Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: kuf/lIM63dEZVrzfhm+4gtfDV34fFJ8Rwt9YG3Ox+Ps=
Subject key identifier: 4A:C5:97:DF:22:53:EC:58:6F:71:1A:3E:B4:DE:77:CD:94:87:6A:ED
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 019774F76573DDC0DD2E2D04122D6939D10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 01F4
Signing time: Sun 15 Jun 2025 19:00:59 +0000
Manifest this update: Sun 15 Jun 2025 19:00:59 +0000
Manifest next update: Mon 16 Jun 2025 19:00:59 +0000
Files and hashes: 1: KWPAsF0vFOD6kPsFU3LMV-L0lSI.roa (hash: VQvFUbsDDfVrBdoP9kicGC0pG5uJaNDDod3tQ4qnm70=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: Bmw53WUDOT6qD5oinvZvW4D7OrpOgGBZEECxW5MLCWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:65:73:dd:c0:dd:2e:2d:04:12:2d:69:39:d1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Jun 15 19:00:59 2025 GMT
Not After : Jun 16 19:00:59 2025 GMT
Subject: CN=4ac597df2253ec586f711a3eb4de77cd94876aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:69:bb:d9:14:60:6a:62:79:a5:98:45:59:
bc:f7:af:ed:99:4b:2f:b7:8f:ae:23:6e:2d:ec:ba:
e6:3b:ca:79:02:ab:0b:f0:08:70:e9:d8:10:ea:b4:
cd:3d:8b:9f:22:33:48:c2:0a:28:a1:fb:a2:40:e0:
80:14:ee:8f:d8:3f:82:57:9b:78:f8:dd:c5:db:97:
3e:f8:ad:68:66:fc:c3:a7:c7:36:60:06:c9:c1:ec:
3d:e0:bc:9c:48:dd:6e:6f:6f:d4:50:70:ce:f6:62:
df:15:eb:64:2c:9b:45:79:46:2e:8b:a6:10:0a:5a:
62:22:7a:bf:44:77:a6:2f:92:ac:03:24:7a:49:18:
98:ae:1a:7c:d7:56:62:fc:65:ab:99:49:ac:9a:f2:
10:04:ab:b0:82:bc:bf:ea:1b:5b:12:49:15:4b:4e:
14:99:39:20:e1:f9:06:e5:eb:c3:9a:01:84:74:dc:
1d:49:43:93:ad:3c:a9:1d:d5:2d:a7:0a:95:ca:58:
62:05:a6:28:74:c5:a1:7b:c5:69:f8:8f:a9:c3:82:
ed:8b:02:41:2e:f0:e8:e2:ca:5a:4e:f1:15:81:3f:
a7:67:c7:e1:76:82:76:6d:f4:2d:43:d5:d8:69:02:
0a:66:07:96:9c:9c:57:2a:87:b2:2f:b6:d3:6c:28:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C5:97:DF:22:53:EC:58:6F:71:1A:3E:B4:DE:77:CD:94:87:6A:ED
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0a:fa:d8:61:b7:6d:24:ea:e6:d1:fe:5e:95:7a:3c:8d:f0:
61:c2:8a:46:9f:76:83:62:16:72:d9:0c:62:2c:3d:14:94:5a:
db:21:30:d5:8c:7a:6f:ad:88:87:2b:3b:e1:77:01:21:f2:42:
48:ff:90:0e:4d:04:c8:74:f0:a8:d2:5d:66:38:bb:37:d1:17:
69:c1:94:af:31:20:2c:e0:e2:ae:e9:23:94:d9:b8:bc:85:80:
26:e1:69:8c:c1:a3:2e:09:33:5e:d4:81:81:3d:16:61:74:10:
3f:bd:30:41:cc:d9:fe:9d:76:3d:ef:17:65:8c:82:c0:b5:9f:
8a:b3:48:a1:8c:be:11:dc:8a:43:9c:a2:9a:71:96:79:81:31:
f8:f7:c8:d0:6f:29:2c:52:c8:8c:29:c5:61:ae:26:25:34:e3:
d1:95:c4:8d:7e:d1:91:63:bd:e4:7d:7e:54:ac:2a:f0:0c:72:
38:2e:2a:52:a3:8d:b9:50:f3:98:3f:c0:87:5d:7f:9d:a0:e9:
31:97:48:01:11:bc:e6:93:5e:0e:84:24:08:4c:2e:5c:50:e9:
d4:bd:cf:aa:c3:22:4b:d6:9e:a7:ce:c7:9a:1d:58:18:48:86:
b3:82:93:e3:96:3e:43:9d:33:32:22:39:0d:44:37:9d:43:61:
0e:2a:e7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:04:54 2025 by rpki-client