Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier: LWefepgt/uHLjMUGJnPl6dt/YPL2Au9uwZUp6fAkps4=
Subject key identifier: C9:1D:53:29:17:E5:34:94:4F:BB:79:CD:FA:B6:8E:86:6A:82:88:C2
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial: 0197684DEE256EFBB8F975D0222C8ACF0FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number: 122E
Signing time: Fri 13 Jun 2025 08:00:27 +0000
Manifest this update: Fri 13 Jun 2025 08:00:27 +0000
Manifest next update: Sat 14 Jun 2025 08:00:27 +0000
Files and hashes: 1: Hp2ljcULzg53pBCXbKt3KAlFkVw.roa (hash: qsDz5TZedLiWJnxlNWk1Ko36qqmg6+ybGLmJSNA11KU=)
2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: cZcNu2tg+sjzpPSwhPJ3bV6wcFWS5xtG27sil731s68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:ee:25:6e:fb:b8:f9:75:d0:22:2c:8a:cf:0f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Validity
Not Before: Jun 13 08:00:27 2025 GMT
Not After : Jun 14 08:00:27 2025 GMT
Subject: CN=c91d532917e534944fbb79cdfab68e866a8288c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:53:b8:e4:c8:bb:28:cd:ce:9a:27:e7:6b:
fc:56:eb:58:7e:96:62:01:f4:92:c6:c9:8d:4a:0e:
33:95:c6:4f:68:47:79:55:a9:8c:9f:27:0e:ef:6b:
fe:27:50:cf:40:0c:55:7d:1f:b6:a6:83:a9:f5:da:
55:a8:df:aa:4c:e2:b9:2e:d0:7d:0c:c7:5b:39:ae:
76:e3:86:81:16:ae:48:ac:88:9c:8e:f7:0a:96:c8:
81:9c:fc:69:81:0e:66:e7:6e:c5:5f:63:d5:87:e0:
75:bb:8e:44:ee:be:62:1d:3b:12:18:6a:7a:9b:7e:
06:d8:6d:7d:bd:51:c2:33:1b:d5:50:aa:1f:f5:85:
38:c6:a2:a2:47:c1:0c:27:aa:9f:30:f1:53:b8:0a:
fd:b6:87:c7:1d:21:bb:0d:79:fa:1a:ef:5d:2c:01:
53:b6:3a:9b:9f:a1:a6:02:48:d0:0c:96:79:c4:f6:
91:46:6d:e3:3b:aa:5f:61:99:66:5a:d3:b7:3c:56:
d9:d7:6e:1e:0c:fa:59:ed:c6:e2:cd:ce:65:cd:da:
95:5a:bb:bc:70:1f:31:d9:3f:28:e2:7b:56:b9:29:
0d:85:d5:13:db:dc:a3:32:e1:9a:60:81:44:18:f1:
d9:cf:44:95:4a:99:ec:37:2c:5d:5f:b6:02:23:f0:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1D:53:29:17:E5:34:94:4F:BB:79:CD:FA:B6:8E:86:6A:82:88:C2
X509v3 Authority Key Identifier:
keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6f:81:8f:81:e3:17:c8:8b:cb:65:28:26:f5:02:6e:d7:f5:
5b:8a:95:c5:7c:cf:a2:29:b3:f8:9b:36:5f:c1:3a:ae:c1:8e:
19:54:10:4b:56:fc:85:3f:dd:71:db:1a:a3:97:9c:f0:a9:fe:
ea:a1:2a:d6:b3:d0:c7:e4:33:e4:b8:11:04:53:c5:1c:80:b5:
fa:26:9c:45:da:23:c8:15:22:31:79:3a:a3:47:dd:95:c5:ad:
f5:ac:65:26:95:ef:58:1e:7c:99:35:38:ad:19:10:35:f1:e1:
17:e1:46:fd:b8:3b:38:fc:c1:06:2f:10:f4:b3:5d:6e:b5:46:
2b:06:dd:5f:d5:dc:fe:08:f2:2d:0f:f1:b7:04:87:17:0b:0c:
11:f5:76:d9:e5:c2:bf:0d:45:ab:1c:97:77:ef:17:61:46:4e:
83:e5:80:11:ff:64:82:7a:30:73:f7:67:00:f5:c4:12:84:49:
dc:c6:df:07:22:40:01:29:c1:a8:f4:4f:8c:4e:44:83:fb:42:
72:82:31:11:bc:f3:73:88:d7:51:3e:b9:be:0f:6e:64:9b:dd:
43:e9:d9:25:82:87:15:ff:43:eb:2b:00:ea:ef:c3:ff:af:0a:
f5:91:e1:5f:2d:d7:38:38:03:ff:51:96:fc:92:35:fd:1d:6f:
85:1f:9c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:24 2025 by rpki-client