Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
File: pqBZBOyBdGoKZtIH9dNvjZeIig0.mft (raw, json)
Hash identifier: Up1ICEWLfzQJNrTIEio1PqZgcVjY8tPN/NQRH30eat4=
Subject key identifier: 34:D6:89:2A:DE:70:26:02:93:6C:7F:6E:3A:32:6E:1A:65:CB:06:4D
Authority key identifier: A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
Certificate issuer: /CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Certificate serial: 01976F2BC364BA15AAE3E46C8FB817C889C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
Manifest number: 06F3
Signing time: Sat 14 Jun 2025 16:00:28 +0000
Manifest this update: Sat 14 Jun 2025 16:00:28 +0000
Manifest next update: Sun 15 Jun 2025 16:00:28 +0000
Files and hashes: 1: pqBZBOyBdGoKZtIH9dNvjZeIig0.crl (hash: fo9haaa2FIzT0nC5+bk6FlrDQHZSmM5kuHBsw4moaoU=)
2: wcWtJWZdHtQ3MB-JGGb4XgtvRZY.roa (hash: uBYBylJRjDgsdsAh3Gf2WJ38oblmNaRqlj9rvalMb+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:c3:64:ba:15:aa:e3:e4:6c:8f:b8:17:c8:89:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Validity
Not Before: Jun 14 16:00:28 2025 GMT
Not After : Jun 15 16:00:28 2025 GMT
Subject: CN=34d6892ade702602936c7f6e3a326e1a65cb064d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:de:a9:1a:17:57:1f:c9:00:97:c8:80:53:13:
b5:ca:a1:7d:7c:f5:42:ad:2b:fc:1b:62:79:e5:78:
87:c6:3d:2b:f5:38:08:31:83:08:a2:df:d2:83:02:
41:6e:b7:55:4d:14:46:e5:8a:61:bf:61:eb:83:bd:
34:dd:af:ea:5a:39:64:97:97:6b:a9:d1:8c:9b:ac:
2f:90:32:93:fe:00:06:7a:29:fe:3b:98:a5:d3:08:
1c:ce:5a:92:9f:97:6e:2b:29:2c:bd:4b:ce:ae:0b:
6e:10:76:7d:dd:28:d7:c4:8c:77:f9:35:a8:af:ed:
f7:f4:36:34:8c:a6:fd:5f:a6:57:c9:88:71:98:11:
e2:f3:de:2a:e7:69:f3:a4:f0:8b:5b:b1:d5:e0:04:
00:46:8e:09:3f:99:35:d5:b5:89:e1:74:6e:01:39:
64:59:69:27:79:57:67:0f:b6:d9:e0:de:f6:cc:f0:
71:23:52:95:44:d6:c5:02:af:f2:4b:50:67:e1:3e:
11:42:dc:a4:1b:6b:85:a1:7c:08:2b:2b:1a:55:31:
a3:ad:c5:b3:f4:ca:1c:be:5c:69:1e:42:d5:da:22:
19:9d:ef:97:b9:df:48:65:4e:a4:36:58:34:03:6f:
85:4f:88:5d:a8:99:c7:ea:ab:7c:4c:84:a6:ce:30:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:89:2A:DE:70:26:02:93:6C:7F:6E:3A:32:6E:1A:65:CB:06:4D
X509v3 Authority Key Identifier:
keyid:A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ac:a3:e0:f9:8a:2d:39:fb:04:10:a4:44:0c:12:80:ff:2a:
76:11:7e:8d:ef:8f:42:d6:05:46:f6:98:6e:08:87:a1:45:d5:
03:6d:24:68:19:18:2b:16:af:81:95:ee:27:42:db:52:2f:f0:
c3:26:72:d2:e4:48:c8:61:c0:dc:66:cc:5d:cc:f5:73:2c:35:
8d:77:82:31:3e:00:cb:5d:fe:aa:d5:a4:f6:86:a7:d0:b4:7f:
e7:6a:8b:4c:c2:21:ba:ab:75:14:00:fa:66:a1:29:df:bc:72:
06:43:4b:4b:28:3f:eb:5b:f9:2c:66:9c:38:97:69:b9:96:df:
ec:29:2b:bc:4b:74:46:5c:6b:86:cc:f7:c8:9c:54:6e:3d:29:
38:bf:24:ee:2b:c0:99:29:d3:b8:1d:91:12:77:7e:44:25:49:
65:bd:23:1f:bc:2c:bd:87:9c:33:a5:1e:85:08:7d:b9:24:18:
08:47:31:fb:53:05:03:90:5b:2f:87:b9:a5:53:2f:12:bf:6d:
7e:46:f0:af:55:99:c0:49:ec:18:37:51:81:70:52:96:8b:f6:
e2:0d:1b:03:72:4b:24:ce:0d:39:f9:9b:f7:b4:be:0f:c4:0e:
2c:ee:44:e7:3f:c3:1f:46:2d:eb:7d:8a:3a:88:73:d7:b2:34:
66:09:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:22:27 2025 by rpki-client