Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File: pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier: fzKjsI2tOTyN/hH9qEgOVsC7blBXUZu4ZxJuOtD4new=
Subject key identifier: AF:35:96:1A:B7:29:B2:85:F6:AF:E5:6B:80:42:6D:FB:D0:D8:B9:D7
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer: /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial: 01976EBE0149451CF323941FE85A3A617B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 14:00:35 +0000
Manifest this update: Sat 14 Jun 2025 14:00:35 +0000
Manifest next update: Sun 15 Jun 2025 14:00:35 +0000
Files and hashes: 1: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: 1ZCIcfGGZCxdk8PJwCZ7qT/4ho+1nYZnkzAZqcj83oY=)
2: vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa (hash: tQbWOVu74034awYo0QKVFApUcQf9SPwefFwA/Lt3iQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:01:49:45:1c:f3:23:94:1f:e8:5a:3a:61:7b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Validity
Not Before: Jun 14 14:00:35 2025 GMT
Not After : Jun 15 14:00:35 2025 GMT
Subject: CN=af35961ab729b285f6afe56b80426dfbd0d8b9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:4f:f4:57:85:46:03:3e:a7:9b:a2:75:57:
54:ef:cc:c5:5d:ad:ba:41:fc:d2:c0:a1:5b:c1:55:
9d:97:88:db:f8:4f:a1:2f:72:2c:d4:36:cf:3f:0a:
94:55:ee:c0:76:15:74:cd:61:33:06:5a:6a:43:55:
ee:d1:ff:41:c6:9f:69:ec:ab:0b:8e:5b:ae:f1:55:
b0:f9:68:db:99:c9:d7:cb:23:1a:c1:90:33:c2:8e:
c0:0f:7e:56:38:dd:69:d6:95:9e:bf:6c:97:1b:0e:
e2:7a:28:e9:cd:01:6d:f3:5e:0c:00:40:09:fe:d3:
cc:b9:6a:b8:18:0a:74:88:24:44:64:47:48:36:65:
ae:e6:8c:c4:b4:c1:9a:32:6e:39:53:49:e0:08:95:
ec:08:5e:20:37:2c:62:0f:d2:f0:2b:3e:18:12:a9:
12:31:3f:d8:d2:bd:1a:6a:1e:da:fe:56:37:2c:7f:
86:76:0b:41:b9:a9:f7:9c:d3:7e:b5:18:96:0e:48:
d8:4d:86:03:e4:03:9c:f2:84:71:ae:2d:1a:54:ea:
b1:1c:64:df:e1:aa:af:fc:90:a6:ab:b7:db:85:ca:
1d:61:50:8d:c9:80:5f:d4:61:a5:17:df:28:98:64:
50:65:4e:62:ed:b6:d0:37:6d:2e:7e:43:ce:10:94:
f4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:35:96:1A:B7:29:B2:85:F6:AF:E5:6B:80:42:6D:FB:D0:D8:B9:D7
X509v3 Authority Key Identifier:
keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:88:d8:4e:00:a5:41:e4:6c:d7:49:29:92:82:03:6e:b7:1c:
92:cd:d4:fb:15:69:9f:f3:50:ae:ce:c8:ec:35:b5:54:be:9d:
0d:8f:62:31:9c:72:cd:3b:69:43:63:fa:41:d8:ef:90:d7:f6:
c8:e0:e7:48:b1:d1:09:54:f4:95:e1:9f:3f:ce:a4:56:25:d8:
d1:17:7f:a8:4d:ea:a8:a0:e3:d6:f3:cc:a7:1e:86:2c:f7:89:
f0:16:45:b7:1c:1f:5e:81:b8:91:44:9d:0c:56:39:2b:27:c9:
e0:1c:74:23:60:2d:78:65:8c:01:c4:31:21:0e:da:c9:13:a9:
b9:af:cd:33:d7:6c:7a:94:be:00:01:aa:7b:56:39:e6:71:d0:
f8:70:d9:6f:f9:80:49:eb:8f:7a:3d:46:66:27:21:c4:9f:43:
93:b7:a7:ca:a3:71:77:22:f1:dd:a2:be:71:09:e5:3a:2d:df:
75:e2:b4:d7:b2:77:cf:76:d3:94:a6:e9:8a:b5:be:4a:a8:82:
c4:ab:9b:ce:77:f6:4b:05:e8:96:ef:52:74:f9:4e:92:6f:6f:
63:ac:4d:a1:cd:69:f2:12:0a:0e:99:f6:a7:e1:23:cf:aa:2a:
9f:15:ce:31:4f:3f:c3:39:bb:4e:a3:32:b2:3b:a3:28:07:8e:
29:eb:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:39:33 2025 by rpki-client