Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: JwWmJ0H4vBYOxLcnFjxhvpMbKrdd8JQ6CCAgntFULn4=
Subject key identifier: 8B:E6:D9:FD:5B:1F:10:A9:94:7A:27:50:EA:8D:A9:7F:88:13:A5:30
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 019774896DC6D9D240C8A2A13537FA29399F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 017D
Signing time: Sun 15 Jun 2025 17:00:52 +0000
Manifest this update: Sun 15 Jun 2025 17:00:52 +0000
Manifest next update: Mon 16 Jun 2025 17:00:52 +0000
Files and hashes: 1: cbfaYBjluJFGRHIZotfNKfL5QOM.roa (hash: hnnwP5hTMZNnGccOJwmbq229la5aF88t7OiSZXiU/mU=)
2: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: g5EChatp1yq2OZuN4NwIVflvKALTsDKiJrbk0EJ+Czk=)
3: zwNxRZCXOiLKuZa_7Wmh9NcuOqQ.roa (hash: 6xxBkLaHc1up/veCbZl0eXM5uTf3B1SDA3dM0Oft33U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:6d:c6:d9:d2:40:c8:a2:a1:35:37:fa:29:39:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Jun 15 17:00:52 2025 GMT
Not After : Jun 16 17:00:52 2025 GMT
Subject: CN=8be6d9fd5b1f10a9947a2750ea8da97f8813a530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:8a:32:46:d2:8a:c1:27:bd:53:ce:e4:7e:
a4:83:cb:0c:a5:77:99:7b:83:1c:a1:81:70:f2:df:
f3:95:3a:0e:bc:bb:67:ba:84:83:d2:3c:11:c8:ed:
e8:87:51:87:82:33:7c:04:58:29:19:1d:fc:13:e6:
06:dd:f3:b9:d5:64:3e:05:92:99:43:bc:32:ff:0d:
f9:6d:c9:f6:39:17:4e:3a:6a:9a:30:ba:2c:34:0c:
f7:d4:01:26:24:f4:1b:8d:da:ba:b5:53:0e:e1:09:
57:32:f5:f0:8f:b4:a0:29:89:3f:d6:c0:ae:2b:de:
bc:98:d0:8b:1f:58:73:a0:8b:e3:71:70:d1:e7:b1:
8a:c7:dc:12:77:5a:3e:d8:28:24:c8:dc:09:49:62:
c5:ce:dd:bf:23:7b:34:00:fb:54:4b:c2:d1:0c:ac:
ec:ff:f4:e8:b1:5e:73:02:cd:e3:a2:a0:9f:63:e9:
e7:1d:ad:fd:f0:67:64:e9:8c:05:00:24:be:92:25:
d8:d1:f8:fa:48:37:73:83:5d:69:4b:fc:89:52:a4:
0a:0b:a6:fb:83:cb:d4:a8:22:a8:4f:a7:fd:34:48:
80:36:83:20:dd:d3:c0:56:84:07:4a:3a:5d:cf:9c:
88:d3:9e:2c:d9:5e:44:72:57:7f:70:45:14:0c:48:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E6:D9:FD:5B:1F:10:A9:94:7A:27:50:EA:8D:A9:7F:88:13:A5:30
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b8:6e:2a:ca:b8:7c:f3:01:6a:b1:bd:26:49:08:f9:7a:87:
f2:d8:3c:09:ef:28:5c:0d:a5:9d:ff:ca:78:90:5e:09:10:58:
20:4f:f0:bd:09:47:e6:71:13:46:7b:25:a5:6d:d1:53:62:dc:
f4:74:cc:ca:37:8a:e2:83:25:30:d3:49:bb:e4:4e:70:9f:1d:
fc:70:c4:3a:da:2f:ab:d4:2b:90:15:23:75:1e:38:3d:3c:9c:
90:a3:63:35:bc:cc:3c:24:24:04:57:c1:ee:f9:a2:10:5b:8b:
50:b4:d5:b1:c8:95:f1:38:c1:d2:39:8d:9a:3f:dd:03:a2:3e:
c7:8e:d5:a6:6b:e1:af:11:03:94:3e:48:8c:f8:20:06:20:45:
f4:07:59:70:0b:fd:1b:45:c5:c2:5e:bd:49:44:26:b1:fb:26:
99:f0:94:95:8d:4b:7c:6a:2f:bc:7a:87:60:20:35:ff:75:cb:
c4:ee:72:ea:43:5a:fe:a3:fb:1f:28:3d:58:d6:47:90:de:ea:
1e:85:bc:af:5c:02:e6:27:2a:d1:62:16:3d:f2:bf:3b:9e:a6:
8f:bb:d4:bb:60:25:41:e2:e9:71:40:e6:3d:21:52:56:af:3f:
e7:d7:d6:2d:38:24:92:8d:42:75:f5:78:bb:c8:fe:50:ea:d6:
e2:d0:d8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:04:10 2025 by rpki-client