Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: /Ra3aEMJZeuOm6AKJ1S9rhqc2MztbKwTqivu6Omk4Xc=
Subject key identifier: CB:8F:74:44:62:C6:65:1E:83:92:28:CE:E0:72:79:F6:90:D0:60:B7
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 01976DAB99ACF335AD706C849A75AEE1B212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0B02
Signing time: Sat 14 Jun 2025 09:00:51 +0000
Manifest this update: Sat 14 Jun 2025 09:00:51 +0000
Manifest next update: Sun 15 Jun 2025 09:00:51 +0000
Files and hashes: 1: kORzGbUwfQz_reUfKxE-VKML1Ko.roa (hash: LJNSK27C7NQtNI1BCy3DsB/OzJxofkAzOY3Bw0ai+Lk=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: /ls91kfa1C+b7H7vyiIhsSeeNSW+WEjjLVQo0S7Wz94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:99:ac:f3:35:ad:70:6c:84:9a:75:ae:e1:b2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Jun 14 09:00:51 2025 GMT
Not After : Jun 15 09:00:51 2025 GMT
Subject: CN=cb8f744462c6651e839228cee07279f690d060b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:5c:56:04:8f:1f:eb:4c:77:df:dd:e3:db:
e1:d7:65:d2:7b:27:14:df:f0:22:1a:b3:66:20:0a:
02:d2:d9:e9:dd:9a:45:d2:11:e1:5c:b8:82:95:2f:
ef:26:24:bc:17:2d:07:cf:8d:83:80:f6:b1:31:db:
20:a9:e9:99:8b:d7:2d:1c:9d:53:7a:f8:a3:5e:51:
6c:9e:62:22:e9:c9:70:a8:20:02:3e:ec:81:71:4e:
90:24:82:d7:91:14:40:1c:9c:54:73:fe:61:06:23:
32:bd:2a:06:92:f5:04:b3:fd:92:a5:33:37:4c:72:
ce:86:4d:ce:b4:24:e1:14:3b:dd:dc:1a:15:43:f5:
53:6e:94:ea:75:bd:d9:62:48:2a:0b:90:fb:21:11:
d5:9b:94:bf:c9:50:03:d6:ba:f2:41:fd:d7:24:cb:
d8:54:4c:15:13:33:dd:d9:55:d8:14:48:f1:ab:b1:
7f:65:f3:c0:a3:97:07:40:53:99:72:93:c7:d9:55:
23:f5:bf:b2:bc:d4:eb:48:7b:1a:21:81:a1:8a:b1:
df:0f:f3:33:f9:a4:fc:84:f8:d5:28:89:1b:3e:f5:
fd:27:07:8f:f2:7e:59:24:ea:8b:06:69:83:25:e2:
43:7f:c3:60:99:76:e5:13:81:62:1b:81:a6:43:49:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8F:74:44:62:C6:65:1E:83:92:28:CE:E0:72:79:F6:90:D0:60:B7
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:03:20:64:e9:44:c0:82:1f:19:ac:d0:cb:a9:6b:99:03:12:
90:90:0f:3b:cc:d0:f0:14:9c:a3:0d:91:c1:de:6a:a6:8a:00:
55:5d:72:f5:4c:31:d6:40:3b:44:ef:62:55:a7:a0:48:0a:ac:
bf:2f:d7:da:01:d2:a8:39:24:d9:27:1f:4d:03:5d:80:c8:ab:
ce:74:b0:ce:08:db:f1:4b:66:f4:c5:fa:f2:35:18:a3:67:49:
65:8f:ea:47:6c:7a:9d:36:3a:80:db:8a:fc:47:5b:4d:a0:a3:
89:15:94:2c:9e:46:55:94:d3:0a:f5:0f:a0:1b:85:ac:71:dc:
be:9d:e7:d0:dd:56:32:e5:73:31:61:9a:de:9d:26:9f:68:88:
8e:92:00:c5:92:21:23:b2:fe:a2:d8:ae:ea:b7:0e:4e:93:06:
1b:49:41:50:68:32:c8:31:54:23:29:99:1d:c1:8e:4c:df:ed:
f1:00:1f:4e:35:26:95:2f:1a:8c:ac:d6:bf:91:63:41:0e:fd:
a0:03:f0:a5:5c:dc:a1:f2:4b:84:30:41:22:76:fc:12:9a:07:
32:73:00:52:f4:04:89:9c:54:3f:70:2a:33:a0:ab:b3:83:bf:
fa:ee:c1:01:61:9d:20:07:4f:20:f3:a0:d5:2f:11:b0:d8:8f:
f5:1a:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:29:35 2025 by rpki-client