Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier: eSft+XZEXLGGTCHaukmxKAosw7Om+FvVs6JUexikwZQ=
Subject key identifier: 73:3F:8F:D3:54:6F:20:D0:BD:C2:F3:7F:28:C1:4C:ED:F3:88:AA:2D
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial: 0197820DB9F6D07911D38133461288ED1368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 08:00:27 +0000
Manifest this update: Wed 18 Jun 2025 08:00:27 +0000
Manifest next update: Thu 19 Jun 2025 08:00:27 +0000
Files and hashes: 1: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: pDjse3TNSdK5IrB62L/mFJk5+71FejRaDnsBlkqL4NU=)
2: aATeS7_Zg3KdAOaKx-n1ZvynPH4.roa (hash: BiTKK6ZatcQ+uoSfiABBAw2jPEjkMuOpjqegStTZ06Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:0d:b9:f6:d0:79:11:d3:81:33:46:12:88:ed:13:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Validity
Not Before: Jun 18 08:00:27 2025 GMT
Not After : Jun 19 08:00:27 2025 GMT
Subject: CN=733f8fd3546f20d0bdc2f37f28c14cedf388aa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:12:fd:b5:fa:ce:e6:a5:e4:66:cd:8e:80:
5a:45:c8:46:8b:68:97:45:ea:15:13:a5:17:1d:35:
56:38:34:5f:e6:dd:1a:34:d1:fc:9c:4a:9a:2a:c5:
7c:1f:75:86:7a:4c:e4:d8:a7:a6:21:4c:d5:76:1f:
8b:91:14:38:02:87:3a:2b:bf:a7:0b:c3:68:69:5a:
b8:eb:38:37:e1:6f:5d:34:bc:43:90:02:81:3b:21:
bb:7c:1e:f8:a0:0c:f4:e2:e5:86:74:ad:73:34:01:
42:55:bf:b2:59:9d:40:da:85:aa:51:ae:b9:3d:49:
83:38:1c:16:e3:8e:39:9f:38:33:47:50:3a:a5:2b:
25:23:b4:1b:39:aa:92:cb:d1:89:c7:bc:8d:03:e7:
ee:8a:25:18:23:6a:a4:c9:3c:be:e4:c4:06:48:93:
d2:86:ef:79:b5:3d:64:a1:3a:7b:29:fc:65:03:99:
c1:d3:1b:8b:71:c3:b7:c2:31:65:f8:13:b7:6f:3b:
a6:d2:80:e7:aa:85:59:b8:1b:38:1e:92:fd:2a:8f:
06:5e:7b:6c:14:0c:fd:ba:24:2c:8f:f7:33:c4:3a:
f3:f2:6f:34:bf:35:15:87:4e:9f:82:ac:ee:4b:47:
81:7e:0f:19:57:c3:1f:ab:a9:b1:f1:4b:c4:36:88:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:8F:D3:54:6F:20:D0:BD:C2:F3:7F:28:C1:4C:ED:F3:88:AA:2D
X509v3 Authority Key Identifier:
keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f8:fc:a9:f0:d4:0b:c5:f4:31:60:e9:8c:cd:23:6a:2d:56:
bc:fc:88:22:d0:91:0d:f0:c3:43:89:d5:39:59:c2:bf:29:e2:
ee:02:d5:89:d2:76:59:09:68:60:e7:28:47:74:d7:b9:43:70:
6e:20:28:7b:fb:70:f2:cb:25:19:36:1c:78:8a:e6:70:21:6d:
92:0c:46:07:23:02:74:99:67:73:2b:91:02:bf:b0:49:97:fc:
58:50:9c:eb:52:61:de:32:d3:b7:3e:fd:ba:62:1a:be:1b:59:
50:b2:4e:0e:82:5e:f7:5f:cf:13:7a:5b:dd:04:69:b6:5c:aa:
b4:27:57:2a:dc:d3:e9:d9:50:0b:fa:a6:c0:9d:bf:b9:76:de:
00:54:36:f6:05:d9:64:ea:f6:b5:6e:f8:b5:b3:7c:84:b8:b9:
a3:b2:69:2b:98:3b:f2:11:20:97:11:4a:4e:f1:d2:5c:a3:a0:
43:70:8d:d2:1e:4f:ac:1a:e8:5d:8d:d2:19:60:75:65:53:70:
a9:77:d0:18:d8:b6:67:61:25:fe:8c:f8:36:e6:e6:f2:99:db:
23:be:89:05:63:66:a4:59:cd:f8:8e:53:71:c8:32:bd:8c:4a:
21:1b:4e:0a:6f:f8:6c:fa:b8:92:83:ca:6f:42:ea:22:70:e6:
ae:8e:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:04:22 2025 by rpki-client