Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
File: rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json)
Hash identifier: AjrFiW54fe394CTnPCUIlu3zS1GPZUSdIT92lJQOHQY=
Subject key identifier: 38:DD:14:28:72:00:A2:33:E3:5F:A2:1C:20:D9:05:8B:14:26:EA:93
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Certificate issuer: /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial: 0197D21844F972C104F85EE26609E7B3F80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
Manifest number: 04E1
Signing time: Thu 03 Jul 2025 21:01:35 +0000
Manifest this update: Thu 03 Jul 2025 21:01:35 +0000
Manifest next update: Fri 04 Jul 2025 21:01:35 +0000
Files and hashes: 1: OV34MDvIRVxone0w5cHEhw4n-7g.roa (hash: iRvnIoP0GpD7jIp3Sl87VKOE59U8AR417l/5lvVpf0w=)
2: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: eP/HCky6M5gm7P2bT5NqsexWAZHwZ1fYCvHaC6VAdWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:18:44:f9:72:c1:04:f8:5e:e2:66:09:e7:b3:f8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
Validity
Not Before: Jul 3 21:01:35 2025 GMT
Not After : Jul 4 21:01:35 2025 GMT
Subject: CN=38dd14287200a233e35fa21c20d9058b1426ea93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:5f:6d:c3:9f:c3:f2:af:20:e8:88:f9:b9:
b6:dd:ec:67:22:7f:6a:02:d5:6f:26:46:77:10:14:
28:19:97:b1:c0:45:d6:db:62:f1:1c:29:58:e9:d3:
75:94:3f:28:b4:95:c4:76:25:92:e6:47:48:e6:f2:
27:6a:6c:fd:11:82:9e:7b:6b:dc:f7:61:8e:0b:9b:
39:1c:fa:f1:1c:98:b2:bb:cc:b9:8f:3a:b2:37:8f:
22:2c:69:b7:91:54:e8:45:3b:4b:1e:94:2b:cd:6a:
09:74:da:a8:dc:a3:ee:e4:3f:70:37:19:be:65:ba:
db:e2:29:28:b1:59:4e:aa:03:5f:b0:ff:e0:de:54:
68:58:43:2c:d5:30:05:33:92:1d:b2:4d:03:42:1b:
04:b8:25:8f:4f:99:fb:49:7f:ef:9b:df:40:bc:c0:
fb:88:e4:30:d7:44:86:48:56:d2:91:a3:e2:5e:6f:
42:50:07:7d:ad:59:33:09:4e:c9:33:2d:3e:9f:03:
f4:2e:34:c0:65:a4:4c:c6:71:9b:56:c4:b2:70:df:
5e:d3:65:d8:f7:2a:33:0b:d1:29:d1:a9:18:6a:80:
22:21:cb:bf:e4:5f:50:1a:da:bd:24:c2:25:a8:55:
98:48:96:55:83:c9:20:f4:bf:2b:4f:ae:be:17:4d:
82:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:14:28:72:00:A2:33:E3:5F:A2:1C:20:D9:05:8B:14:26:EA:93
X509v3 Authority Key Identifier:
keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2d:43:e1:2c:3a:e0:5d:3c:6c:66:c6:93:a2:ca:d8:ed:3d:
f7:13:ce:36:10:5e:af:79:b8:a1:08:44:6e:0a:a1:a0:27:4a:
a6:f0:8b:e5:de:19:e5:55:ca:3f:59:0f:26:97:18:5a:5e:4f:
9a:73:ef:fd:ba:9a:91:d7:f4:cd:9e:3f:eb:b3:1e:4d:6c:9c:
32:45:78:a3:60:84:1e:02:a1:5d:11:a9:18:0b:f1:e5:a7:9a:
7e:77:08:10:76:42:2f:94:92:22:a2:12:ae:a6:80:4e:5d:f6:
f6:65:76:55:4b:d0:af:b9:12:f3:e6:c4:81:b0:d2:ce:9c:3e:
3e:7e:26:d7:d0:da:49:72:3c:df:60:4a:29:92:94:97:2a:fb:
f6:12:5d:10:18:3a:3f:e4:2d:f0:52:8e:dd:1a:56:ac:56:56:
1b:05:0b:42:f1:e4:e6:3f:02:d0:2e:3a:c0:bc:9f:e5:d0:f6:
ad:be:1d:93:0a:b9:7b:59:a5:15:6c:ba:c2:55:4a:60:39:cc:
bb:d5:a5:69:9b:7e:b9:99:89:80:c2:bb:40:4d:84:79:2d:cb:
82:47:82:97:aa:fc:6e:33:a5:54:04:88:91:08:0d:05:97:0a:
52:96:56:34:0a:90:e2:a7:ce:13:4a:c4:ea:b8:5a:0c:ed:8b:
f9:bf:16:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:44:08 2025 by rpki-client