Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: Ag24kXSm/3fAGkbVtXo1F6mQH/QLdpZnt8rq/yzY23c=
Subject key identifier: 15:BD:B9:26:D5:A7:FC:C5:06:CB:17:0A:AD:CB:8A:F1:42:A4:87:A7
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 01987298B3D91C4B73C3C0F3AC5F8B10C258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 04EB
Signing time: Mon 04 Aug 2025 01:01:06 +0000
Manifest this update: Mon 04 Aug 2025 01:01:06 +0000
Manifest next update: Tue 05 Aug 2025 01:01:06 +0000
Files and hashes: 1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=)
2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: 4pz6q/SXedmV9FhoID3G1V+3EsZ1ciKuNKoL2IpQ1yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:b3:d9:1c:4b:73:c3:c0:f3:ac:5f:8b:10:c2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Aug 4 01:01:06 2025 GMT
Not After : Aug 5 01:01:06 2025 GMT
Subject: CN=15bdb926d5a7fcc506cb170aadcb8af142a487a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:32:71:08:ed:d4:29:5a:49:d0:40:11:6b:
f8:cb:89:c6:f6:95:dd:66:18:60:82:cd:de:bb:00:
13:0c:4f:a2:2c:b8:56:8a:d3:c2:0e:90:84:de:8f:
51:a0:40:a9:b4:17:4e:28:64:19:14:5b:a1:6b:bc:
99:84:72:44:e7:b6:60:2b:5e:a5:a3:2d:f1:24:e8:
11:41:bb:02:6f:ed:2d:1b:f8:95:a6:e9:e2:8e:38:
06:16:d2:b1:42:32:71:e4:6c:0d:09:4e:cc:44:b5:
e0:11:92:3a:70:f0:f7:f0:ac:8c:e6:85:74:42:83:
28:19:26:5f:a9:84:7e:eb:42:5b:90:75:d5:8b:00:
0c:68:64:46:56:29:6b:55:57:5d:31:02:e4:d2:3d:
91:b4:84:ec:11:8d:a9:4a:f2:52:df:32:3b:f8:86:
55:71:83:93:b4:70:63:e0:2a:83:42:14:0b:6a:94:
c5:0a:bd:ec:81:62:a3:86:27:61:bc:64:12:ea:6b:
d1:7e:35:26:f7:f1:6c:a6:6a:fd:1b:45:bb:38:4e:
ba:7b:04:6e:6d:1f:4b:3e:80:48:97:52:bc:8e:8c:
59:5f:53:c0:e4:ec:d8:1b:4d:cb:47:5f:82:b9:93:
0e:0d:1d:8e:80:93:39:c5:3d:1a:08:40:7a:55:09:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BD:B9:26:D5:A7:FC:C5:06:CB:17:0A:AD:CB:8A:F1:42:A4:87:A7
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b3:ce:b6:45:4d:7c:8a:9f:f7:35:52:95:d1:fc:6e:35:d6:
d8:29:ae:31:af:98:a4:31:a2:a2:d5:49:20:c6:a6:8c:45:4c:
d7:3b:dd:68:3e:bd:24:2e:57:15:e9:ef:d8:e5:c6:97:76:ff:
c2:57:29:9f:5f:7c:29:ab:f6:2b:15:dd:dc:d3:4e:59:15:88:
b6:20:ef:f5:c9:ab:9b:1c:92:9d:9d:b1:37:ef:15:3d:b9:57:
d1:6f:76:65:e7:fe:f9:25:9d:f7:83:e6:2d:8e:1d:0a:f2:e5:
41:12:59:d4:4a:d5:53:6c:22:27:56:00:ac:93:1b:aa:c5:63:
13:6f:63:3b:f7:29:e2:6a:fe:0f:ee:ad:00:0f:70:72:87:2e:
ba:7e:b5:3b:76:c5:bd:fe:00:6e:d5:8b:7c:20:b5:95:7d:34:
34:51:18:90:72:71:7f:0a:f6:6a:b3:4a:e2:8c:03:a5:8e:83:
54:25:d3:97:f3:af:84:0a:e9:fd:32:3b:a6:8d:e3:46:09:60:
9c:74:35:b0:05:34:35:09:6d:da:9e:31:ab:24:8f:a3:a4:bf:
33:61:bc:54:4b:d8:11:f0:9a:6a:13:17:85:b2:83:0e:02:92:
25:bc:55:76:4a:96:ab:21:16:ef:95:e4:f1:e2:b8:fc:32:c2:
cc:d6:a4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:38 2025 by rpki-client