:01:14 +0000
Manifest this update: Sat 28 Jun 2025 17:01:14 +0000
Manifest next update: Sun 29 Jun 2025 17:01:14 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: VltDXQ7wo3p8PSVmuqHCqy9xQwtFC6yBZCTVdhAODvQ=)
2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6e:55:d0:45:35:94:d4:7a:7a:1c:c5:3b:33:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Jun 28 17:01:14 2025 GMT
Not After : Jun 29 17:01:14 2025 GMT
Subject: CN=2c9e0a4c4863d48aad6b705fa19aae8462b95066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:cf:12:1c:cb:f9:cf:57:8c:b8:f5:f7:da:
5f:22:bf:c0:36:00:c5:88:38:be:f7:dc:68:17:cf:
63:c5:2c:66:64:12:7e:99:94:1b:14:4a:bf:48:34:
52:71:43:46:f0:4e:f8:6c:ae:79:3e:e3:74:75:59:
59:79:ef:8c:f2:02:8f:27:12:46:ad:59:1c:ae:21:
a2:a6:e3:27:4e:6b:4e:b5:57:c5:63:ec:08:94:43:
ba:83:35:3d:3b:2c:3e:1d:52:de:3e:08:c7:9a:83:
41:10:ae:df:81:7e:17:2f:fc:0b:81:85:e2:4e:01:
47:b3:02:bf:03:b9:d8:3d:ca:8d:6e:b1:0c:7f:9b:
3e:f3:fa:dd:4d:49:e4:f3:37:6d:cc:39:46:7e:6e:
3f:bd:f1:53:77:38:20:90:0b:d0:ea:71:1a:e3:17:
76:fd:bd:f5:c1:bd:22:a6:bb:41:00:d3:c0:23:85:
4d:7d:f9:7e:ef:7c:1f:79:90:b7:eb:81:10:05:39:
bc:55:5c:b7:71:c9:0f:0e:49:79:14:72:b4:de:e7:
91:95:8c:0d:65:04:80:49:c5:99:4c:50:67:15:d5:
ec:cb:87:92:59:48:b9:2f:f6:85:67:be:33:36:f6:
f9:b6:30:97:0b:49:fc:cb:76:4d:da:2f:d1:3e:51:
b0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9E:0A:4C:48:63:D4:8A:AD:6B:70:5F:A1:9A:AE:84:62:B9:50:66
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0f:a5:ea:fe:d1:01:1f:be:a8:dd:52:09:f4:64:25:4d:23:
82:17:76:16:3c:5c:fa:a8:26:43:ca:35:f9:fe:5f:b6:57:a5:
0a:68:58:98:8d:b0:0a:21:b7:a6:19:66:fb:c1:45:4e:6c:73:
6b:78:d5:97:d4:12:cb:cf:5d:24:57:41:bd:38:91:4e:45:bf:
45:76:9f:1e:79:75:99:c8:c0:ed:43:7e:6c:2d:d7:7c:7b:95:
1b:ae:00:bd:cf:30:2c:45:25:95:a9:fc:fa:b4:9c:73:ee:c7:
99:8c:71:ec:38:1e:a3:f2:b0:c8:ef:77:b7:ca:bf:52:3d:a0:
1b:96:7d:5e:eb:71:aa:8e:a0:f0:ab:b3:c8:24:ff:82:15:6b:
46:b6:bf:91:82:01:18:37:d0:83:86:96:43:c2:9b:26:d2:5c:
2a:10:37:be:b9:3b:2d:60:4a:1f:8b:1d:dc:18:8b:38:2b:6c:
d3:44:0b:c4:51:93:53:e3:2c:5c:48:3c:74:2c:2f:f6:c7:82:
4d:b1:01:26:70:f8:11:93:cf:64:de:00:f5:3e:b2:b6:79:b1:
d7:17:90:ef:fe:9c:e9:c6:b7:75:e6:90:87:78:4a:b1:c1:52:
35:0d:9d:e0:7f:ff:4b:56:05:ba:6f:f2:ef:1d:dd:7c:16:ad:
6c:a3:de:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:22 2025 by rpki-client