
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: hVSNcVBj6PtA++jND/jJjwHuMKfMyYbKBlK94YJa3Ns=
Subject key identifier: 91:34:5A:21:D7:96:1A:62:D1:68:4E:E0:E1:8F:DF:EC:8D:0B:03:60
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 0197B5FC28FD2A737DCDFF92989728F3ACA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 13A9
Signing time: Sat 28 Jun 2025 10:01:30 +0000
Manifest this update: Sat 28 Jun 2025 10:01:30 +0000
Manifest next update: Sun 29 Jun 2025 10:01:30 +0000
Files and hashes: 1: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: 4smP/iWMrYokPQBA9KwkPbEiWijjVdi1DoWqO4uQWKo=)
2: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (hash: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:28:fd:2a:73:7d:cd:ff:92:98:97:28:f3:ac:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Jun 28 10:01:30 2025 GMT
Not After : Jun 29 10:01:30 2025 GMT
Subject: CN=91345a21d7961a62d1684ee0e18fdfec8d0b0360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b4:62:69:e6:c3:01:e3:b6:b6:e8:54:9c:76:
47:40:51:d1:de:5f:cc:10:b6:fc:54:3e:0c:a7:67:
4e:22:01:cc:3f:28:a4:b5:7d:1d:70:ca:d3:2f:f9:
17:b3:31:41:bd:e4:12:22:32:15:a4:b6:5a:91:2d:
ec:b8:db:8d:40:42:67:41:da:eb:f4:cb:ee:6f:fe:
9b:1c:18:3e:25:69:26:62:95:94:38:57:f3:0d:0b:
fb:e0:68:56:cf:e7:5a:b8:49:9f:d4:ce:fd:e4:f9:
66:a5:ce:3b:cf:86:91:41:36:3d:bd:69:f6:20:68:
04:67:09:9c:d5:27:e3:a5:9a:50:29:e1:24:39:84:
a7:56:5b:97:80:53:30:9d:0a:33:0d:a2:3d:66:6e:
95:d1:ee:cd:79:40:42:95:f4:a2:9d:47:96:89:be:
58:6f:70:2c:9c:84:45:50:66:b2:95:37:0e:65:f1:
a3:f2:fa:1b:ea:0a:c4:dd:b0:c0:f2:12:6f:20:2a:
38:dc:27:3f:1a:20:d1:1a:c6:4d:9b:a1:43:46:de:
83:6c:4a:42:b8:8c:48:d3:41:21:c3:cc:aa:3d:64:
f1:bb:2d:fb:96:e8:92:65:3a:69:8b:69:90:15:be:
d1:9d:d7:cd:0b:3d:f8:29:e9:a7:5a:ef:9b:73:6e:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:34:5A:21:D7:96:1A:62:D1:68:4E:E0:E1:8F:DF:EC:8D:0B:03:60
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:db:40:ad:bf:de:84:18:82:14:a0:f4:23:6d:b5:6f:08:b3:
b2:a4:1e:5c:15:da:7b:02:b2:bf:74:36:82:77:8c:48:0b:71:
ae:29:48:83:5e:50:b5:4e:2c:80:d4:6c:25:4f:27:e8:30:e1:
21:70:92:b6:d3:1c:d8:71:55:ac:93:73:2d:e5:7a:ad:7d:81:
e9:91:49:6f:42:e0:f0:a0:28:bb:31:bc:5a:6c:27:84:eb:c0:
eb:bf:34:a6:7c:81:08:34:b8:85:a6:0a:67:fe:36:ec:88:bc:
1b:c6:f3:04:d7:2e:77:1e:f4:04:c4:cb:35:01:3d:33:80:20:
b1:07:82:1d:97:b8:3e:bf:8e:ff:ac:19:28:02:e5:c4:ad:63:
a5:a7:af:b5:ee:ab:2d:9f:1b:3e:a5:54:0d:c7:9f:c7:2e:27:
a5:7e:1b:26:36:59:66:88:b9:6c:96:ed:05:8c:a7:18:eb:0f:
b5:dc:79:eb:70:79:4e:a6:0c:58:09:eb:71:37:76:a9:93:8d:
f4:78:9f:31:21:28:0b:15:5f:c8:23:a2:75:09:30:7c:61:f0:
f1:16:35:8d:d6:d2:ad:9f:69:a0:63:49:e9:4a:2d:78:ae:52:
fc:e9:eb:fe:2e:0c:43:1a:df:1d:1e:15:87:57:bd:cb:44:97:
47:7d:a0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:12 2025 by rpki-client