Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
File: p-cKBbmGOc165X_rGkCzZ-ycQ60.mft (raw, json)
Hash identifier: Fk+FhhR5KigEBjFAHJfuaC/iABTZTPMoIQZsawatysI=
Subject key identifier: 52:43:EC:12:0B:DA:14:A0:F6:D5:BC:A8:F6:F7:59:3E:8A:3C:BC:7E
Authority key identifier: A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
Certificate issuer: /CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Certificate serial: 0198D6CD54B0CE39F997E9EEADE77EFAB327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
Manifest number: 0A8E
Signing time: Sat 23 Aug 2025 12:00:37 +0000
Manifest this update: Sat 23 Aug 2025 12:00:37 +0000
Manifest next update: Sun 24 Aug 2025 12:00:37 +0000
Files and hashes: 1: fbHkL-NwzOez_gqY2PAh-dqPCjE.roa (hash: Q4MsLL7SIokgLjLmWwHX1Dj+xIpsxjtJ9IG++E0gJUc=)
2: p-cKBbmGOc165X_rGkCzZ-ycQ60.crl (hash: Lbm1o8bpGNMpx4XCrNIj6n240puS81d6tznfK9F5VnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:54:b0:ce:39:f9:97:e9:ee:ad:e7:7e:fa:b3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Validity
Not Before: Aug 23 12:00:37 2025 GMT
Not After : Aug 24 12:00:37 2025 GMT
Subject: CN=5243ec120bda14a0f6d5bca8f6f7593e8a3cbc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0b:8e:9a:ac:0d:78:84:44:a2:95:eb:cd:f9:
d1:4d:2a:ac:5c:80:8b:8f:92:68:e5:90:0b:59:41:
69:c6:ba:c3:b6:cb:6b:fe:c3:0a:2d:0a:11:28:fe:
6c:3a:c0:6a:37:e7:8c:df:c5:60:26:18:a4:73:c9:
83:85:dc:ee:30:6e:0a:f3:56:8b:50:51:ca:0c:1b:
5e:01:3d:e6:3d:03:fa:f7:87:09:7c:37:74:6c:f2:
41:fa:53:8a:2a:c5:49:e4:4b:e4:14:e5:f5:6e:5e:
a8:7b:08:d7:28:5c:11:a0:40:a0:7d:72:be:a1:39:
2f:ce:fa:d6:f6:f1:f5:d6:0f:b8:4d:26:d6:2f:88:
1c:34:cc:f0:2e:bb:11:33:12:72:b4:2c:0a:a8:4f:
05:cb:e7:9a:34:3f:b4:52:29:ff:fd:6f:4b:74:5a:
0c:13:41:5b:15:1b:8a:c0:56:15:07:0b:46:0d:57:
93:91:03:b0:29:52:fe:37:58:05:57:3c:e2:c8:9e:
90:69:67:1e:e0:0e:47:3c:73:5e:4c:95:37:9b:8f:
6f:64:53:a0:9c:9a:9a:63:ad:f0:f9:01:fe:5a:56:
24:21:b2:d2:be:83:52:ff:c2:6f:bd:94:ab:91:a5:
75:8f:b3:08:fc:74:d0:0e:9f:a1:d6:70:78:ce:18:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:43:EC:12:0B:DA:14:A0:F6:D5:BC:A8:F6:F7:59:3E:8A:3C:BC:7E
X509v3 Authority Key Identifier:
keyid:A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ee:e8:53:c1:68:91:17:18:45:9a:a7:a8:89:8d:86:32:9a:
dd:f6:35:9e:c5:5c:2c:ff:d6:b1:42:37:c6:6b:ec:cf:13:09:
79:cd:20:b6:de:e2:4e:11:ad:0e:20:46:5d:52:d4:92:15:3a:
df:fc:f7:b4:e4:19:e2:2d:cd:b5:74:80:b0:e6:b1:cb:32:5e:
e2:80:68:6c:91:f2:a7:a4:e6:5e:4e:42:8f:c8:e0:6d:a3:26:
be:4d:5f:3a:95:44:b6:61:0b:79:c7:87:b6:43:41:68:85:67:
b9:67:72:4b:b6:ef:ea:a7:8e:93:4c:ca:b8:3f:40:25:78:37:
5e:19:ec:96:d7:72:fe:0c:ed:e6:2b:e0:a3:26:7f:bc:5c:21:
3c:ae:3d:46:97:c4:67:05:c8:46:a2:41:05:fb:46:d7:72:97:
69:85:3b:95:a4:45:6b:b6:89:02:c2:36:3f:bb:3c:b5:30:ae:
30:4b:0e:0c:b2:5b:7d:83:36:28:54:69:a1:87:7f:29:b2:6c:
b9:69:bf:a0:ee:d7:42:5c:ae:73:df:ff:7d:dd:fa:7c:25:05:
15:56:7d:22:e9:5f:f3:17:ec:ee:5d:51:06:f0:21:b7:16:05:
ef:fb:b1:c8:58:cd:e2:0b:d6:e0:c8:4c:c8:b5:6c:bc:0b:0c:
ea:9a:c1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:39 2025 by rpki-client