Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier: feEE6GWFVk8+NIrwGMPWM5OMfuCR+Ti//itBPKTYx+Y=
Subject key identifier: 9E:C0:2B:7A:DF:0B:F1:79:C3:4F:AC:81:CC:18:C8:15:9E:3B:0C:40
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 019770AC6D4B179CC27B460328AFEB860DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number: 0A11
Signing time: Sat 14 Jun 2025 23:00:37 +0000
Manifest this update: Sat 14 Jun 2025 23:00:37 +0000
Manifest next update: Sun 15 Jun 2025 23:00:37 +0000
Files and hashes: 1: AdJqJvlWVSQ_2sjUlxPnhKVvXgE.roa (hash: rvwXexvACQ2KWhkVUmfkFIN6qH1hFBVmtLOZa/tj5cA=)
2: LktV6JWikoIF232VjBQrp6HksI4.roa (hash: KgS7FsPzBvy4Emf2JVBB8x2vPupCGQ56pl16OI2UqbY=)
3: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: /I9+IoHkRBdFX5+PIpZh7SLBtxIA+QnCAJ3Ek5NBOMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:6d:4b:17:9c:c2:7b:46:03:28:af:eb:86:0d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: Jun 14 23:00:37 2025 GMT
Not After : Jun 15 23:00:37 2025 GMT
Subject: CN=9ec02b7adf0bf179c34fac81cc18c8159e3b0c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:2e:e1:fa:e0:e4:de:34:ae:49:96:d5:f5:
b3:44:ae:c9:fa:e8:6d:50:c6:63:b0:67:5d:86:9c:
e5:84:7d:27:4f:7f:03:d6:a2:0c:63:ae:d7:bf:4b:
0c:a1:5b:14:a9:42:da:4a:a5:08:95:92:a6:7f:98:
3b:2f:1a:ad:4e:bf:91:d2:7b:00:c1:60:58:df:73:
38:e3:7f:f9:26:0c:0f:e3:33:3b:76:69:03:48:d0:
0a:52:9d:d6:09:1c:50:d2:df:e2:4f:3a:30:8f:88:
90:3d:7c:98:a2:dc:2b:d9:21:ca:ce:ff:4e:c2:7b:
08:10:28:8f:da:95:bf:fd:67:c7:6a:60:b5:6a:e2:
a6:b1:af:30:31:d7:d4:01:f9:4d:65:0b:77:ef:a7:
85:62:8f:ca:df:2c:84:67:80:46:aa:87:3f:7b:4c:
23:62:9c:a8:6b:c0:25:aa:d5:1b:08:3b:66:6a:1f:
15:86:3a:24:3f:7f:74:62:c5:a8:ca:b2:e8:98:05:
42:f0:8c:96:a5:ef:1f:8a:e4:9c:b7:ff:63:4d:b8:
da:45:e9:68:c8:2e:28:84:c2:49:4a:43:72:f5:7d:
41:2f:29:b1:00:d7:07:a6:c4:ab:ce:83:68:ad:b0:
d9:60:a8:f3:d0:48:fb:9f:04:f9:23:a6:84:97:f0:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C0:2B:7A:DF:0B:F1:79:C3:4F:AC:81:CC:18:C8:15:9E:3B:0C:40
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c8:15:df:da:e9:ff:d1:41:87:8f:56:3d:1e:1f:3d:87:f3:
41:32:50:e0:6f:7d:98:8f:e2:af:97:d1:44:9a:1c:56:85:ec:
b2:d4:1a:dc:6a:fc:16:89:a5:61:33:26:de:47:04:b9:c2:77:
79:0f:9c:40:3f:5f:0f:c3:dd:cd:66:6c:6f:82:13:7b:7a:b9:
60:42:cc:0b:83:02:f2:32:8a:47:ce:7d:e8:53:a7:b8:65:14:
97:d6:88:99:5d:bb:3e:89:81:dd:df:f8:77:9a:d9:e5:f0:2c:
90:54:a7:12:4d:e6:6d:57:8c:d6:36:50:db:a8:f6:ef:31:c2:
26:f1:54:a1:f0:9e:64:bb:b9:97:0c:da:d5:9a:da:c5:70:c4:
c1:51:a7:fc:38:65:e1:91:1e:f1:5c:ef:62:13:7a:2b:50:58:
4b:28:41:f1:fc:0e:d2:45:ca:e1:28:77:fc:c6:0f:84:57:50:
9c:aa:d9:c0:c0:f4:6d:c8:14:a6:ae:f2:ec:f1:98:8a:74:92:
3a:b6:8f:5e:5f:53:7e:67:93:95:8f:1b:77:48:9b:4c:77:fe:
59:d2:65:07:0d:27:74:3e:a2:fb:65:b1:68:e3:79:06:57:ba:
ea:50:c1:de:32:6c:37:fc:9b:8f:ec:58:ca:48:0a:39:8a:4b:
c9:4f:c2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:08:30 2025 by rpki-client