Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: IlYzWriaACaTNDio+a94PyrcJjb0LTbIV3PQf8/VNDg=
Subject key identifier: 72:79:38:73:5E:0A:FC:23:4A:06:06:71:11:58:FB:98:58:A1:38:0B
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 01977A5473E959828BF9AF17CAA0099512B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 20:00:44 +0000
Manifest this update: Mon 16 Jun 2025 20:00:44 +0000
Manifest next update: Tue 17 Jun 2025 20:00:44 +0000
Files and hashes: 1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: JBZpfK2My1p5uynqbb3qKCKexvKHSNSc6O8oekhByHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:54:73:e9:59:82:8b:f9:af:17:ca:a0:09:95:12:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Jun 16 20:00:44 2025 GMT
Not After : Jun 17 20:00:44 2025 GMT
Subject: CN=727938735e0afc234a0606711158fb9858a1380b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:80:8d:08:3d:b8:9c:67:18:e3:71:49:36:
19:fb:94:65:d0:43:f6:3e:65:6c:d0:f3:ab:17:e8:
88:8c:c7:37:09:88:e4:b2:d2:68:e2:20:42:c9:e1:
80:90:a5:7a:24:d0:9e:71:db:48:f0:4f:1e:b8:e0:
74:c3:b4:bc:dd:29:23:90:f3:82:cf:2a:1b:47:02:
c5:32:c2:b5:56:47:ce:83:a0:37:86:b4:15:05:9c:
f9:c4:08:cb:8e:2d:f9:6a:12:f6:b6:23:70:3b:3d:
ea:12:ff:d0:60:34:95:1a:f5:41:04:30:89:0e:b8:
69:3f:1e:06:79:68:50:d2:1e:77:fc:5c:53:34:7e:
9b:22:d9:4f:cf:09:fd:5f:1d:56:04:df:47:53:a5:
9e:b9:46:55:cc:94:8d:3d:14:a8:e8:01:da:5a:9d:
a4:dc:77:22:0f:c9:ed:19:b8:28:81:e3:de:8a:19:
e6:1b:5e:80:2f:ac:c9:45:85:22:8c:03:60:c0:1e:
1b:b5:ad:8f:fa:c2:11:00:f2:67:2b:9a:4c:bc:c7:
b1:59:8b:89:69:1f:32:5c:3b:79:e7:a1:05:e3:8d:
8a:0c:a8:d2:ca:68:1d:13:75:26:7d:a2:ee:7b:ae:
5b:0f:7c:42:27:c2:1a:55:89:10:b1:d2:a7:da:36:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:79:38:73:5E:0A:FC:23:4A:06:06:71:11:58:FB:98:58:A1:38:0B
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f8:10:ca:a2:da:38:fa:83:b1:4f:e1:e6:fb:67:99:e4:3a:
c4:68:f7:99:b7:73:45:ea:e7:b2:79:e8:ec:89:34:21:8e:c9:
62:c6:5b:7e:b5:a6:2b:98:9f:c4:5b:24:2f:49:7e:35:49:e4:
6f:66:73:9c:7e:46:6f:ad:12:e0:69:c1:a2:ef:96:92:3f:ba:
cf:8c:70:66:59:8e:c3:8e:d9:c3:2a:f4:1e:65:40:d9:26:0e:
e9:4c:3c:33:5b:7c:9e:87:d9:a7:f6:70:7f:0f:1f:86:de:a1:
dc:0c:0e:eb:18:1d:16:c8:0f:35:80:0c:be:62:7e:1e:37:ca:
a8:0b:12:d3:f0:5d:10:50:e8:03:4d:95:81:f3:99:48:68:2c:
80:3c:e5:ee:c3:b0:f7:e2:00:be:cc:98:53:39:55:2b:74:8d:
23:c4:b9:22:d8:bd:88:18:02:34:34:2f:f4:0d:c7:40:90:ff:
af:da:e6:37:fc:bd:5b:38:45:58:96:4a:73:e3:2b:77:0d:b1:
34:05:0c:e8:86:e3:6c:da:24:36:24:aa:63:ed:e1:16:47:37:
4a:51:29:83:7b:0c:07:76:09:1a:4f:4e:14:55:ab:7a:5a:2a:
23:42:00:5d:a3:52:e3:f9:29:50:21:cf:ae:a2:f7:c8:5d:65:
b1:e6:55:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:20:11 2025 by rpki-client