Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: XhFVA+g+QX0dEByfAeEkQlExGgisZhFrLe9p25kZ7mk=
Subject key identifier: B9:C3:B5:3B:3A:16:4C:03:22:CC:8F:7A:95:E1:D4:CA:BD:E6:C1:68
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 019770E37C9D89CC033019CDC98FCFB215B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0C1C
Signing time: Sun 15 Jun 2025 00:00:45 +0000
Manifest this update: Sun 15 Jun 2025 00:00:45 +0000
Manifest next update: Mon 16 Jun 2025 00:00:45 +0000
Files and hashes: 1: RuFROxCqzeIbzpx-h2zhu4XG73k.roa (hash: mYt7O5vyisef0XC7lwr4ZHkct165sZT5ZjyUS4XqL/8=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: tXBmG5wlWn6lqNT9rhYwaXpozeJItYJINeg0vn/jm84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:7c:9d:89:cc:03:30:19:cd:c9:8f:cf:b2:15:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Jun 15 00:00:45 2025 GMT
Not After : Jun 16 00:00:45 2025 GMT
Subject: CN=b9c3b53b3a164c0322cc8f7a95e1d4cabde6c168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:a3:47:f3:8b:66:4e:81:17:f0:71:40:f9:
f3:fe:73:74:47:da:17:09:2f:b8:32:27:0c:4a:e6:
ed:86:e5:96:6c:69:30:10:24:51:47:09:25:58:92:
4c:d4:ee:31:bf:37:19:9b:04:0c:e7:52:86:04:b6:
64:03:55:06:d8:aa:15:3a:ad:c2:61:93:4b:93:8e:
22:41:6d:49:7f:8c:12:62:a8:68:2e:65:2e:fd:50:
fa:d9:21:6f:97:74:e2:0b:c9:8f:4d:1d:1b:80:b1:
b9:ac:02:d3:ef:35:28:58:3f:87:4d:46:2f:cc:fb:
c1:eb:18:ca:64:08:62:73:5b:d7:76:d1:f9:fb:f1:
d6:23:cf:ff:de:89:64:63:6d:e3:95:1d:6b:7f:5f:
00:5f:c6:dd:52:7d:4f:42:ed:ef:bd:a2:c5:38:ed:
89:39:f4:bc:8a:9e:16:1f:88:8d:ef:8d:34:44:85:
61:f8:b7:95:74:aa:92:c4:73:96:6e:f4:22:c0:a7:
59:a4:8a:a4:14:6d:02:7a:14:3e:c9:c8:ec:b1:33:
b5:d2:06:4a:10:7e:6a:36:59:b7:a5:20:ca:0a:cb:
9d:27:24:f0:2b:26:ab:e9:f9:61:02:00:e8:1e:37:
83:bc:50:3a:5e:6b:03:cc:73:5f:fd:18:01:6b:49:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C3:B5:3B:3A:16:4C:03:22:CC:8F:7A:95:E1:D4:CA:BD:E6:C1:68
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:41:80:2e:42:e8:dc:dd:4f:0f:c8:1e:f2:26:f7:8b:8f:a6:
57:4a:cd:06:2f:25:73:d6:af:15:d8:dc:9d:22:b4:a9:fd:ff:
45:3f:68:6f:92:25:5e:4c:ed:5a:28:25:23:d1:19:b6:64:f0:
59:d1:bd:99:e4:f8:ab:76:6f:c8:81:95:69:5e:d9:60:6b:f2:
e3:89:60:a0:22:2c:43:24:d3:18:01:fe:f0:32:23:48:0a:2c:
31:5d:70:08:3f:6d:20:27:d8:19:f2:9f:78:31:98:b7:e0:43:
36:53:30:0e:f5:53:49:11:40:cd:bd:b8:34:7c:9c:fd:1c:a3:
a7:3c:2b:db:05:9c:1d:a6:85:a0:0b:58:02:76:e2:47:3e:37:
c7:99:4b:81:d6:a0:57:03:d9:cb:b0:2f:a9:5b:d8:81:1c:06:
ee:b5:6b:e2:ec:ca:ca:c9:0a:91:9e:b8:6e:45:98:65:a7:dd:
bc:a8:e9:aa:b4:d8:c6:81:1b:12:6c:2b:35:fa:f8:f5:67:d1:
a9:6b:e1:71:1d:2c:a0:a2:1c:1a:34:53:86:36:eb:e2:59:dd:
30:14:dc:73:77:41:74:48:eb:13:09:bd:af:40:8a:5d:34:52:
34:a6:e4:c7:7b:40:7d:b1:d6:03:f0:bf:71:b0:95:bd:c9:e6:
4d:b1:be:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:11:53 2025 by rpki-client