Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
File: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft (raw, json)
Hash identifier: 7N4nZ3yB0+rENwqjso20IOOBiDj6gW7LcXXeEqybvoc=
Subject key identifier: DF:4D:5F:12:CC:8D:0F:2A:04:12:21:74:4F:6D:E3:91:D6:BD:21:50
Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
Certificate issuer: /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Certificate serial: 01977B30B47BAE22C619F454AB9CFB575865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
Manifest number: 0A49
Signing time: Tue 17 Jun 2025 00:01:18 +0000
Manifest this update: Tue 17 Jun 2025 00:01:18 +0000
Manifest next update: Wed 18 Jun 2025 00:01:18 +0000
Files and hashes: 1: 6jOAX6ZKooyhgzG3-RXUavHtejc.roa (hash: zAiUnOceYAANogRzQmsXCXZI4dk5OulIUSwMR15rFvs=)
2: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl (hash: pC6Bm84kJUTpBKHeShMI3mpxzIsKvdZ5505tZOySi8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:b4:7b:ae:22:c6:19:f4:54:ab:9c:fb:57:58:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Validity
Not Before: Jun 17 00:01:18 2025 GMT
Not After : Jun 18 00:01:18 2025 GMT
Subject: CN=df4d5f12cc8d0f2a041221744f6de391d6bd2150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:85:ac:51:d3:88:c4:5c:c3:b4:99:bf:2e:
d8:80:53:1f:51:22:d8:a9:7a:e7:ae:59:e7:5d:f6:
44:f4:ed:84:e8:9b:1c:6b:3d:a2:97:d7:c8:8d:67:
1a:47:0b:5e:9f:60:a7:72:7f:37:bd:82:dd:1b:b1:
44:7d:2f:a9:65:31:80:d1:40:ef:67:40:99:0e:29:
39:43:43:16:c5:da:c6:d7:bb:7d:02:33:0c:c8:8f:
f5:d5:53:fb:b3:5d:59:ef:90:98:1f:cb:86:9e:5e:
88:c8:07:9f:45:e7:ec:72:44:18:96:c1:a0:98:0a:
4a:52:73:8e:1b:a9:c6:fe:cd:95:4e:e4:e8:73:60:
75:ee:e8:9d:f8:64:a2:af:aa:48:89:93:06:6e:ac:
40:b3:4c:e5:24:7e:07:ab:00:7d:e5:d9:25:55:39:
cc:89:59:f4:f8:bd:4e:91:d7:16:c4:68:75:fd:2a:
9d:6c:a7:b4:2e:6a:2d:91:72:b4:c3:c7:93:ee:bb:
8a:4d:b4:8e:95:1c:6e:09:7f:da:16:cc:49:44:38:
b8:01:72:19:ac:31:fa:0f:61:4e:d0:e6:b9:06:e6:
c2:aa:f6:c4:2b:44:19:ce:6e:f4:41:dd:64:8a:30:
cb:20:4c:44:46:35:5e:c9:bc:73:5c:35:b9:b9:85:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4D:5F:12:CC:8D:0F:2A:04:12:21:74:4F:6D:E3:91:D6:BD:21:50
X509v3 Authority Key Identifier:
keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:91:20:70:74:68:f3:33:e2:57:2f:a5:01:fa:5a:9a:de:01:
d0:59:4a:13:fc:32:a4:9c:ee:e1:9a:2b:bf:c6:9c:5a:d4:c9:
71:96:ef:72:91:52:97:4e:b0:a5:0e:76:33:91:af:e5:9f:e1:
df:f8:3e:49:06:80:5e:26:c5:87:9a:5b:ce:dd:2c:b1:01:07:
96:bc:ac:3b:98:45:d0:1a:a4:cc:9c:5a:07:8f:50:4f:20:c8:
31:a3:91:86:72:e0:44:fa:9a:f8:08:03:04:01:02:3c:ea:ce:
dd:fa:2d:d8:3d:fb:af:3f:77:da:f3:c1:d9:67:84:7c:6d:95:
aa:ad:45:ab:35:19:01:92:c9:ac:90:fc:fe:36:2b:0e:04:64:
42:e5:0a:c4:a8:0e:0b:a1:f3:f1:ad:cf:9e:ad:a9:b2:2e:4e:
5a:77:69:de:47:61:92:18:88:a2:51:48:aa:cf:d8:21:fe:49:
99:8c:8b:50:fb:30:9b:a5:5c:85:f1:2b:42:bc:d3:5a:31:61:
8e:cc:b4:76:75:9d:22:d4:a7:bb:96:52:d0:f7:19:aa:ad:f1:
83:a1:8b:4a:82:12:b3:c3:03:61:90:4a:0a:c0:ed:fa:89:aa:
39:40:7d:b6:61:e7:13:87:f7:3d:05:0e:22:1d:cf:63:c0:a7:
47:af:78:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:11:52 2025 by rpki-client