Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: TeoJe/fd/rVk46QfmNGeUb1STJtn54s/0PMwKgx7p3E=
Subject key identifier: B1:68:70:AD:B3:8E:3A:21:F8:F0:BD:90:D9:D5:20:29:CC:49:92:39
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 01976C2ADFD3D117E0DD0AEF958BEBD6F82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 0ECB
Signing time: Sat 14 Jun 2025 02:00:38 +0000
Manifest this update: Sat 14 Jun 2025 02:00:38 +0000
Manifest next update: Sun 15 Jun 2025 02:00:38 +0000
Files and hashes: 1: eoOnLGiO6CFkl49Rw92BKVWZ1YY.roa (hash: 5KK2WxAAZ4SHFL6JTNlCRgBRKCCitoVvyQFa3VeriMw=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: 0ixUPPp2KXgXjgGyKtrszQ+LnQ0mqy6gWfOYCw8UxR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:df:d3:d1:17:e0:dd:0a:ef:95:8b:eb:d6:f8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Jun 14 02:00:38 2025 GMT
Not After : Jun 15 02:00:38 2025 GMT
Subject: CN=b16870adb38e3a21f8f0bd90d9d52029cc499239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:e8:fe:e0:e5:af:a9:96:d4:fc:c9:b4:65:
26:ae:27:d7:15:8e:c5:8d:ce:df:50:cc:77:db:9f:
be:01:eb:91:96:cf:ce:fe:45:01:cd:d4:10:63:fb:
26:83:12:82:20:fa:28:14:6f:25:39:77:6b:36:cd:
c2:47:b3:71:a1:45:7a:95:5b:69:d4:b3:06:c7:57:
ef:5c:05:a2:cf:df:62:fa:9b:84:d1:03:fd:e7:05:
a9:1a:d5:76:33:b7:c7:c1:11:9c:5d:70:55:db:c1:
39:4c:a4:41:41:95:c6:d1:48:8a:38:e5:00:fd:57:
f0:79:63:cb:7e:45:ac:ed:c9:ec:09:4c:1e:15:59:
54:96:b5:94:63:6d:9c:db:ba:ae:a1:b8:94:6a:e9:
52:cb:e4:cf:6c:8d:28:be:09:f1:49:8f:04:be:87:
84:be:c2:78:fa:39:1e:8a:1b:42:a4:3b:51:aa:f0:
d8:4f:b2:3f:14:0e:7e:4b:50:08:c2:df:bf:aa:60:
64:d1:05:50:24:ff:a7:f7:b6:28:fc:2a:e0:b4:fe:
bd:9b:31:10:af:8b:bc:89:bd:18:16:84:f4:76:9f:
78:9b:2a:80:ea:d7:62:d5:d4:24:f7:76:16:53:90:
c7:fa:08:91:8a:a6:94:0c:ee:cd:53:a0:03:a7:b6:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:68:70:AD:B3:8E:3A:21:F8:F0:BD:90:D9:D5:20:29:CC:49:92:39
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9e:3d:1d:82:4d:70:8e:94:01:ba:96:7e:7f:ec:06:49:af:
43:b6:04:de:34:75:03:24:9d:42:87:fb:d2:8c:e7:fd:e9:e8:
90:53:fe:17:4a:eb:53:88:a1:13:59:d5:79:b2:19:62:ee:e1:
b9:1d:09:0c:03:fd:62:a9:2c:cf:cc:b6:1e:fa:59:66:98:fa:
7d:7d:3e:87:95:cb:08:5c:49:a7:ad:73:82:fa:e7:17:8b:76:
a0:f3:34:e5:58:24:71:9e:13:a5:7e:73:cc:ac:44:64:1f:97:
42:88:5e:c3:15:06:3d:77:d2:38:6f:a7:39:48:83:42:92:bb:
4c:8c:1f:3a:70:31:9c:ad:0a:8e:81:91:6c:24:a6:97:9c:fb:
eb:d5:7d:41:9b:66:f7:4a:08:7b:d3:4c:f4:15:e5:ff:d1:2e:
21:7e:6a:24:a2:6e:d5:54:9b:44:14:50:f4:8a:20:a3:8b:92:
4e:85:ee:d1:da:c6:d7:46:7f:99:9b:58:fa:00:da:3e:0b:64:
17:3b:07:d5:54:95:30:ac:95:b3:68:70:a0:35:6f:a6:ca:d9:
fb:1a:09:e1:63:ae:22:97:8a:fa:c9:b3:7a:3b:6f:86:f3:9a:
62:82:27:d2:c6:b4:6c:0e:91:ce:54:c0:7a:e3:ce:f4:28:4a:
f4:13:31:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:51:50 2025 by rpki-client