Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json)
Hash identifier: FLmQSUWtTchmxi6+Q371+NoyeqWBhn8FoHIScb4irTU=
Subject key identifier: AB:1E:A0:88:08:48:8A:3A:F4:2B:7A:54:29:A8:94:37:1B:9F:4B:E6
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 019773E472B140D1B01927089C118C69722B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
Manifest number: 54
Signing time: Sun 15 Jun 2025 14:00:40 +0000
Manifest this update: Sun 15 Jun 2025 14:00:40 +0000
Manifest next update: Mon 16 Jun 2025 14:00:40 +0000
Files and hashes: 1: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: EfHobgbnraV7tpUuGN1ahSyO8Q9PnHrTmTvR8k9J46k=)
2: rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa (hash: IzHYSyi3wxidgryTdPg9C85nPJtyfKau5Hu7/N9OG4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:72:b1:40:d1:b0:19:27:08:9c:11:8c:69:72:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: Jun 15 14:00:40 2025 GMT
Not After : Jun 16 14:00:40 2025 GMT
Subject: CN=ab1ea08808488a3af42b7a5429a894371b9f4be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:3b:ca:c7:ee:53:32:f6:22:4e:af:16:db:
b7:8a:33:40:fe:20:59:3c:3f:75:bc:b4:f6:4a:e5:
8e:c9:f0:cc:e5:09:9f:b0:60:ee:6a:14:61:ca:9c:
41:82:42:1f:ee:1f:f9:70:0b:ee:f3:58:f5:b9:f7:
0b:e5:29:60:b1:b9:d1:47:78:1c:5d:ae:41:4d:24:
8a:89:ee:13:5a:cb:b5:4f:9f:af:6d:f1:b2:d0:1e:
c4:d8:e2:03:82:a2:dc:f5:12:5c:7d:8f:6f:fc:71:
5b:85:85:9a:fa:80:be:18:80:75:b5:56:0c:0b:1d:
0d:fb:bc:87:d1:3c:20:07:61:21:92:46:d3:a2:1b:
3d:39:5d:6a:18:a1:d6:2d:ce:6f:83:df:c2:f6:a1:
e7:7f:c8:92:12:8a:df:01:af:ca:f8:29:f4:9d:25:
a0:57:3a:a8:ab:ef:04:90:cd:70:6d:73:87:6a:a7:
cf:fa:aa:e5:3b:46:8d:26:82:c2:33:dd:95:e1:ba:
24:b0:f2:7d:e7:72:8b:6b:69:8e:63:e9:96:f1:b8:
f4:16:e3:56:17:63:aa:75:f4:c6:ed:f6:2e:6d:b5:
51:e3:6f:e5:49:f0:b9:7d:83:64:1a:b2:fa:76:51:
f8:83:a1:0c:fa:68:55:ae:ac:3c:3d:ce:59:8e:f5:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1E:A0:88:08:48:8A:3A:F4:2B:7A:54:29:A8:94:37:1B:9F:4B:E6
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:75:ea:44:2a:26:bb:35:96:fa:fd:72:5e:5d:8c:b8:30:fc:
39:b2:d6:48:95:46:67:1d:41:11:34:c8:e8:d9:7c:d6:3d:70:
53:79:7f:81:cc:9c:85:3e:73:61:94:42:f1:cd:f4:b0:88:c4:
ec:74:54:81:99:ac:2a:04:c1:42:21:1b:b9:9a:1a:17:10:b5:
18:88:8e:10:7c:37:f4:a5:f3:4b:ea:5b:38:d5:50:9f:d2:74:
8f:a5:99:2c:7a:62:7c:9f:29:93:a8:6a:6c:e3:ae:67:aa:7c:
b2:c8:bc:3b:70:13:19:11:08:0f:e4:12:dd:80:50:50:f1:85:
77:c1:c7:62:91:cf:10:5f:c5:2c:d5:95:c9:d4:cb:40:c2:ee:
7c:d2:b2:88:ab:76:44:de:79:49:93:1d:2f:c3:6d:51:7f:2e:
cd:2d:d7:4b:74:cb:51:19:6d:a4:cb:40:46:aa:ad:a9:0d:dd:
c9:5e:75:e3:d9:62:67:c3:d6:67:bf:ac:36:b3:f6:a3:2f:d6:
92:7f:b1:f9:92:2b:42:1f:bd:b7:ae:ad:b7:ac:bf:29:7a:36:
2f:14:97:b9:e2:4e:65:6a:8e:34:cd:be:4e:6d:95:d5:4b:ca:
93:8c:06:66:35:a1:b6:c8:4d:78:69:ed:1e:bf:1f:27:dd:24:
cc:20:cb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:44:27 2025 by rpki-client