Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
File: pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft (raw, json)
Hash identifier: RV58obG2ISgKglg2iN4ZZ4NBLCN75h8/IXNFxCbOzfo=
Subject key identifier: 56:69:84:4C:CC:83:20:5F:0F:A5:53:7D:D0:AB:F3:D3:D8:2E:AC:70
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 01976C2B5D31D8CE3A6C18F069274EA6BF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
Manifest number: 0E74
Signing time: Sat 14 Jun 2025 02:01:10 +0000
Manifest this update: Sat 14 Jun 2025 02:01:10 +0000
Manifest next update: Sun 15 Jun 2025 02:01:10 +0000
Files and hashes: 1: WhtcuJJ0NSWsio8f8rQNMbqqeD8.roa (hash: uBIazeW9ZJrIEfawzpjRmH4sNuGdOT1AiFSbiZsPXDU=)
2: pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl (hash: qlQPiHU3YqUQ6yrOoRQT/SxjJgYJrZIal1Qveja29o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:5d:31:d8:ce:3a:6c:18:f0:69:27:4e:a6:bf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: Jun 14 02:01:10 2025 GMT
Not After : Jun 15 02:01:10 2025 GMT
Subject: CN=5669844ccc83205f0fa5537dd0abf3d3d82eac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bf:51:87:20:78:0d:d0:c2:bf:80:b4:48:df:
80:e9:3a:15:25:1b:8d:da:fb:d4:18:06:5c:d5:a9:
2b:76:43:dc:01:02:da:2c:ff:81:ad:dc:ef:d3:27:
16:9d:b6:e3:15:66:fc:dd:ce:d4:a7:a7:00:0d:b9:
df:3c:04:3f:59:5c:d8:66:b8:d4:e5:b3:22:cf:23:
3e:b4:39:b1:36:80:bf:9c:a1:f2:86:b6:cb:d8:75:
5d:c8:ab:eb:8e:fa:8b:d7:d9:81:b0:59:65:96:36:
88:d8:ed:0a:1f:50:8b:7a:f2:f4:07:04:d4:e6:7b:
8f:f7:84:57:9f:62:11:ea:d2:10:35:e3:da:0e:44:
25:05:30:ec:7e:7e:f1:11:79:3d:f8:b3:9d:95:5f:
23:83:b5:db:1a:d2:b5:0e:1c:df:fb:69:ea:50:7c:
e3:bf:a1:be:4d:f2:65:9f:16:6e:54:ec:6c:ad:f3:
fb:9b:29:75:14:aa:d8:88:81:5d:85:ef:a2:4b:56:
3e:a5:9c:9f:ec:b8:ab:aa:f8:62:1c:7f:b8:37:a6:
38:0b:ae:15:9e:14:51:b9:5a:22:c9:f7:52:03:2a:
bc:c2:b1:d1:d8:8a:63:bf:8e:b4:fc:33:d2:b2:92:
83:0b:4b:56:7c:af:64:c1:d5:a4:06:78:1f:f1:fc:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:69:84:4C:CC:83:20:5F:0F:A5:53:7D:D0:AB:F3:D3:D8:2E:AC:70
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d2:60:3a:4f:e9:db:07:bb:51:36:12:55:b0:3e:6a:3f:78:
ea:91:76:2c:9a:2b:a1:9c:a7:b3:47:b0:e5:12:a7:bf:9d:44:
ed:39:b2:f8:7e:2f:d4:1f:ec:54:1b:ee:f1:65:90:e1:37:77:
7b:c0:b5:b8:65:39:fa:87:42:bd:d0:12:c3:7a:f2:90:85:4f:
7b:2a:d1:2f:63:29:30:30:0b:fb:0a:6b:13:93:e6:ac:8c:ec:
a0:c7:eb:27:7c:04:b0:89:d7:a5:96:cc:4f:bd:e2:a8:ab:ef:
59:7d:4a:49:bc:1d:a9:87:0f:d1:91:19:0c:9b:2d:ef:f6:be:
b8:ad:a2:ee:db:9a:83:d1:b9:b4:b4:f5:06:bc:df:b6:d4:4b:
00:4b:0c:41:2f:a8:92:fa:d6:03:cd:ac:b2:d4:0f:f2:47:ff:
d0:e9:26:33:68:5d:6c:42:f2:d8:db:a4:42:3d:1c:fd:3e:2b:
3a:22:5b:77:bd:d1:06:6f:08:1a:17:44:49:59:cc:31:37:b1:
92:b9:0a:ad:8d:b4:5a:54:b6:ce:01:55:33:bd:60:6d:1c:e5:
a2:84:ba:36:fc:91:e4:9b:6e:09:cd:f7:d8:e3:be:93:f1:41:
78:4a:50:10:b6:5d:f7:c1:6f:29:7f:ef:bc:a7:2e:ca:ad:fb:
f9:64:54:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:19:12 2025 by rpki-client