Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: 3j7O9Q1bwqZkv2jzO/jXxbFpCZgXFas3LxfxsE2u5iM=
Subject key identifier: 77:31:14:DC:0B:80:BC:DF:F9:03:BF:47:0C:BA:5E:47:12:E5:F1:F3
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 01976A058A6F1333334B49A9DA488F91EF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 0462
Signing time: Fri 13 Jun 2025 16:00:37 +0000
Manifest this update: Fri 13 Jun 2025 16:00:37 +0000
Manifest next update: Sat 14 Jun 2025 16:00:37 +0000
Files and hashes: 1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=)
2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: oNGEWC6IOP+dPlc7OcT9i+k9YqiRio+rKx4/9iGRX84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:8a:6f:13:33:33:4b:49:a9:da:48:8f:91:ef:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Jun 13 16:00:37 2025 GMT
Not After : Jun 14 16:00:37 2025 GMT
Subject: CN=773114dc0b80bcdff903bf470cba5e4712e5f1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1e:0e:bd:e1:7f:51:d2:64:c6:52:32:3b:4d:
70:cb:97:af:a8:c9:bc:d2:55:a8:27:66:57:75:5e:
9d:9e:0d:ae:e7:a8:6d:7a:15:0a:c0:cb:c4:e1:e3:
cc:4a:93:8c:6c:5b:ef:1b:fb:b0:5f:53:05:c1:4d:
4f:66:32:b9:ee:53:2e:8c:dd:a7:ae:e1:34:16:5f:
c5:f5:22:d5:bc:cb:41:7d:e7:0d:ed:c9:9a:26:2d:
ce:38:61:25:9f:2c:66:00:5a:8d:35:87:4e:e4:d2:
14:d6:7a:40:7f:00:29:2d:fc:e1:e7:cd:7e:da:ed:
1a:dd:dc:99:f7:0f:85:34:3a:73:6e:5d:ea:8a:6d:
a3:45:54:f8:c4:2b:b3:0b:0c:e2:5b:8d:e3:1a:eb:
be:52:c1:98:09:56:e4:05:2c:f7:53:58:fd:08:f7:
8a:08:df:d1:a4:9c:ac:6f:35:e1:bf:36:c0:33:3e:
b1:4b:b3:9f:9a:b2:17:13:36:df:15:c5:69:dd:24:
18:d4:d1:32:ca:99:7c:b5:f3:c7:29:5a:54:74:2d:
41:40:5d:74:1f:bc:f0:dc:08:07:47:88:98:30:03:
8d:3a:7d:b6:87:9b:36:9e:73:ec:1b:61:27:c0:2e:
bf:56:8b:f1:ea:0a:7a:1f:80:79:61:00:c7:03:13:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:31:14:DC:0B:80:BC:DF:F9:03:BF:47:0C:BA:5E:47:12:E5:F1:F3
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fb:24:55:8c:9c:16:c8:57:85:27:2e:e9:2d:8e:96:5f:52:
ad:81:49:af:d6:49:d6:ec:92:45:45:93:ff:d1:31:26:46:31:
1d:40:09:9e:01:03:1f:03:70:ab:6f:10:23:75:8e:e6:be:bb:
9c:fc:40:51:8e:01:f1:16:34:fa:f1:9d:b0:f1:10:67:f2:a5:
9b:17:99:b3:f5:76:17:b1:53:23:ac:30:1f:9c:18:fc:fb:f9:
df:5e:97:e3:3f:d6:9e:98:9d:d8:cb:32:94:43:03:3a:71:6f:
fe:fe:57:9b:d3:10:9d:87:68:81:ea:f4:af:88:0b:0b:22:da:
4f:f6:1a:b8:57:4b:cd:58:b2:54:1f:52:0f:73:b4:1a:d8:a8:
37:bd:2d:9e:49:80:8b:b3:b6:47:fb:99:51:62:55:66:4e:f4:
f7:db:41:ce:d1:a5:2f:f4:da:f0:ac:65:4b:c7:c9:0b:7e:1e:
7d:5e:68:9e:2d:56:5f:73:74:8a:49:d9:54:6f:5e:5a:c8:f6:
e6:4b:21:99:34:75:a3:06:b9:11:0d:24:95:53:d7:54:e6:f1:
31:f2:ae:56:9b:f6:28:2a:25:e5:9d:53:10:c8:07:1a:e0:6b:
ac:bf:9a:32:b7:85:2f:53:48:70:7b:5e:e0:90:ee:19:22:25:
d4:66:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:14 2025 by rpki-client