Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: 5mgS1FFE2HR8TdaJUF99BCbcYWjJ5DOUtXyamO6mYpQ=
Subject key identifier: 7C:AE:E8:48:E2:1A:D7:91:5B:1B:9E:BB:AB:12:42:5E:16:6A:E3:5E
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 01977BD50F120EC2AC267BA5EB168A64F1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 1596
Signing time: Tue 17 Jun 2025 03:00:49 +0000
Manifest this update: Tue 17 Jun 2025 03:00:49 +0000
Manifest next update: Wed 18 Jun 2025 03:00:49 +0000
Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: RUscBpqvmOkFwJ0EAx1Bbe6M86ejTA3EOaXNag63PYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:d5:0f:12:0e:c2:ac:26:7b:a5:eb:16:8a:64:f1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jun 17 03:00:49 2025 GMT
Not After : Jun 18 03:00:49 2025 GMT
Subject: CN=7caee848e21ad7915b1b9ebbab12425e166ae35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:3b:a6:2a:81:6b:b4:79:92:71:99:79:42:
e0:56:fd:10:cb:fe:05:47:74:d1:2e:c0:53:42:ee:
db:ed:4f:88:ae:0d:88:d0:8c:ed:d1:96:f4:bd:05:
b4:0f:45:83:e4:de:94:4f:8f:14:8b:30:44:d2:b6:
fe:9b:54:69:f3:00:b6:74:c5:1f:3c:ca:10:7e:ad:
2a:b8:c1:fc:76:30:64:a2:f6:81:00:b2:e4:4a:ae:
c2:76:af:5a:51:a8:00:5a:54:4d:a3:4b:a6:eb:0c:
2e:71:c6:6e:90:0e:7b:77:f1:fc:1c:5b:10:0e:fb:
95:1b:12:c6:e1:9b:7a:a8:19:4c:15:0e:7c:16:cb:
3f:d1:80:3e:c9:dd:9f:48:ce:2b:76:cd:a8:80:8a:
4f:d5:62:9f:3d:b1:41:5d:fc:cc:bb:f2:45:c0:63:
47:20:c4:7f:ed:cf:5a:f8:ab:0e:50:56:e4:9a:fe:
b1:0b:f5:13:54:83:49:08:e2:27:f4:2c:4e:e5:6d:
6e:4c:20:0e:8d:7b:32:bc:7c:dd:55:35:43:96:65:
33:ac:9e:19:fb:ef:a5:87:bc:79:0b:cb:06:cd:a3:
62:88:8f:2f:f2:4e:37:de:8d:4e:2e:ea:b4:14:22:
fe:d4:f4:07:60:46:e8:aa:fa:3e:c9:00:79:9a:78:
6d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AE:E8:48:E2:1A:D7:91:5B:1B:9E:BB:AB:12:42:5E:16:6A:E3:5E
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fe:46:84:c0:66:44:61:fe:a5:5a:e8:0a:a7:fc:03:c1:68:
c0:81:00:eb:28:d8:c3:1d:0f:28:66:3f:cf:3d:5a:91:82:0e:
67:e8:91:97:77:a3:50:3f:2f:c8:56:94:5e:06:d8:2a:b1:f8:
2e:44:28:fd:aa:d7:df:27:72:fa:ba:6f:99:c0:d7:c0:18:a1:
1f:f9:b4:67:d5:72:4a:54:ac:8c:9f:d4:40:fb:91:05:65:44:
df:ee:1a:5f:f3:09:59:54:d2:e7:3d:2d:cc:40:79:95:a7:26:
c1:b7:c3:0d:1d:8a:91:9e:29:d6:2f:31:da:15:78:a4:cc:ea:
18:4c:4e:2a:a0:26:6d:d2:7a:9f:04:6d:88:eb:2f:23:17:39:
96:33:23:0f:9e:9d:26:84:6d:f6:62:5f:01:2c:4d:b9:89:37:
65:15:30:1a:72:73:bc:98:c9:4f:38:33:58:f4:62:33:f8:00:
60:ad:ac:f6:ca:b7:6d:f1:0a:6d:a5:5f:35:5d:34:bc:34:46:
e0:dc:1c:48:60:d3:0e:c6:ad:f9:e4:a8:e6:b7:a0:85:28:30:
8d:f0:69:46:d6:b9:c0:78:c2:b0:98:b7:2a:30:5a:8d:5b:de:
3a:17:62:f5:3d:b6:ac:f6:43:14:80:a2:56:8b:09:c7:d5:5a:
70:db:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:10:34 2025 by rpki-client