Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: AXefU3Sj9pYzcVIiuoQQUCflQruUp5AfYogtkgpHNs8=
Subject key identifier: 5C:09:95:ED:D6:93:9C:00:06:1A:E9:AB:94:CA:D1:A6:69:96:AA:41
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 01976DE262EDB328CA495326D35EDCBAB97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 0455
Signing time: Sat 14 Jun 2025 10:00:42 +0000
Manifest this update: Sat 14 Jun 2025 10:00:42 +0000
Manifest next update: Sun 15 Jun 2025 10:00:42 +0000
Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: dj1jJsBDxJfO6AlHdOxZW50oAMuK2CxpudDIFIA0HyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:62:ed:b3:28:ca:49:53:26:d3:5e:dc:ba:b9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Jun 14 10:00:42 2025 GMT
Not After : Jun 15 10:00:42 2025 GMT
Subject: CN=5c0995edd6939c00061ae9ab94cad1a66996aa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:23:d9:8a:f8:19:8c:7a:e0:20:09:42:c8:
2c:51:03:81:63:08:a6:02:33:14:1d:f8:97:2d:6d:
ac:33:aa:d5:98:45:88:96:c9:ff:7d:c8:5a:39:a1:
bd:89:e5:16:6c:47:3c:80:e0:40:25:75:33:3d:f5:
77:d9:1f:65:b3:9f:6e:6f:85:4a:a2:32:b4:2c:4c:
89:26:91:80:78:d8:e2:6b:0f:8c:cc:7c:35:2e:20:
d7:72:6b:37:a0:91:e6:6f:e6:aa:2c:8b:1e:ed:97:
89:5d:a7:91:47:44:0c:02:18:09:40:bf:ec:b8:6b:
0e:72:ef:7f:15:e0:a5:4b:a7:8c:4e:99:49:e3:1b:
1e:20:a7:8a:5f:8e:22:28:e7:01:df:89:b5:42:68:
24:1d:00:6f:1b:d1:e2:0b:2d:40:23:76:9c:a5:5e:
29:86:1b:55:52:db:25:c1:d8:00:58:ef:bf:3d:14:
10:1b:0b:15:ee:00:e5:f6:bd:b9:29:87:90:1a:18:
b1:5a:c5:30:1d:52:c8:06:70:c8:f2:b7:3b:f4:05:
c5:0b:7d:f1:bb:80:6d:db:19:cf:63:9e:7d:a4:89:
1b:37:b4:1a:d1:af:36:11:12:73:3a:41:e4:55:7e:
48:a0:a8:5e:9c:f3:9e:af:28:83:7c:03:57:52:88:
eb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:09:95:ED:D6:93:9C:00:06:1A:E9:AB:94:CA:D1:A6:69:96:AA:41
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:99:69:74:75:85:87:ed:dd:7c:44:e7:37:54:a2:1d:ec:05:
37:34:0d:9f:ed:b7:70:ef:19:f1:3f:c4:4e:ab:8e:ff:e6:d5:
46:5a:fa:d2:25:68:8a:f7:40:aa:9c:9b:50:fe:f7:99:c1:4b:
01:dc:d2:2c:0e:74:02:76:31:d3:e5:db:0f:f8:55:ae:ca:21:
33:36:b3:94:7e:cb:37:bd:b7:ac:42:06:37:77:31:38:2c:5e:
50:0b:1a:d8:c9:fd:75:2d:c3:bc:17:ed:c9:d4:d8:18:74:4e:
be:15:08:91:d0:88:74:1b:68:70:9f:8b:6f:cd:e3:f1:a1:31:
a8:52:be:0a:48:63:ac:a3:4e:d0:14:43:7c:ee:61:43:db:2a:
29:ca:81:96:d7:5f:01:f8:e2:93:0a:c7:e7:78:32:5b:06:6d:
f4:2e:58:c4:ca:db:7e:3f:9c:79:93:3e:c9:ac:ed:0b:2a:90:
c9:0f:1a:b9:fc:f0:3c:8f:02:44:e8:6a:ac:cd:63:03:90:6e:
1e:fd:2a:ba:cb:5d:00:5e:9a:ba:72:f1:19:bc:ea:48:10:4b:
2e:ee:78:c4:c2:49:c6:60:8f:96:14:48:bf:7a:f6:d7:59:cb:
98:90:49:63:f5:67:ea:78:cf:65:b4:89:ca:4c:dc:7b:6b:3d:
94:02:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:31:06 2025 by rpki-client