Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
File: pcJJ62-mtduvarnes6d3juDrNIc.mft (raw, json)
Hash identifier: WAOc2x13e1kthy3x6vy+0iJccSv9h2/eKX0+LaA1ETc=
Subject key identifier: 2B:B9:15:9A:28:B1:15:D6:AB:6D:E4:3A:B4:26:AA:17:2E:24:CF:A4
Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
Certificate issuer: /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Certificate serial: 019772D1D44DFCFA7053D1CE69E58659B061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
Manifest number: 0529
Signing time: Sun 15 Jun 2025 09:00:43 +0000
Manifest this update: Sun 15 Jun 2025 09:00:43 +0000
Manifest next update: Mon 16 Jun 2025 09:00:43 +0000
Files and hashes: 1: iI8Orlzgb6VVuw4zGceAk4Y_gdo.roa (hash: xavQWQ+h3Wh68WfrJKGu7Ge405dFSg9FX+cO3lDgnEY=)
2: pcJJ62-mtduvarnes6d3juDrNIc.crl (hash: zfqGtuCsWWBck9Cqm6QZBz1MzS7OtpAjEynbsvYKMjE=)
3: u9Sx8vquonuxfGSR4H7LLp3rbKI.roa (hash: 2NhtYGZCkznHHTIw/AAV97Orzomj5GZcOrYU4RhtX1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:d4:4d:fc:fa:70:53:d1:ce:69:e5:86:59:b0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Validity
Not Before: Jun 15 09:00:43 2025 GMT
Not After : Jun 16 09:00:43 2025 GMT
Subject: CN=2bb9159a28b115d6ab6de43ab426aa172e24cfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:b1:cc:61:5c:96:f4:f9:62:f1:c5:71:e9:
b5:cc:76:dd:ea:13:25:0c:fb:90:fe:02:68:ab:37:
95:79:65:1a:63:0c:41:27:fd:70:b0:21:82:ee:ec:
b8:01:9b:d9:74:be:95:da:95:76:33:c4:13:79:2d:
2c:4a:4a:3f:d6:e1:7f:89:57:57:9a:a0:f8:3c:ea:
1f:72:9c:48:fc:d4:7f:f9:36:d5:54:16:5c:44:bd:
58:4d:a3:bd:b9:2c:e0:c2:12:27:c3:f5:ff:4a:5d:
bd:2f:69:ee:c2:76:9d:cd:65:25:01:ef:79:c0:0d:
62:93:53:b0:47:11:56:be:05:ba:25:32:cd:3d:eb:
5a:b1:94:a1:73:d8:8c:f9:4f:b1:22:38:39:c8:54:
97:e6:82:57:46:e4:68:35:da:ad:c0:7b:cf:01:50:
18:99:9d:23:dc:e8:40:f6:c8:5a:8f:04:b3:e3:20:
8b:82:bc:f0:fc:61:d9:a1:3b:6c:e1:c7:ba:a4:73:
9b:a7:68:1b:49:9d:29:f5:7b:a3:7c:72:e7:e1:86:
a2:59:ee:67:56:5c:fb:44:13:cb:32:c0:1b:6f:b7:
d5:b4:3c:cd:a6:47:67:53:00:3e:53:d2:11:82:13:
4e:37:0e:a8:24:f5:fc:87:de:15:87:e3:60:fb:9c:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:15:9A:28:B1:15:D6:AB:6D:E4:3A:B4:26:AA:17:2E:24:CF:A4
X509v3 Authority Key Identifier:
keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4a:7d:76:bc:98:48:42:c2:6e:d7:42:b9:31:13:d8:8d:de:
c9:d6:0c:43:98:14:a7:b2:50:b3:7d:62:51:5d:83:bc:64:ba:
a4:8e:89:de:40:aa:77:5e:e2:89:2b:e9:9b:20:74:10:2a:18:
ae:a5:5b:f8:47:90:a3:e1:cf:8a:c0:b0:53:fd:e2:74:a9:e8:
bc:aa:79:1e:67:23:74:c4:80:e5:fd:65:5a:cc:5f:f1:c1:6e:
bd:eb:24:b4:9a:59:6d:46:7d:de:df:f6:c4:92:46:9d:6d:fc:
39:09:dd:e2:fc:9a:11:61:ee:58:8c:46:a1:49:38:8b:0f:d0:
0f:d3:ed:83:e8:69:b0:07:c2:0c:2d:c0:b6:9f:4f:e5:08:58:
4e:99:f9:48:48:59:6f:a4:44:ec:85:47:d1:01:1d:20:8e:42:
c1:34:85:b6:6a:8e:ff:5e:c4:3b:c1:df:2e:e4:1b:41:07:51:
ca:f0:57:6b:55:d7:34:39:ac:ac:99:5c:b8:74:72:61:4d:20:
6e:af:30:f2:e9:3e:24:0c:5f:a3:68:23:a8:f1:c3:a3:0d:26:
77:9b:fd:32:8a:93:5b:bf:e1:fa:b8:8b:58:b3:4d:69:1f:c7:
8c:b1:56:66:fe:74:8e:b5:2b:97:69:18:db:ec:18:de:c6:24:
39:dd:21:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:12 2025 by rpki-client