Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: cfa+vo6KW1p9+tKc20l81XogKESyQFwQKfC2l4oylog=
Subject key identifier: 64:C3:E0:2F:55:BC:C2:AD:38:FB:09:68:B6:84:88:9A:B4:54:BC:3B
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 01976D3DA3A1F93250F1C932D2A2F0F78EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 15A7
Signing time: Sat 14 Jun 2025 07:00:45 +0000
Manifest this update: Sat 14 Jun 2025 07:00:45 +0000
Manifest next update: Sun 15 Jun 2025 07:00:45 +0000
Files and hashes: 1: oTERYQxbfcdAepRJdL-H3PXCPnk.roa (hash: BUX480Cq0/FWcz+EdrT0tY5q1vVSAi6pm1ula8qFGn4=)
2: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: RObkWvVSsTjpqOm1gDGTB9Wuqzabr+nbdzDQdu2vNFg=)
3: wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa (hash: f/706SBS64fiaR4N+7m+WUBpo55cQMTVv5UqqvUPZQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:a3:a1:f9:32:50:f1:c9:32:d2:a2:f0:f7:8e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Jun 14 07:00:45 2025 GMT
Not After : Jun 15 07:00:45 2025 GMT
Subject: CN=64c3e02f55bcc2ad38fb0968b684889ab454bc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:3a:ad:04:92:e0:3c:0f:19:eb:b7:4c:ef:
4b:d9:7f:6e:ca:12:83:e7:b1:2d:6b:9e:09:91:34:
f0:df:36:59:41:8f:8b:cf:8b:d8:13:26:59:a1:8f:
60:00:f7:15:c9:66:e6:0f:a4:48:12:76:ca:7e:31:
61:50:00:51:1b:9f:0d:cc:d6:9c:df:29:45:9f:bc:
7b:43:07:2a:f3:07:4d:cf:4c:02:4c:e0:d8:0c:83:
7d:c6:20:92:8d:b6:2c:fa:56:84:d4:8f:38:6a:6a:
36:8b:a0:f6:fd:36:f2:92:28:bd:cd:62:35:0a:4d:
1b:8d:09:cb:0c:af:74:82:05:3a:ed:ef:33:56:9b:
62:5a:c1:26:50:4e:bd:4a:9c:87:a0:9f:bb:9d:90:
91:c9:5c:8c:f4:5c:ca:4b:31:67:6e:45:fe:b7:2c:
63:af:42:eb:b0:27:17:da:be:c3:05:e2:22:c6:d9:
cf:55:db:c9:58:73:4b:eb:e2:3f:db:20:97:42:99:
5d:d4:8d:8b:a7:58:51:eb:3f:99:51:7f:66:d4:13:
da:ec:be:78:04:24:05:4d:0e:e0:e6:c7:e2:a5:2c:
91:27:45:d3:5f:91:b0:50:a0:c1:19:94:33:6c:18:
be:64:0d:e2:4f:1b:22:f1:c4:53:dc:66:af:ca:84:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C3:E0:2F:55:BC:C2:AD:38:FB:09:68:B6:84:88:9A:B4:54:BC:3B
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f9:54:bb:4d:a3:98:02:be:97:2f:b2:33:e6:4a:52:bc:c3:
87:bb:0e:6a:a6:77:c6:ec:da:05:ea:b2:44:e1:ae:06:b3:74:
f4:7d:cf:72:be:db:cb:d3:2f:5b:d0:67:5d:e3:09:64:71:58:
e3:66:77:72:55:21:61:52:c0:24:f4:4b:48:68:33:ad:be:09:
7c:30:f5:1a:a1:b2:95:00:c2:91:bb:53:33:6c:70:a3:d9:9e:
dd:ba:41:64:42:ee:c9:61:79:d1:22:59:e5:c0:48:a4:4c:79:
9b:95:8c:37:93:09:d8:a3:e1:ac:5a:03:ca:8c:71:05:f2:38:
23:8e:58:dd:55:a6:52:ec:cf:1c:42:50:3d:1b:83:89:fc:81:
13:d2:1f:05:b4:18:c3:e9:61:e4:fd:50:33:7f:0f:1d:b7:a8:
6a:a0:89:f1:88:91:08:df:95:ff:90:19:90:b0:c2:bd:ac:b5:
88:a8:a2:e6:f9:8d:84:d4:85:df:39:50:ee:bf:e9:97:2a:39:
35:f6:d8:26:60:11:28:6e:fc:4c:69:9d:12:16:9c:bd:45:fa:
24:8e:8a:07:df:8a:83:67:ef:d3:b0:f2:94:1a:d8:8e:34:76:
44:6f:81:ad:e7:b9:a8:6d:4b:19:d1:25:9a:a7:ec:1e:fb:c4:
51:32:bf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:36 2025 by rpki-client