Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: cUzQhDTMd2M0KEkq/r3J+ZaINYhjemo1dIOBU+kIE50=
Subject key identifier: 48:FA:B8:FF:D0:E7:20:6D:9F:22:42:8B:6F:EE:EA:88:BA:35:8C:0F
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 0197778A6F7C7DCDA040D56986A0A3FDC065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 07:00:50 +0000
Manifest this update: Mon 16 Jun 2025 07:00:50 +0000
Manifest next update: Tue 17 Jun 2025 07:00:50 +0000
Files and hashes: 1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: /69RjERyr7gROiUp7lJ4k8DeCeu7T+d2T0yMIMa/7+4=)
2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:6f:7c:7d:cd:a0:40:d5:69:86:a0:a3:fd:c0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Jun 16 07:00:50 2025 GMT
Not After : Jun 17 07:00:50 2025 GMT
Subject: CN=48fab8ffd0e7206d9f22428b6feeea88ba358c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:8e:4e:96:e8:34:dc:a0:45:4c:db:12:d4:
e4:1f:7a:35:d5:aa:e9:3e:19:c2:b4:7a:89:77:9f:
31:c0:9d:cc:fd:a8:12:70:86:bb:68:34:65:8f:4e:
ed:10:2d:0c:81:da:d9:49:c5:86:de:a6:a7:8a:dc:
29:67:9d:c3:e5:49:2c:6e:52:60:0c:d6:a5:47:b4:
1f:03:91:52:c7:7e:52:d9:df:3a:a2:04:9f:18:3f:
6a:ee:c5:b7:b8:ae:a6:c1:fa:e5:95:c5:00:64:cb:
3a:49:4f:9f:be:7f:45:45:a4:4c:1d:78:3b:1d:b0:
f8:80:0f:73:bc:96:10:b7:0c:02:95:54:6f:ee:1f:
d3:46:f1:2a:49:d8:a4:6e:3c:8a:7c:e0:71:a7:10:
9e:96:1e:c2:90:8d:ad:0e:4a:4f:31:a4:fd:01:99:
d1:91:b5:51:b6:2f:9f:b3:ea:cf:f8:2f:6c:b1:aa:
09:f2:dc:ec:3b:09:88:7a:53:d5:26:98:16:19:c9:
1d:1c:f8:f4:2f:c5:64:73:86:d5:29:27:23:af:be:
f8:79:d6:98:fa:36:cd:b0:47:da:6e:62:08:2e:a4:
47:4b:c8:2c:05:12:19:f9:3e:3f:71:ad:ca:63:18:
56:52:aa:a4:2a:57:cc:6e:fe:11:85:c5:e4:cd:82:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:B8:FF:D0:E7:20:6D:9F:22:42:8B:6F:EE:EA:88:BA:35:8C:0F
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4d:a5:60:9b:61:25:a4:2c:4d:15:aa:d0:4a:c2:52:0a:07:
e5:54:7d:f7:17:04:26:ad:15:86:99:f3:eb:d4:d4:85:ff:b5:
e8:92:e9:20:a9:a4:86:bf:11:17:39:15:45:89:8b:45:fd:be:
23:ac:9b:1c:31:77:5f:ca:9e:1c:28:c9:5d:3e:c4:13:a5:fd:
0b:e7:b0:c5:75:20:0e:10:1e:33:14:67:18:ba:43:49:a5:49:
76:a4:4f:93:c1:25:82:21:22:dd:30:ff:1d:1f:22:de:e6:20:
11:98:64:ee:5f:90:c0:ce:2a:a5:74:22:85:00:70:0c:09:d4:
0b:e8:67:73:9f:af:b3:b5:45:1d:e1:2c:a8:d7:8e:64:76:25:
f8:42:91:ac:71:be:07:de:18:95:5d:82:ae:a7:8b:8f:e2:aa:
5b:0a:73:24:eb:6b:8a:8f:69:50:14:cf:2d:35:d5:2e:8d:a3:
bb:15:bb:64:98:2d:e9:b8:f4:91:ce:0c:ee:41:1b:38:21:88:
90:78:2c:d1:59:a9:d9:0a:dc:c4:f9:4f:c2:73:95:4e:3e:66:
8e:84:d4:8e:7e:2c:4d:7e:c4:c3:a9:3a:dd:43:2a:a0:e8:e6:
c9:b1:7c:b1:59:49:ea:c1:12:13:f4:90:c4:9c:a4:e9:ad:40:
bb:30:f0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:05:27 2025 by rpki-client