Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
File: r8GT7hHlRxYWn5TI-THq4fyFSSE.mft (raw, json)
Hash identifier: a71NqhYwz0ZsT3TWvo7ogMqNjLZOqU8VK4mAk/hdcYc=
Subject key identifier: 48:B8:77:A3:11:AE:23:9E:3B:83:49:96:69:07:F1:B9:E9:8C:87:E7
Authority key identifier: AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21
Certificate issuer: /CN=afc193ee11e54716169f94c8f931eae1fc854921
Certificate serial: 0197C424F49F552A51E407BBCB486796FC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
Manifest number: 0B0F
Signing time: Tue 01 Jul 2025 04:00:45 +0000
Manifest this update: Tue 01 Jul 2025 04:00:45 +0000
Manifest next update: Wed 02 Jul 2025 04:00:45 +0000
Files and hashes: 1: AaiQ-SNQmt6l5xOeIk4PwVHWfh4.roa (hash: 6CQTrWnDAV45WpOAHO1NfVL9iDI/ELlZY8vizp+bA9s=)
2: r8GT7hHlRxYWn5TI-THq4fyFSSE.crl (hash: p2bPPSrvZ8T9tZP47O/SLTqyR9gd/ZuO2Qaum0KJ5Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:24:f4:9f:55:2a:51:e4:07:bb:cb:48:67:96:fc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc193ee11e54716169f94c8f931eae1fc854921
Validity
Not Before: Jul 1 04:00:45 2025 GMT
Not After : Jul 2 04:00:45 2025 GMT
Subject: CN=48b877a311ae239e3b8349966907f1b9e98c87e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:0a:7a:e3:36:bb:be:f2:62:3f:30:24:29:
30:08:4e:23:a4:98:e8:68:5d:19:02:02:2b:2f:af:
9e:8a:77:17:dc:e6:62:34:68:c6:61:f5:aa:50:af:
83:d8:14:22:27:a7:f0:5d:69:81:7d:5e:83:a7:15:
35:05:8c:00:4a:92:fe:5b:4d:b6:8e:06:40:6c:b0:
e9:5c:ae:1c:e2:ab:f2:5e:e4:c1:27:49:d7:86:99:
30:49:50:02:fd:0e:25:0b:01:ac:fe:ab:85:ee:cd:
6d:e2:5c:39:73:d6:3f:dc:d4:8c:dc:09:a3:5f:0d:
c6:00:f6:0f:a9:b0:48:8e:b0:64:50:bf:8b:fa:e4:
be:9e:02:4e:19:90:c0:5f:6c:4c:ad:b1:0e:d6:7d:
df:70:36:35:45:0d:06:ad:9f:68:72:20:2e:47:f7:
f6:b4:84:41:67:a7:1a:99:7f:79:02:5d:6a:c0:78:
11:e0:10:b9:eb:16:ac:5b:d6:9e:85:0c:b8:da:b4:
29:ae:bd:db:3a:15:c9:29:9b:5c:ed:c1:dc:f2:3a:
27:b2:2f:9b:61:2b:ec:f7:0b:84:8d:03:24:fa:a9:
fa:bf:b2:75:41:fb:dd:43:c6:11:37:8c:27:32:25:
ec:73:6f:0d:d2:8d:55:6e:73:97:e9:8e:d2:48:8d:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B8:77:A3:11:AE:23:9E:3B:83:49:96:69:07:F1:B9:E9:8C:87:E7
X509v3 Authority Key Identifier:
keyid:AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a6:a5:7b:d4:fe:7f:7b:13:d8:27:68:cb:3d:5d:01:7d:ca:
be:7c:89:bf:77:d0:ca:a1:9b:cd:ee:27:e6:1d:a4:f8:fd:16:
3f:90:f7:b6:42:00:4f:3f:75:ba:6f:d3:82:b8:4a:9e:c0:70:
95:68:71:8a:44:3d:be:62:30:fe:49:de:90:e6:25:06:dc:3c:
82:62:52:7b:2b:32:bc:8c:a2:1e:7f:9c:7b:e4:69:41:c3:32:
a1:ab:14:b8:5e:1d:bd:3f:be:ca:31:76:1d:de:8d:d0:60:29:
75:4c:6b:b1:78:f2:f4:00:dc:c3:c6:89:2c:90:66:7c:d7:10:
51:22:9d:7d:8a:f7:ce:78:91:90:5e:2c:d9:fa:80:b6:ec:bf:
37:79:b7:41:b1:4f:fc:87:14:7d:c6:54:24:0b:33:a6:61:c8:
c3:30:01:1f:9a:58:93:c4:e7:80:56:48:73:3c:4d:32:b6:5d:
d8:5b:69:0b:9c:e7:c5:e8:fb:84:36:21:6f:d0:ff:32:ee:51:
9c:3e:20:da:82:b4:7b:60:29:f8:a0:1c:b7:a3:36:9c:32:3b:
8a:ef:41:1f:69:12:a4:97:48:67:ea:7a:e3:60:70:15:da:68:
88:30:61:d8:d5:8d:9d:3a:c8:70:f8:1f:dc:20:1a:5f:2d:1f:
d6:7f:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:22:46 2025 by rpki-client