Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
File: praJ3e9Y8KM4Pi71qjonxP5FMY4.mft (raw, json)
Hash identifier: nYWBITnXi41Y8lmYyocYxg4vjzOiz0mCUj6sDf1kFF4=
Subject key identifier: 8D:36:58:25:3F:55:D2:A7:5A:CF:09:BF:65:ED:4C:0F:7D:51:19:36
Authority key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
Certificate issuer: /CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Certificate serial: 0197729AA820BF909DBD0C60D6B8FB854299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 08:00:27 +0000
Manifest this update: Sun 15 Jun 2025 08:00:27 +0000
Manifest next update: Mon 16 Jun 2025 08:00:27 +0000
Files and hashes: 1: 1-hqyEGwonCGY9K2L38Pw7_zJV_k.roa (hash: a3BoJ3dncPr176aD5ziB0Bh5202joOPjBl2mIqn/r/0=)
2: praJ3e9Y8KM4Pi71qjonxP5FMY4.crl (hash: Ov6F8GFShee7QtC4BbKGb1DKPecSmMMevGJRdHANzbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:9a:a8:20:bf:90:9d:bd:0c:60:d6:b8:fb:85:42:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Validity
Not Before: Jun 15 08:00:27 2025 GMT
Not After : Jun 16 08:00:27 2025 GMT
Subject: CN=8d3658253f55d2a75acf09bf65ed4c0f7d511936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:c2:9d:05:e8:13:1e:97:1d:54:f2:91:54:
9c:d6:1e:2d:ff:f3:3d:48:cb:c2:cf:af:c2:ac:08:
da:f2:af:13:b8:87:ba:61:94:a1:18:16:38:69:eb:
e7:83:58:c4:8c:f2:f2:b9:bf:0b:e1:bd:26:19:29:
e0:85:2b:d4:8c:a8:4a:16:9f:bd:d4:0b:13:f4:c1:
8a:80:68:92:ce:6c:bb:fa:25:9a:5b:dd:c1:0a:27:
ca:59:b9:ed:85:b2:73:08:5f:89:dc:7d:eb:3f:f8:
c0:7a:c0:49:dd:28:6b:8d:3c:3e:2a:a8:d3:4c:8e:
76:7b:f1:2e:e1:b3:67:e0:7a:13:21:f8:59:ef:11:
32:95:1a:98:09:19:40:d4:e9:5a:9e:21:90:9e:0d:
c7:5c:a0:7e:ab:32:16:7f:06:bf:6d:22:ad:4c:bf:
5b:86:f4:6b:04:9b:a5:d1:f6:fa:42:ec:7c:d5:c9:
80:55:76:ca:eb:7c:6d:b2:d3:d4:c7:0e:e5:aa:1d:
17:92:41:fc:c6:09:d2:8d:be:b2:94:dd:2d:0e:42:
20:2a:9d:6a:23:b6:98:16:7e:e6:43:15:c9:11:53:
92:39:2d:8e:14:9a:84:00:bd:95:12:20:6e:eb:ce:
f8:6b:38:33:12:88:e6:8f:c5:27:e8:a5:8d:f8:50:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:36:58:25:3F:55:D2:A7:5A:CF:09:BF:65:ED:4C:0F:7D:51:19:36
X509v3 Authority Key Identifier:
keyid:A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6d:98:94:49:2f:c1:98:11:11:7c:66:4f:5a:77:f3:70:cf:
37:05:6b:dc:68:3b:d4:6f:8b:a4:0b:50:e7:24:b9:8f:71:ab:
71:0f:ca:05:57:0d:55:08:05:9a:f5:08:4c:3d:49:e0:af:fc:
06:d1:2b:8b:e5:06:64:60:f1:f9:4a:2f:3e:63:de:67:b8:9c:
3b:b6:5c:c2:b7:60:62:4d:41:23:fc:8e:33:bd:82:b4:09:12:
18:2a:fe:0c:cf:5d:65:57:80:6c:1e:c4:f5:51:67:22:e7:8c:
04:cc:b6:78:be:c6:ec:77:1a:92:13:97:a6:3e:61:9c:99:5b:
a5:fc:e4:33:d3:73:d3:86:1c:55:08:2f:39:8a:99:9c:75:b7:
c4:7e:55:08:31:dd:61:90:1c:4e:e4:90:6f:b3:5a:d2:1c:33:
69:61:77:ba:71:59:3f:85:5b:88:42:2f:91:26:ac:ab:c0:16:
16:79:2d:f5:b6:ef:14:0d:9c:8c:1f:e4:6c:3f:c2:a8:83:f8:
56:23:a6:50:8f:30:5b:91:84:32:b8:af:c7:49:57:c9:fd:2e:
f4:12:9c:4e:a7:91:54:ee:82:40:bc:8a:cf:65:9b:8d:f8:17:
83:e9:c2:8d:2b:a4:61:93:fe:e5:41:b5:4e:22:65:ad:b0:be:
a8:8e:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:28:17 2025 by rpki-client