Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
File: pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft (raw, json)
Hash identifier: k+iPJQqD+v8TnQnJ/4CmAK9UjT3u/vefWKqGRohq38Q=
Subject key identifier: 7D:C4:DF:8E:4C:D1:24:EC:EE:60:EA:1A:01:CB:2A:2A:4B:1E:66:76
Authority key identifier: A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
Certificate issuer: /CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Certificate serial: 01976BF48297AFC270F1677AC8636C2BB6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
Manifest number: 0A21
Signing time: Sat 14 Jun 2025 01:01:15 +0000
Manifest this update: Sat 14 Jun 2025 01:01:15 +0000
Manifest next update: Sun 15 Jun 2025 01:01:15 +0000
Files and hashes: 1: LPRtA19ISdoMAcOg5dTdVh6L9Jk.roa (hash: yfplS3KyTgY8se7AVlwzcVLsAsein115ckLeaHyCF6w=)
2: pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl (hash: lxQCW9engZbsAMTayEnhebnOOlhuhU1b+tVxIxO+aXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:82:97:af:c2:70:f1:67:7a:c8:63:6c:2b:b6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Validity
Not Before: Jun 14 01:01:15 2025 GMT
Not After : Jun 15 01:01:15 2025 GMT
Subject: CN=7dc4df8e4cd124ecee60ea1a01cb2a2a4b1e6676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:d7:80:28:bf:65:22:2c:6e:c9:f1:44:f6:
a1:b6:90:a4:ac:44:5e:39:12:6d:28:78:f7:1c:9a:
9a:bf:57:23:8a:fd:fc:9a:c6:db:d4:00:f1:1c:a1:
91:87:ef:0c:ba:04:3c:9d:84:87:d7:3e:ac:ad:fe:
67:12:9c:c1:07:1c:70:b4:fa:97:54:da:76:bb:3d:
cf:ef:c2:4b:1a:72:46:2b:da:6d:06:e8:67:ec:76:
33:be:b4:1e:66:97:19:71:f7:f0:5c:9b:43:95:0b:
40:a5:ed:2a:ee:bc:cb:70:9c:79:78:0d:9e:ed:5c:
2d:91:de:1f:af:63:22:61:8a:a9:be:b0:c6:6d:71:
85:49:b7:94:0d:86:5b:93:d8:3f:0e:d0:45:f0:c2:
75:f8:2e:11:ae:13:7d:24:3c:d4:3e:54:4c:dc:a5:
5f:38:3c:6b:1c:e7:24:ca:2e:9d:69:13:8a:b9:8d:
cb:7c:22:05:81:5b:05:86:17:7d:ed:ec:07:1c:1e:
78:9f:ba:f9:a4:a4:17:73:b1:e4:63:d5:22:8b:ed:
a0:cd:1c:e0:87:40:45:83:f8:70:78:f4:2c:9c:6d:
ac:2a:47:ac:7e:5a:f2:44:22:b9:33:cc:ca:24:2b:
31:26:53:3c:fb:19:0e:15:d7:b6:fe:1d:05:6a:de:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C4:DF:8E:4C:D1:24:EC:EE:60:EA:1A:01:CB:2A:2A:4B:1E:66:76
X509v3 Authority Key Identifier:
keyid:A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f4:87:22:24:0a:21:8c:3a:ee:e1:53:0e:b3:48:db:97:33:
42:28:0a:59:66:47:40:53:19:d2:85:d0:1d:4d:bb:41:e6:e3:
dd:be:00:56:4b:59:9a:9d:fb:b0:f9:19:60:f5:22:b0:8e:9d:
03:db:e6:14:1f:97:3b:f2:be:3c:c5:ab:e1:89:5b:f1:57:73:
be:09:a8:17:c9:47:d5:86:62:d4:1b:32:22:d1:96:06:c2:74:
b8:4e:5e:28:5b:20:c7:db:06:5b:4f:b2:d4:09:cd:1a:ae:00:
a1:ab:24:f1:08:f5:e0:c6:64:4a:1f:b9:20:93:db:b8:60:22:
09:ea:99:ae:27:7b:d7:02:68:5f:f1:0a:f6:08:54:5f:b2:51:
57:7d:fa:cc:49:73:ad:72:03:a0:6d:90:28:55:0e:6e:37:98:
ed:fd:23:54:19:cd:bf:fd:db:04:df:62:14:63:f1:1a:69:f9:
d6:8d:11:9e:9d:af:63:f0:b9:2f:32:3c:6c:29:fe:ed:d8:a3:
af:4c:67:b1:31:98:00:a9:cc:83:79:25:bd:4b:d0:ee:9f:28:
d7:cc:63:57:54:21:ab:a9:e0:a4:16:fc:13:01:fd:52:af:e0:
d6:bf:97:f9:5e:34:85:b0:7f:7b:94:5e:36:1b:9a:5c:62:48:
4b:db:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:34:43 2025 by rpki-client