Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: 7/p5kd9yVacDOHeHbX+w4ulj/0A6lPdaypSR54JXsp4=
Subject key identifier: 6F:03:EB:C3:AC:22:E8:5B:C2:2C:B5:80:29:AD:C2:97:DC:E8:73:46
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 0197B6D7A22A1D5CB45BBE45AAED6EAE2576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 1186
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: 6nn-10KbmPgCc6evrpm-TWzQPN8.roa (hash: o4INP15AI01CmXxJKcY1+iiTvm9rSpAtz6YN4QZ0dG0=)
2: ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa (hash: rQ9TfGtesxjebHDlAk08FQJ/mYhxwGmDbJSu6X6Tu58=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: 6Heo4Owvduc3+JH7EhhCKAlvhHN3QRQTpwbCX0iE03M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a2:2a:1d:5c:b4:5b:be:45:aa:ed:6e:ae:25:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=6f03ebc3ac22e85bc22cb58029adc297dce87346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:4c:e0:ae:11:56:b5:a1:42:0b:5e:f7:5f:
49:fd:81:41:e0:59:3a:5f:85:23:54:19:f8:3c:59:
a4:70:4c:cc:66:65:9f:fd:a9:2e:3b:89:9a:91:55:
38:0e:0b:c2:a0:c4:f4:7d:6d:37:24:17:70:6b:2b:
b3:3a:17:06:ee:54:03:53:ed:59:1f:55:10:25:c2:
46:98:63:e5:4c:3d:00:44:c7:e0:1a:37:f8:94:a5:
7f:2b:c3:90:7e:79:ec:fc:30:da:3d:03:c4:01:46:
89:97:ac:68:c5:a6:e6:30:c2:63:bf:5a:48:ff:91:
0f:b9:f4:56:6f:7e:a1:5e:47:d3:aa:1a:bc:52:54:
a5:ee:1c:b2:93:28:21:4e:3b:fb:3d:f2:1e:b0:29:
2a:27:d6:1d:93:95:39:a2:9a:56:0a:b0:8f:2a:6a:
fe:70:28:e6:33:60:fe:76:95:51:3c:78:db:73:b7:
d8:08:b3:4c:b7:ee:44:bf:a6:b7:43:ab:8b:5c:eb:
ab:94:c7:82:f7:bc:db:f8:db:5c:4b:0e:2c:e8:be:
d7:ed:73:cb:d6:17:31:8b:9b:2f:eb:4b:34:58:8d:
4b:d9:0f:76:a4:cd:c5:31:07:ba:b0:f8:ac:dd:f5:
5d:70:c6:d2:55:b9:1f:a8:4a:e7:05:45:07:45:3f:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:03:EB:C3:AC:22:E8:5B:C2:2C:B5:80:29:AD:C2:97:DC:E8:73:46
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ad:78:90:f1:9f:f8:4d:93:8a:0b:45:c2:39:b5:84:c4:84:
21:62:30:0d:8c:95:6d:b8:f2:35:77:e7:b0:48:8c:08:02:b7:
b0:c4:9d:7b:05:5d:d9:ef:e7:54:a7:7a:96:b1:00:cc:08:70:
f3:99:9b:40:eb:ee:e6:67:84:e7:b0:5d:77:43:aa:fe:72:be:
9c:09:cf:df:6f:d2:58:ce:18:5f:97:7d:cf:17:f8:3d:1a:dd:
e5:3c:10:cf:8f:1f:70:ce:0a:ef:02:c7:30:4d:ac:6d:c9:7e:
29:8a:6f:89:45:ab:ea:af:03:f4:c2:d7:26:e8:a2:01:05:1c:
1c:23:8f:6d:c2:0f:6a:a2:84:34:35:5e:8b:7f:fa:30:f1:85:
72:17:17:a8:56:bc:a2:63:72:32:f8:9e:74:85:44:72:95:e5:
28:cd:55:0a:65:06:e6:ae:1e:20:85:09:81:0f:57:f5:93:6a:
b0:1b:86:50:eb:3a:92:da:3b:cc:f0:f6:1c:9c:80:47:f6:e8:
2c:b1:fa:26:cb:68:63:85:c8:16:07:83:8f:8b:d3:a8:5d:9b:
bf:e0:57:fa:48:d6:0a:5c:27:78:05:e7:8f:90:b1:2b:29:97:
16:b8:99:63:00:22:ca:9c:c7:42:8d:f6:f4:73:fa:6b:d2:87:
11:2a:9a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:36 2025 by rpki-client