Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: SmQxyHc5AMDdp1BWssDJPB1QXyF6hkWaPYE8HJzIQFg=
Subject key identifier: CA:FB:50:34:99:81:3C:BF:53:B4:3B:22:D2:92:7E:24:57:4B:28:44
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 0197B7EA7D3018DF126CCF5C08709D0BC739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 19:01:27 +0000
Manifest this update: Sat 28 Jun 2025 19:01:27 +0000
Manifest next update: Sun 29 Jun 2025 19:01:27 +0000
Files and hashes: 1: Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa (hash: gVw1MMRDs2rY597vN0xWVEhdeHW2cAUodm7HsTOIyc8=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: dNdTWlEX0N3XJcf7GiOTPJU4tWAoDO6ggm+Zo4Kd5jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7d:30:18:df:12:6c:cf:5c:08:70:9d:0b:c7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: Jun 28 19:01:27 2025 GMT
Not After : Jun 29 19:01:27 2025 GMT
Subject: CN=cafb503499813cbf53b43b22d2927e24574b2844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:ec:f9:24:4b:5e:05:2e:3e:4c:a1:f9:dd:
bb:98:28:0b:ab:1c:30:8d:57:3d:69:bb:07:fd:05:
c1:dc:e9:d4:dd:4b:81:7e:c1:8e:73:ad:58:ff:75:
9a:42:f3:9b:eb:8e:de:1e:d4:b4:a5:57:37:9a:eb:
a4:f3:5e:25:f7:21:1e:85:e3:45:a8:0f:21:a7:70:
03:72:92:25:1c:08:c1:e8:e4:20:61:c1:38:d7:41:
00:b4:8a:89:1c:89:06:8c:af:d0:03:68:64:02:f5:
fd:f2:0d:da:78:62:92:19:10:e5:a7:bf:1a:67:ba:
11:4f:91:6e:e1:bd:b1:3d:dc:a7:7a:1b:b3:13:59:
ed:c3:6f:a7:20:60:65:2b:24:0c:7e:6c:06:e8:90:
e4:01:1c:85:18:61:8f:ba:e7:b6:03:6b:36:aa:5c:
fc:12:e3:bb:f9:24:20:17:41:f6:e9:aa:4d:98:1b:
28:c8:aa:10:d0:ae:c2:5b:99:e9:ef:58:03:86:e5:
c8:e7:50:1b:cf:90:86:c0:83:a6:45:a3:13:f2:a9:
cd:1e:51:c8:6c:80:b2:29:a6:c6:12:67:d7:df:8b:
53:e3:38:e2:f4:67:2a:0c:09:77:af:af:82:28:e3:
ac:bb:76:77:3d:cb:f7:66:9e:e3:52:1b:f4:0c:2d:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FB:50:34:99:81:3C:BF:53:B4:3B:22:D2:92:7E:24:57:4B:28:44
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:86:c1:34:6d:33:90:b0:ea:82:3c:c9:02:07:28:62:c7:46:
e1:0d:a6:fc:7b:f4:4d:b9:4a:80:e4:f7:45:61:b3:55:38:2e:
75:fb:bc:e4:5a:56:a8:7e:9f:1b:aa:c4:1d:57:de:bd:2a:05:
a7:b0:8e:6d:47:10:96:71:e6:6a:5a:85:44:80:ad:c4:50:69:
75:e0:42:ef:f1:bd:54:cd:2c:4c:3a:7f:4e:aa:d9:0e:76:2b:
a1:06:e8:58:4c:84:90:c0:ce:53:dc:40:2d:fe:d7:e6:2c:cb:
a8:55:71:25:5d:81:04:3f:9e:6e:10:0e:b3:59:9a:6c:a8:0b:
e6:7e:e7:a0:32:78:c6:05:d1:fd:da:97:e9:57:36:50:25:0f:
5c:91:cf:73:95:34:ab:f4:af:f7:29:f9:d6:81:75:38:f8:88:
f0:70:2b:79:b0:fa:30:6c:7e:73:da:72:e3:90:ea:07:a5:a9:
51:53:5d:f9:ed:53:9a:04:72:af:0b:3e:59:ff:7a:56:37:7a:
99:a8:1e:b0:3a:4a:5b:c7:b3:94:e5:78:ce:11:5e:84:56:09:
3d:90:49:7b:a1:37:0b:45:99:10:38:5d:25:30:8c:60:d3:82:
3b:3b:b6:37:a3:d5:0a:98:d5:06:01:79:02:01:1f:57:b5:04:
ef:1d:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:08 2025 by rpki-client