Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: sdGJWjkaCZbTG4Mq8iXvowtAR/2TJXKhoolL8gurUf4=
Subject key identifier: B5:E0:F7:C7:07:B6:4D:01:77:68:96:A7:EB:C8:D2:F3:B7:11:68:62
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 0197B6D7578BC2007A5DE55B47DE210C0CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: V4I4XMTcQFC+nNJXmpDPmIFPGktPpy/R+oojKrZBzmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:57:8b:c2:00:7a:5d:e5:5b:47:de:21:0c:0c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=b5e0f7c707b64d01776896a7ebc8d2f3b7116862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:3c:f9:17:34:7e:bc:3d:48:f8:49:f2:19:
a1:eb:04:4b:78:54:76:d0:fc:c8:c1:0a:a0:0b:31:
3a:d1:e7:a3:f1:4d:1f:0c:13:a2:86:6c:3d:84:97:
f5:ef:34:14:7a:01:76:ac:c7:4e:10:b1:d4:55:72:
75:58:60:21:62:19:17:69:16:3f:7f:4d:22:fb:27:
64:42:9a:69:98:bc:32:26:3a:84:6c:e3:7b:51:05:
f6:1b:d3:bd:4d:ae:0d:48:62:cc:36:c9:f5:c8:68:
85:1f:f5:16:e4:f7:ce:28:f8:3d:83:7f:86:95:6f:
d1:02:a3:1d:d4:8a:b4:90:57:07:ed:d6:3b:fb:ad:
53:71:5f:78:e5:1b:48:a6:1b:1e:34:88:41:8f:d7:
9c:a3:c5:c3:4b:1e:b5:31:c5:95:bb:5a:72:25:1c:
1e:f2:f0:33:a1:67:e1:f3:80:71:ff:fe:82:f9:98:
61:74:bd:7a:96:91:a1:91:36:f2:c4:1a:eb:71:01:
eb:64:e4:71:db:6a:46:f4:57:3c:66:84:a7:0b:9b:
23:35:e4:55:d8:6b:71:90:4e:9d:d5:a4:5d:93:74:
de:08:9d:ad:d8:86:72:55:53:4b:28:55:69:30:5e:
2c:d4:5c:c1:b4:65:8e:58:90:16:2c:77:b8:bb:80:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E0:F7:C7:07:B6:4D:01:77:68:96:A7:EB:C8:D2:F3:B7:11:68:62
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cc:46:93:3f:fe:d1:16:e6:d7:53:98:d9:1c:1e:34:41:65:
2a:fe:3f:28:5a:db:e9:f0:da:34:2e:e6:ea:70:4b:dc:74:88:
e6:2e:b3:ce:f9:65:2e:24:b7:d0:0b:9a:3c:a3:7d:26:04:29:
bc:49:06:e2:d3:4c:0a:41:37:62:cd:d9:5b:34:21:90:e2:7b:
64:6d:49:33:27:6c:d8:48:b9:fd:cc:eb:74:00:b1:fc:9a:85:
c7:f8:fc:62:6b:6d:15:88:0d:25:a7:91:ea:6a:17:cb:67:24:
ac:15:99:ea:33:b7:0c:35:80:5a:5e:c0:ff:e1:6d:47:e6:81:
3b:47:d9:39:91:95:e1:d5:50:91:6b:cb:39:31:07:e7:1a:1b:
91:77:90:84:ae:79:cc:af:b8:b7:07:00:53:21:e0:40:d6:85:
b4:95:fe:6d:b0:60:d4:83:b2:f1:e9:fb:ef:8b:3a:e6:ee:dd:
91:cf:29:70:bf:19:f7:8a:bf:1b:c6:25:3e:f6:32:96:50:d9:
57:05:c0:4c:f2:d4:37:ca:3f:d4:c3:73:3f:f5:ac:b1:6d:19:
c8:18:d0:e7:c8:c0:89:a5:73:47:09:2b:ca:c9:03:5e:2a:73:
f7:0a:97:05:ef:2e:16:97:da:08:4f:77:17:49:27:9b:0a:ea:
8e:73:28:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:50 2025 by rpki-client