Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
File: d8jZS9834PkAzWqMQizbFNl860Y.mft (raw, json)
Hash identifier: Lsa/rwoc92+mXvvPCB6oAlavgAEMWXBl12i/9RybuNc=
Subject key identifier: B6:85:23:89:48:AF:A2:D1:39:D7:D2:01:37:6C:79:3C:C0:FC:95:5E
Authority key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Certificate issuer: /CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Certificate serial: 0197B6D72D22EF1D7E49850F75E9732E7AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
Manifest number: 013A
Signing time: Sat 28 Jun 2025 14:00:44 +0000
Manifest this update: Sat 28 Jun 2025 14:00:44 +0000
Manifest next update: Sun 29 Jun 2025 14:00:44 +0000
Files and hashes: 1: YhU5HITXmEzEZK077V2NUQi5G0E.roa (hash: hsmvHe6gnKNA2Q3OE6zeLGrGjvqCoU3tN+crhtSom4Y=)
2: d8jZS9834PkAzWqMQizbFNl860Y.crl (hash: lxOZB7QdAc8/DEYZ14nGkST5/+bJIRUFXprohBHxFyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2d:22:ef:1d:7e:49:85:0f:75:e9:73:2e:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Validity
Not Before: Jun 28 14:00:44 2025 GMT
Not After : Jun 29 14:00:44 2025 GMT
Subject: CN=b685238948afa2d139d7d201376c793cc0fc955e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:29:a0:a8:fa:d6:41:71:03:7b:75:5f:44:
e6:28:21:23:48:98:9a:9a:62:e0:4b:c9:c1:b2:13:
15:82:aa:59:ee:0b:28:bc:48:f2:7a:c6:38:81:0a:
01:91:7d:f9:d3:e4:0a:9c:0b:a7:79:49:17:22:c4:
52:99:12:54:83:5b:53:df:d5:45:e2:75:97:df:00:
13:fe:e0:83:80:0c:1c:99:ed:f2:46:f0:5e:5a:0d:
fb:6f:45:1f:19:99:f8:7b:7b:f9:8e:08:07:3f:f3:
8d:b8:86:b8:21:ae:7b:ac:69:fd:35:2d:71:1e:e4:
6e:12:be:b6:cc:cd:57:84:db:a2:09:de:06:87:9f:
15:1c:1b:f4:c5:10:39:c2:f3:81:81:74:d6:5d:d5:
b3:03:33:ca:fd:15:2a:fa:50:89:e3:8e:06:5b:d6:
b7:d5:5f:8e:5f:64:d9:88:64:b1:29:e5:54:10:67:
94:07:af:41:86:a8:ef:65:5a:92:c6:7e:a0:84:b0:
cc:ea:f2:c4:a1:e3:db:e3:0e:a0:53:cb:9f:02:c0:
aa:56:7c:12:36:81:39:2c:c3:bf:66:e6:d7:7f:86:
da:43:75:64:69:4b:bf:3d:f6:92:a1:d2:1a:7d:cd:
93:23:2b:e1:ec:11:aa:b3:4c:7e:47:5e:ab:2e:2b:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:85:23:89:48:AF:A2:D1:39:D7:D2:01:37:6C:79:3C:C0:FC:95:5E
X509v3 Authority Key Identifier:
keyid:77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8d:99:50:e3:29:24:5b:ef:7b:cd:42:87:4a:a2:b7:2e:3f:
4a:4c:7f:1c:f5:03:47:c2:ce:a4:14:ce:41:5d:a9:d0:a3:33:
22:4f:fd:ee:c0:0d:7b:f0:62:e3:73:ed:66:06:de:2f:23:da:
80:cd:94:91:6d:df:e3:d7:87:bb:4a:f0:ff:e9:1c:fd:91:b1:
59:1c:fa:75:f4:e3:6b:f3:ef:b1:96:bd:93:a8:4a:c2:51:93:
22:21:88:d8:f7:bf:9c:a0:b6:33:ae:5e:71:07:28:08:d1:a0:
b6:33:17:0d:fd:65:ac:03:ec:47:f4:f0:67:06:c7:24:f5:df:
f6:c5:1e:70:d0:7a:85:cb:3c:dc:d8:e1:a7:bb:ce:8f:d9:61:
11:bc:5e:b8:b9:e7:cc:22:1b:a6:65:21:db:6a:ec:14:3f:f2:
28:70:f5:50:9f:54:ad:02:9a:3a:03:10:2d:66:1a:01:ce:b1:
81:6d:d1:fe:d6:f9:59:62:d6:6b:fe:98:98:50:86:3b:7f:19:
b7:e5:5b:a3:b0:99:b1:d0:76:4b:43:fa:eb:c9:40:da:d5:f2:
6e:52:bc:55:72:dc:11:6e:69:fd:79:c3:d1:ce:1a:f5:34:be:
fe:dd:06:73:aa:79:a6:2f:a6:6f:4b:28:eb:88:d6:30:bd:63:
19:1b:0d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:33 2025 by rpki-client