Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: 8V3I2MOhnyP9fSUYRYqjtvTLxUOE9K9g8tveIeQEouI=
Subject key identifier: 89:A1:9F:A3:5A:DD:4A:BF:99:87:DF:1A:BB:4F:96:A2:C4:D9:D6:F7
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019771F5E5A4AA6B82AFF649178BABED6B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 05:00:29 +0000
Manifest this update: Sun 15 Jun 2025 05:00:29 +0000
Manifest next update: Mon 16 Jun 2025 05:00:29 +0000
Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=)
2: Lqe5vcwgWue09k7p7ctNg9AlXcM.roa (hash: YaDYxTi/SH2+EMKhFcDi7OA2pSDfUeTirPWPAhdJeo0=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: CLSNUUyOSFymENl57FAmVhqxkHVHVLXcEJchquBOXIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:e5:a4:aa:6b:82:af:f6:49:17:8b:ab:ed:6b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Jun 15 05:00:29 2025 GMT
Not After : Jun 16 05:00:29 2025 GMT
Subject: CN=89a19fa35add4abf9987df1abb4f96a2c4d9d6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:27:08:5f:44:3f:1c:0b:ff:c3:5d:70:97:
6a:33:54:b6:c4:8c:d8:e4:41:9d:60:6d:d7:3e:4d:
c1:da:f0:c5:71:2c:dc:d0:75:04:dd:d7:c0:0d:a8:
c2:08:2d:e8:98:a7:56:a0:f7:ae:77:ed:a5:ec:a5:
55:c6:78:06:f8:8d:97:41:69:a8:fc:e9:ac:ca:df:
51:79:e4:90:10:e1:bc:71:d8:52:be:b5:f6:61:a8:
3a:d2:d2:1c:9f:6a:6b:81:e2:99:e1:69:20:ff:13:
e4:00:c7:1d:b5:9d:ea:ab:56:16:4a:13:bd:b0:7b:
86:89:9f:1d:84:74:79:84:8f:07:e0:d0:6f:51:60:
85:18:d7:a6:07:68:f4:b9:2e:19:cb:68:6b:97:f3:
40:b5:21:8b:51:48:6a:be:36:a8:e2:7e:8e:22:ef:
5d:6a:08:39:0a:d1:87:24:95:fd:cf:a1:eb:39:08:
b6:4e:5e:74:23:8d:1b:1c:f7:db:08:69:e1:fd:49:
8b:5e:88:f4:25:57:1d:ca:b7:c5:01:4f:f0:66:a2:
ca:a9:10:bb:74:83:1d:b8:2b:fd:4b:69:af:be:8e:
50:b4:dc:cd:fc:f8:eb:d0:9f:0f:26:6f:96:d8:9e:
c2:8a:bf:7e:f6:ba:a0:05:e7:34:aa:ad:2b:72:43:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A1:9F:A3:5A:DD:4A:BF:99:87:DF:1A:BB:4F:96:A2:C4:D9:D6:F7
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:25:4f:02:2d:61:21:49:94:d5:10:73:b8:65:46:66:db:7c:
f2:ca:77:6e:71:a8:80:1a:91:4b:5c:5f:f6:ce:74:a7:4b:74:
a7:3b:46:62:56:1b:6b:ae:5f:81:a7:a6:2b:98:e9:84:70:ed:
5e:ff:f0:6d:35:e2:2f:0f:1f:45:d8:93:b5:f5:9e:96:b6:5d:
f4:5d:56:e4:ee:b1:52:aa:fa:20:97:f7:05:66:5f:97:2d:3d:
a3:33:29:37:be:35:fa:2d:ca:3e:ad:26:e5:d0:bc:91:b8:ec:
90:1e:95:e9:bb:6e:d2:72:dd:ed:5f:0c:6b:90:c2:d8:ea:bd:
46:92:d1:7b:2e:d8:56:34:91:fe:da:25:dc:2c:b1:d7:f3:16:
59:01:ec:0e:da:7c:86:eb:57:64:df:4e:e7:6f:7d:7a:b3:1f:
95:10:13:05:24:a9:fa:bf:70:2c:42:fb:c6:bc:ed:53:1b:9f:
7b:a1:5b:d3:e2:d6:a8:93:74:bf:d0:d1:92:d5:b5:51:bd:80:
7e:bf:b5:e3:75:44:d3:80:5e:7a:34:9b:99:8c:3b:91:fe:fd:
25:4d:ee:8f:e6:96:e7:67:cb:f8:e5:c9:53:d0:5c:12:22:59:
b6:53:d7:a3:5a:e1:a9:b8:92:0b:a7:0b:34:92:ce:07:69:ea:
c9:03:11:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:49:00 2025 by rpki-client