Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
File: pSNBhTlzXL2bC6PCeew1V9cmJlo.mft (raw, json)
Hash identifier: kokWwuZ3ahremxGQpKIZ2eau0N2AZf64uRdDu3xPL+U=
Subject key identifier: D9:3E:8E:AC:47:B0:FA:38:5C:77:40:68:47:49:0D:CD:42:C4:DE:74
Authority key identifier: A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Certificate issuer: /CN=a523418539735cbd9b0ba3c279ec3557d726265a
Certificate serial: 01976EBDE2D7846152192B7B4C3DB00DA5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
Manifest number: 1346
Signing time: Sat 14 Jun 2025 14:00:27 +0000
Manifest this update: Sat 14 Jun 2025 14:00:27 +0000
Manifest next update: Sun 15 Jun 2025 14:00:27 +0000
Files and hashes: 1: 8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa (hash: Ub5Ka+iibeNMtT5d651FP9y1wedTUH3xQXSWP3OHFL0=)
2: pSNBhTlzXL2bC6PCeew1V9cmJlo.crl (hash: NTothTwgI0Exm5eVABOXxH5fhiRqpA/Gw/KTMeaAdfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:e2:d7:84:61:52:19:2b:7b:4c:3d:b0:0d:a5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a523418539735cbd9b0ba3c279ec3557d726265a
Validity
Not Before: Jun 14 14:00:27 2025 GMT
Not After : Jun 15 14:00:27 2025 GMT
Subject: CN=d93e8eac47b0fa385c77406847490dcd42c4de74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8d:8d:dd:b2:b1:9e:c3:ed:6d:ab:de:08:d4:
49:86:78:0f:fc:1b:ee:2c:9a:f2:90:92:22:fd:f5:
e7:63:39:20:c5:3c:c1:02:17:d1:ff:20:0d:3b:20:
c6:31:98:a7:84:43:16:76:45:a4:47:6c:94:e7:96:
c6:43:16:d2:1c:d3:69:69:d1:ba:4a:60:72:38:8d:
df:1e:12:a6:8a:84:20:c0:ee:39:b8:a4:bd:04:aa:
3f:da:fc:b7:2b:51:ab:1e:a0:cf:67:a7:e4:16:d2:
f3:0e:ba:4e:59:e9:67:7b:37:d1:7a:b8:34:7e:50:
d4:de:7d:93:be:7f:d1:61:66:c9:f0:b3:d5:0b:79:
02:de:20:40:7c:82:ee:f2:8b:73:3c:3f:88:6b:8b:
6f:34:a9:ad:1e:6e:3c:2b:85:70:30:2e:ec:d4:23:
a9:87:53:4f:30:b7:6e:60:4a:6d:4b:ca:4e:a0:7c:
67:b4:45:b4:25:1a:97:1b:fc:a0:5b:dc:8e:ec:a3:
31:7a:68:50:90:2f:b5:4e:b0:f1:f2:25:2b:16:34:
57:7e:b1:1f:46:2d:da:3b:d8:99:89:3b:e4:eb:54:
e0:cb:fb:de:f6:fc:b3:ad:04:9f:38:a3:84:09:97:
2a:1d:28:22:ef:ab:03:2d:ee:af:59:43:89:55:73:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:8E:AC:47:B0:FA:38:5C:77:40:68:47:49:0D:CD:42:C4:DE:74
X509v3 Authority Key Identifier:
keyid:A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e5:00:f0:bc:74:1f:43:bd:6c:be:df:6c:b8:04:1c:a8:db:
0e:83:82:e5:69:de:c0:c3:87:73:0d:86:3e:60:ad:16:c8:05:
1d:98:53:f7:ba:86:89:fa:5b:54:14:c2:48:09:87:7b:be:fb:
b5:70:f9:b3:2c:a5:8a:c2:b5:d6:60:dd:d4:35:18:aa:3f:3e:
23:07:f9:79:18:89:90:62:dc:fa:aa:3c:23:df:d5:75:25:42:
07:76:32:d0:af:7f:15:7e:32:4d:5b:26:7e:9c:4f:5f:85:12:
a8:96:c8:8f:12:ee:fe:86:34:16:b1:29:ae:19:d8:6c:ca:9a:
27:96:5c:d1:5e:10:8f:64:dd:e0:52:bb:9e:ed:ae:9a:ff:fc:
24:8d:c6:24:dc:45:62:5f:89:85:25:99:71:63:5e:33:f7:38:
7e:1f:10:eb:6d:39:a6:9e:40:cb:78:9d:ca:33:fd:72:3e:52:
1e:d7:81:ee:2f:05:26:fb:37:3a:3a:15:89:bf:c3:25:9b:6f:
da:49:e7:84:b5:35:b7:56:92:0f:b7:cb:da:76:b0:f2:90:6f:
ec:83:e1:45:8b:b2:d6:a7:fe:f8:53:d4:9c:3d:cd:eb:4d:d4:
a7:97:1a:0d:ee:43:88:42:26:ae:c6:26:65:1b:ef:47:88:c2:
26:ac:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:21:12 2025 by rpki-client