Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
File: pB97t76hWBYk_LZQOrWnD0IMmz4.mft (raw, json)
Hash identifier: 2cCmiJWXfughTeBgrM5pVcK8qKZsTO9ujYTYUNbh2kw=
Subject key identifier: 92:27:73:00:73:5B:41:63:8D:48:EC:41:2E:C2:D0:2D:C1:58:DD:22
Authority key identifier: A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E
Certificate issuer: /CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
Certificate serial: 01976884FC2A388631AF1BBC1041B879C122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
Manifest number: 3F
Signing time: Fri 13 Jun 2025 09:00:34 +0000
Manifest this update: Fri 13 Jun 2025 09:00:34 +0000
Manifest next update: Sat 14 Jun 2025 09:00:34 +0000
Files and hashes: 1: TOnoVfX8Ap4KHroZhyTiZTPqFbo.roa (hash: h8XoURF67JqruQUoq14dZxGEi4Cnu4hmR974XbY5rg8=)
2: bktyDBqNSVITQAf_MKFUeQ2s_nU.roa (hash: q/tuR42MGkp/VtZe/IwxRfy5LTdFIBVwnpSc5i4a68A=)
3: pB97t76hWBYk_LZQOrWnD0IMmz4.crl (hash: RwT554J2LtkccnDcsxkjeXqU8GbEab7WJgpUOFmrjHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:fc:2a:38:86:31:af:1b:bc:10:41:b8:79:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
Validity
Not Before: Jun 13 09:00:34 2025 GMT
Not After : Jun 14 09:00:34 2025 GMT
Subject: CN=92277300735b41638d48ec412ec2d02dc158dd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:af:be:1e:70:24:3e:61:00:8e:08:52:2e:a3:
48:06:b5:7a:87:cf:08:f4:6f:04:ef:86:2f:35:8d:
63:dc:c2:5c:1e:b6:e0:e0:b8:72:71:da:0f:89:23:
ae:18:cd:0c:d2:91:5e:3e:b0:81:b4:f4:97:d7:1c:
41:ce:7f:19:38:62:20:ec:e5:a6:63:cd:19:4f:ef:
3b:69:ed:55:3c:e9:7b:79:d3:3e:86:85:fc:c0:85:
40:c2:42:4f:7d:5a:ec:1c:bb:b4:ec:8c:b8:7f:5f:
75:ae:08:1f:be:b6:35:80:dc:c3:dd:db:f5:75:55:
a7:a2:e7:9d:f1:18:ea:05:b2:4c:d9:ed:bb:6c:ab:
5b:e8:0b:3d:c9:d5:98:01:a1:0c:f3:92:d8:e8:25:
04:0e:c3:b8:40:47:dd:3c:64:be:a4:19:6f:9a:e0:
48:5f:08:c1:de:71:fe:eb:66:03:f7:fa:c8:aa:e7:
7d:cf:6f:53:a3:eb:5b:de:9a:0a:43:e1:17:f4:c7:
c4:f0:6e:f8:98:db:ae:a7:4d:48:82:e6:29:73:1a:
8e:52:55:13:bb:3c:e9:9b:ef:d0:ea:48:63:1a:da:
29:95:55:98:99:83:84:b0:61:4c:23:42:1f:26:4b:
13:f8:57:a6:78:51:39:e6:1c:52:a3:3d:49:9f:91:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:27:73:00:73:5B:41:63:8D:48:EC:41:2E:C2:D0:2D:C1:58:DD:22
X509v3 Authority Key Identifier:
keyid:A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9a:06:f9:33:91:53:4d:af:6f:60:43:96:37:61:8b:bf:71:
59:ac:e3:5a:ef:a7:bc:a6:7f:b9:86:4f:2f:1a:76:e3:9b:47:
51:8f:97:3d:a5:44:01:28:22:c4:47:f6:8f:28:65:1c:7f:cd:
d2:39:04:17:7a:89:e3:d2:c1:c0:23:bd:4e:c3:5b:d6:62:34:
f7:7d:81:67:72:f9:c0:75:01:41:64:7f:4f:5b:1f:0f:f7:01:
e2:72:fd:6c:52:05:98:6a:b0:c7:f2:bd:25:bb:99:50:c9:b0:
11:aa:2f:44:aa:4f:9b:55:f0:fd:ab:78:b0:95:26:fb:98:be:
52:70:8b:bd:61:18:1d:b0:13:aa:1b:47:34:b4:6f:ac:38:44:
75:fd:b9:be:d0:3d:a9:c2:af:de:e6:23:dd:b8:49:33:2f:b9:
39:1d:ca:e8:a6:29:e5:ba:3b:a5:bb:c7:77:c4:a2:d0:16:df:
2a:7b:2b:c8:3e:7d:85:7f:0e:90:f9:ee:eb:bb:83:41:46:90:
96:87:19:71:7c:80:6a:4a:2e:2c:96:52:a9:0f:2b:0b:31:ab:
1c:4e:13:de:a8:3e:c7:9a:c9:05:f6:52:0b:d7:d1:c2:79:55:
60:a1:99:7e:ec:72:a9:50:8c:c2:70:82:1c:3b:d2:55:8f:be:
4a:5b:2b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:54 2025 by rpki-client