Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
File: pVB1uOQuRRTvSdP-ovGHJk50-y4.mft (raw, json)
Hash identifier: A1w6MKOF93mhbC/Bbc9WCJES7Hh0idabUjdOSb+N65o=
Subject key identifier: 6E:10:B5:77:2E:45:02:C9:8E:27:FA:6B:A4:98:61:F6:9E:65:71:68
Authority key identifier: A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
Certificate issuer: /CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Certificate serial: 01976BF45316AB196163B83E87301063C633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
Manifest number: 0229
Signing time: Sat 14 Jun 2025 01:01:03 +0000
Manifest this update: Sat 14 Jun 2025 01:01:03 +0000
Manifest next update: Sun 15 Jun 2025 01:01:03 +0000
Files and hashes: 1: AHyerdr5uxL6xuyGfsHFNBv_XjU.roa (hash: /uUPID3475V6+DCQHcFaqhePNwogod/B8RgCIUOzHrI=)
2: pVB1uOQuRRTvSdP-ovGHJk50-y4.crl (hash: 8I9Mszf7FyQFJ69qG2Z9Bf8guJ0EA9nyNAhNpufOQ4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:53:16:ab:19:61:63:b8:3e:87:30:10:63:c6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Validity
Not Before: Jun 14 01:01:03 2025 GMT
Not After : Jun 15 01:01:03 2025 GMT
Subject: CN=6e10b5772e4502c98e27fa6ba49861f69e657168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:00:de:8d:83:5b:d5:10:84:5c:f7:2e:48:e5:
cb:24:71:14:f2:9e:d6:ba:02:26:31:25:f8:e2:9f:
14:e3:64:61:1b:7a:86:17:be:82:0e:fa:fe:62:cf:
e1:c6:57:6e:b2:3a:79:f5:30:70:da:5e:e8:4b:8d:
f1:80:5f:9c:e8:3a:4f:0b:61:fa:d9:aa:e4:ec:55:
c1:7b:58:b8:7d:9a:dc:57:49:73:a9:48:a2:70:07:
aa:7c:1e:ea:4e:12:d5:bd:86:21:e6:91:cb:92:86:
51:53:3a:eb:57:18:35:53:9d:9b:53:d2:3d:89:4b:
fa:df:6b:fd:e4:54:59:77:a3:6c:16:c4:1c:79:2f:
d3:53:fe:cd:30:fc:14:34:c2:eb:9d:93:83:6c:da:
f7:61:bc:73:dc:b2:20:58:a8:fb:17:dc:61:ab:3f:
5c:19:f6:02:3b:d7:2d:12:f9:6d:d2:a8:e5:6e:96:
c9:9d:de:89:d9:5b:93:90:19:8e:1c:36:c4:62:00:
e3:a5:4a:87:e6:db:4b:9c:a4:3b:19:df:68:cd:ce:
f3:3c:72:49:2f:5d:35:d8:60:e8:62:e2:29:84:d6:
0b:3b:5c:77:24:82:cd:8d:1b:d9:f9:57:e9:b9:56:
c0:ab:3b:07:c2:ea:dc:2d:57:14:1f:1f:b6:62:98:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:10:B5:77:2E:45:02:C9:8E:27:FA:6B:A4:98:61:F6:9E:65:71:68
X509v3 Authority Key Identifier:
keyid:A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d9:93:61:db:fc:bc:3e:d4:01:5f:ee:d4:c0:51:f9:53:6b:
5a:2d:27:60:7b:0e:a9:ff:90:0e:03:4e:9f:0f:35:45:e9:43:
af:89:42:75:a7:3e:5c:9d:ea:9d:ca:2c:79:ff:86:62:1f:6f:
cd:be:68:39:65:f6:27:e5:36:fa:5b:79:c9:d5:a2:7b:2d:e4:
18:11:e1:e2:e7:21:8f:0f:6e:fe:fe:5c:7e:3f:89:24:d2:05:
41:ce:7c:8f:d5:c4:b7:b4:39:23:21:62:28:1c:24:8b:93:fa:
ee:79:24:12:03:35:72:5e:de:f3:aa:2c:3a:49:f3:66:22:f1:
8a:3f:96:ba:ec:25:e1:b1:56:a6:b5:2a:4b:2d:0c:0d:28:af:
89:0a:84:bf:08:86:39:d9:ca:11:9c:b1:d6:9e:af:b2:5c:42:
3a:e4:4c:fe:55:84:8f:f6:cb:ca:a6:62:c8:45:30:e9:e0:ec:
d2:30:dd:87:ea:53:f0:19:e2:be:5c:2b:2c:c1:a0:01:81:09:
97:cc:f0:9e:93:bb:74:3f:8c:be:14:47:9f:b7:d8:ac:c6:d7:
3c:bf:0c:47:b4:8c:12:af:e4:4c:0f:42:19:df:8b:42:5b:5c:
01:4b:40:89:4a:dd:68:e5:ad:11:88:b1:75:62:41:5f:6e:0c:
5c:85:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:44:47 2025 by rpki-client