Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
File: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft (raw, json)
Hash identifier: lMLcvAlurpZCxOBJ1SAkB0Ylez/Qq0npa83LYGD/dwA=
Subject key identifier: FB:90:6B:21:62:EB:61:19:6D:C4:59:C6:F1:0A:12:F8:8A:C3:DD:6E
Authority key identifier: 3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
Certificate issuer: /CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Certificate serial: 019769977943BE966080978B4B44032B9A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
Manifest number: 0A2B
Signing time: Fri 13 Jun 2025 14:00:23 +0000
Manifest this update: Fri 13 Jun 2025 14:00:23 +0000
Manifest next update: Sat 14 Jun 2025 14:00:23 +0000
Files and hashes: 1: 1-zwO4Bnz3Ual-zgnG201JvaWkY0.roa (hash: d0O7JzfUI0auiFcqxl2U8Q+1vT7/+BPs1dhy7hNLrrs=)
2: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl (hash: 2E66GHUUanJ18VE16KMv6iAVfajpcTV7Ywiw75AMHeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:79:43:be:96:60:80:97:8b:4b:44:03:2b:9a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Validity
Not Before: Jun 13 14:00:23 2025 GMT
Not After : Jun 14 14:00:23 2025 GMT
Subject: CN=fb906b2162eb61196dc459c6f10a12f88ac3dd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:51:5c:a8:e3:4a:91:46:42:65:d6:92:32:
f8:95:00:b1:75:87:3d:b6:a3:ff:d2:b2:d2:d0:14:
80:35:e2:b7:83:d4:88:a0:68:bb:87:19:33:74:32:
6b:26:d3:94:97:00:18:7d:86:de:eb:27:02:43:85:
d3:d7:09:79:6e:40:14:3b:f6:a0:9c:4f:f1:dd:cc:
b0:1f:db:c1:a5:f7:81:08:ec:db:f3:01:e1:5a:36:
64:6e:61:0f:00:64:73:97:35:27:56:04:4b:c8:60:
02:d4:84:3a:68:3a:17:c3:b4:a0:d1:1c:9c:79:c7:
6c:18:75:cb:9a:dd:bb:2a:02:25:d8:75:b4:39:3e:
10:7f:77:9b:e7:03:7a:12:da:60:3e:5c:81:dc:62:
be:c5:3b:9e:87:bd:df:53:ff:d9:e1:a1:e4:f5:2f:
3a:29:4a:c8:02:a2:a7:c9:9f:60:e9:ac:be:23:62:
89:cf:2e:c9:1d:ab:b5:c4:2f:28:66:86:41:90:32:
d9:38:e4:e3:66:be:cb:16:c9:4d:ba:6f:c8:a7:e5:
33:dd:c2:1e:34:2b:a4:b4:ce:b6:a7:bb:dc:c8:c3:
a8:31:9d:40:a2:ad:16:85:25:6d:44:81:29:36:05:
d8:59:5b:77:d3:65:5e:a9:65:5f:81:f7:6e:0d:ca:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:90:6B:21:62:EB:61:19:6D:C4:59:C6:F1:0A:12:F8:8A:C3:DD:6E
X509v3 Authority Key Identifier:
keyid:3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:18:fb:73:49:b2:e6:66:6f:f8:32:26:c7:ff:1c:09:14:89:
28:c9:9f:f0:cd:a5:fc:f2:37:61:52:e6:8d:1b:0a:c9:66:24:
44:ae:d9:23:f1:42:e9:2b:2b:8c:77:4b:40:38:f1:b1:07:ca:
8b:08:de:02:18:4b:3f:6c:ba:58:07:59:fb:38:53:3f:45:a8:
37:aa:e3:61:8e:94:87:16:d4:a4:1b:23:73:68:c0:e4:d1:3d:
05:57:d9:ae:85:7d:f9:85:b4:19:98:81:ad:43:c8:d6:54:37:
36:93:41:60:81:ff:b6:40:75:04:8a:75:01:b0:8e:d2:fc:77:
dc:68:ac:b3:5f:9e:e9:56:5c:4f:94:e8:00:b4:b9:9f:00:05:
b6:52:41:a8:90:cb:cf:a2:be:f3:12:2f:66:d8:b5:5e:05:42:
79:4f:88:8a:17:c8:51:69:4a:f0:8e:e5:04:3e:36:fa:17:e9:
68:4f:a6:cf:2d:40:8d:db:8a:09:7c:8f:6d:0c:d5:dc:02:30:
f5:f2:76:51:f2:52:e5:07:96:0a:08:f7:15:da:0c:ae:c0:f7:
e5:77:b8:8d:ff:18:94:c9:d1:5f:dd:e7:31:08:d3:be:d7:46:
32:6f:a0:bc:2e:e8:e0:e5:4a:9e:7f:55:f5:b2:61:13:87:d0:
0e:fb:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:16:35 2025 by rpki-client