Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: 0axpDFHmy0AC13UCTV+58WS3nNvKYOnFqAleNsqhYMI=
Subject key identifier: 25:34:68:05:3B:77:EC:AE:A3:6C:3F:8F:9F:74:58:A9:43:0B:B9:61
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 0197711A565797012C02FA4A6F11D8100DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 01:00:40 +0000
Manifest this update: Sun 15 Jun 2025 01:00:40 +0000
Manifest next update: Mon 16 Jun 2025 01:00:40 +0000
Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: OhAKjxmTTLrZ1EHGgTaBpYJNBW4zHRRh3+9iGK5lN8A=)
2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=)
3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:56:57:97:01:2c:02:fa:4a:6f:11:d8:10:0d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Jun 15 01:00:40 2025 GMT
Not After : Jun 16 01:00:40 2025 GMT
Subject: CN=253468053b77ecaea36c3f8f9f7458a9430bb961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:e4:87:cf:cb:e9:b4:95:f1:be:cd:a5:7a:
0d:8a:d5:ef:c9:a6:a3:6a:11:4d:81:95:67:8e:0e:
fe:b0:90:4d:66:b6:6a:fd:af:5b:eb:f8:55:03:b9:
ee:fc:03:20:dd:6a:6c:58:d0:fe:65:aa:ec:8c:47:
24:a0:7f:f1:28:44:84:96:90:52:ad:53:c5:32:d5:
69:0b:93:93:49:51:0b:aa:ae:f8:86:da:ff:36:70:
53:85:d2:5d:8f:1b:45:f1:3a:20:4c:3d:ca:a4:ba:
36:9b:20:46:b3:e0:78:17:99:d2:62:ff:dd:4f:e2:
c7:1a:b1:24:cb:8c:64:51:c5:33:77:b4:42:d2:84:
5a:fe:83:1f:19:c7:74:36:cb:63:9b:f4:ce:52:56:
ca:71:f2:24:04:5a:3b:b1:93:96:3b:00:0a:2c:3c:
18:b6:60:a0:b1:38:91:e4:19:e3:8e:f8:6e:99:69:
a7:b3:72:2a:72:c2:7d:cd:44:00:87:5f:b5:13:06:
43:f2:98:21:2e:0a:e7:fb:03:5e:49:14:a0:8b:2f:
8c:d6:8b:7f:8d:a7:45:04:5f:48:38:1e:44:b1:a8:
9f:e5:2b:1e:dc:18:3b:c9:a4:44:b4:79:6e:43:5d:
4c:2e:cb:ae:0a:43:2c:2b:38:9e:3d:f7:1e:9e:69:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:34:68:05:3B:77:EC:AE:A3:6C:3F:8F:9F:74:58:A9:43:0B:B9:61
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c6:4d:73:b7:cd:0e:fe:d2:46:a2:ba:d6:43:64:d9:84:5a:
2d:4f:db:e5:cc:8a:23:3d:b2:a4:cb:ea:4a:4b:46:ce:23:13:
84:26:fa:bd:04:3f:f7:33:70:96:b3:50:d2:43:54:0c:4a:4b:
cf:92:e3:c1:65:5d:8c:c6:01:e0:df:fc:2d:b4:46:12:b5:3e:
60:c8:58:63:37:9c:a1:14:2b:95:a1:34:12:72:7e:6d:df:73:
e0:c9:50:07:cb:34:44:de:8b:57:eb:b1:cb:63:8b:c5:15:94:
91:5e:7e:e8:80:6f:45:fd:76:56:09:c5:62:e3:f0:58:29:44:
49:d3:af:93:5d:b7:51:52:74:ac:7e:8a:62:dc:65:89:1a:cd:
73:5b:87:f9:0a:ce:bb:7c:da:c7:bb:0e:30:7e:1e:95:25:42:
2c:2b:f3:84:f5:fb:66:a4:fc:f2:5f:d3:1b:d2:ec:ca:9c:01:
6c:64:f3:90:33:a8:44:48:1f:8a:c5:b2:26:3a:e7:19:68:ea:
33:05:a9:51:6d:ec:e0:73:ca:3a:14:63:87:46:01:30:2f:89:
34:5d:62:d7:3e:f2:48:14:18:c3:ad:19:be:d6:f9:c5:45:92:
6e:a1:fe:d8:40:1a:ef:ba:8b:19:af:a1:de:f4:b9:14:22:88:
05:10:57:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:46:00 2025 by rpki-client