Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: skajYSbRpSA8Ml53oMAZxPGui7iCGVOPWpqMog16dy0=
Subject key identifier: A8:2A:86:CB:45:9F:BA:54:02:44:AC:F1:45:FB:DF:0E:AE:C7:3F:D2
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019769CE8EE3EEE4BAC823BB52EEDB1D79DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 09B6
Signing time: Fri 13 Jun 2025 15:00:34 +0000
Manifest this update: Fri 13 Jun 2025 15:00:34 +0000
Manifest next update: Sat 14 Jun 2025 15:00:34 +0000
Files and hashes: 1: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (hash: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: fzk6VEzzJtI30XnfLeZOguSJWDAvSN8UtLsmMC0tri0=)
3: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (hash: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:8e:e3:ee:e4:ba:c8:23:bb:52:ee:db:1d:79:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Jun 13 15:00:34 2025 GMT
Not After : Jun 14 15:00:34 2025 GMT
Subject: CN=a82a86cb459fba540244acf145fbdf0eaec73fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:bf:88:c0:d1:ce:35:d3:10:79:be:e5:75:
61:2a:be:8f:e9:fd:a3:e2:74:c8:16:39:db:e9:4a:
4d:ca:65:c0:32:d2:51:d0:d0:f3:8c:26:f0:96:ec:
9e:b9:44:84:90:66:88:78:8a:96:fd:31:e7:9d:08:
0b:04:0e:34:fc:b9:82:c0:78:19:e3:c6:63:bd:25:
fd:6e:b8:6d:e6:f7:03:e5:ff:44:54:0c:28:0d:3b:
a9:3e:4b:8a:d5:9c:3b:da:49:7e:37:5f:b8:f3:71:
a8:42:14:15:fa:a2:62:7f:7d:95:07:75:5f:be:8d:
36:6d:1e:09:68:ff:97:aa:15:5d:67:c8:ef:c0:c2:
15:d1:f3:86:98:e2:ff:2d:7e:eb:39:c1:93:98:bb:
c3:6d:81:fe:3c:0a:52:79:26:4a:08:fa:db:b7:bc:
72:fc:a5:62:35:cd:fb:1b:ab:7a:c0:f4:5a:3e:8a:
0e:97:9e:12:34:f9:b0:65:9a:aa:bf:94:3a:0d:f8:
46:fe:3b:4e:15:ab:5e:cf:65:0d:51:d3:7d:eb:3b:
32:67:72:2b:4c:fe:c2:d3:0d:23:25:54:93:b3:5e:
df:32:3a:31:1d:a0:b7:4e:6e:d3:95:58:fa:95:e9:
0c:04:74:cf:1d:7c:89:46:2f:4e:c4:5c:f8:ff:ab:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2A:86:CB:45:9F:BA:54:02:44:AC:F1:45:FB:DF:0E:AE:C7:3F:D2
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:69:0d:b9:85:ab:87:0c:c0:33:dd:16:a0:ee:ac:a3:02:53:
01:cf:f4:0e:ee:b7:ec:6a:ce:9b:0e:21:b3:b0:72:1b:9b:95:
a5:0d:e1:eb:e4:9b:de:e7:c9:3e:64:db:ed:3c:37:b0:95:7f:
65:c7:7f:b2:0c:5e:52:36:93:44:9c:c7:19:b3:2a:c8:c8:4e:
d9:5e:4a:8e:10:c9:3c:d3:48:4c:ef:09:18:2d:20:9b:0d:0a:
c8:d8:d6:45:fe:61:c1:2d:95:1d:0a:2a:d4:11:8b:18:a0:85:
37:52:4e:b6:a5:1d:60:94:79:a5:83:65:34:05:9b:d6:3a:ce:
4e:bc:7a:c4:1f:3f:a1:4e:87:64:97:b3:91:f6:0c:b8:31:fb:
02:ed:7e:77:90:f9:bf:03:89:74:85:fa:c1:af:19:0b:b4:b4:
16:e7:2c:32:61:44:1a:0c:61:49:01:38:15:2a:db:75:2a:00:
f0:7b:a0:e3:cd:55:6c:24:a3:c9:20:5c:68:91:e2:5b:1d:b5:
5c:27:16:cd:f2:0e:59:a0:2e:a5:4f:cd:49:0e:71:27:2c:c1:
c9:06:5e:74:6f:bf:45:40:51:2d:1f:6d:75:b4:f2:f2:a4:1d:
b0:b5:f3:5a:b0:38:99:b6:92:ca:f5:a7:2b:be:a2:88:5f:e9:
3d:1f:8b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:59 2025 by rpki-client