Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json)
Hash identifier: gKllYAt99yGLBph/9Vgf5t3T/hE5yo7rd69AHyz1hy8=
Subject key identifier: 7E:1C:E4:90:32:D8:38:7C:E7:C2:23:8D:A3:2F:22:9D:D2:64:B8:D3
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 01976C2B69594E8DFCCE2A25F294B900E237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
Manifest number: 0C44
Signing time: Sat 14 Jun 2025 02:01:13 +0000
Manifest this update: Sat 14 Jun 2025 02:01:13 +0000
Manifest next update: Sun 15 Jun 2025 02:01:13 +0000
Files and hashes: 1: mjQr1y7CThAMWtspCv07qky-Fa8.roa (hash: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=)
2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: 5TREb+sqaAheYBkAkZ8u5r8QqjJGeAz6amPx4cYOCng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:69:59:4e:8d:fc:ce:2a:25:f2:94:b9:00:e2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: Jun 14 02:01:13 2025 GMT
Not After : Jun 15 02:01:13 2025 GMT
Subject: CN=7e1ce49032d8387ce7c2238da32f229dd264b8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:c1:95:15:f0:41:8a:6d:6e:bb:48:2f:af:
b6:a3:cc:d4:6d:b2:70:64:f6:7d:d6:3f:c7:db:20:
bd:d0:82:f0:e3:07:79:9f:65:e5:76:cb:2b:07:b6:
7b:2b:8a:9e:31:cc:25:fa:9e:0a:0c:cf:fd:aa:f3:
05:76:3b:8d:c4:9a:71:59:14:08:9d:fa:6c:40:92:
15:55:7c:70:70:04:d5:27:7f:68:17:39:83:37:de:
44:62:7e:86:d4:4d:3d:cd:1b:80:9f:42:df:3c:86:
5a:cb:80:79:a7:66:2e:de:b3:2d:7f:0f:45:7d:9c:
46:4d:bb:86:df:7a:58:06:4e:22:c8:3d:27:2c:2f:
3d:da:17:15:eb:14:e4:8d:21:7c:17:8b:bc:1d:05:
65:ca:f3:bb:31:a4:98:61:0c:d8:2c:2d:26:88:91:
11:12:bd:16:f4:36:89:dd:73:e3:07:bb:8d:00:b7:
69:2c:d2:e9:5c:54:64:ea:93:00:a9:ab:8b:1d:30:
7c:7b:ca:f6:84:da:db:39:82:fa:59:9e:cf:16:6e:
81:e2:d0:4f:18:1c:17:53:52:c4:42:aa:55:62:4a:
be:dc:b9:6c:5e:6e:f5:f0:69:cb:bf:92:ff:93:96:
23:ef:94:89:3a:fb:b1:0a:b1:4c:89:a6:d2:c7:c2:
5a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1C:E4:90:32:D8:38:7C:E7:C2:23:8D:A3:2F:22:9D:D2:64:B8:D3
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:03:1c:1c:0a:57:01:15:f3:b7:d7:f9:27:72:e0:86:3a:d4:
8a:43:b8:ce:7d:3b:ec:cb:dd:85:43:35:71:13:25:d0:81:9e:
c5:09:e2:96:1f:64:cc:dd:67:0d:3c:76:67:8e:af:0d:fa:d1:
29:0c:61:f8:2a:7d:47:92:c8:82:3f:e0:db:f4:7b:ab:fa:53:
64:c8:7a:d2:d4:37:8a:22:2d:6f:cc:e8:61:fb:d5:82:91:e1:
a5:14:5d:e0:7f:07:9b:57:06:c6:76:bb:05:91:c5:dd:4e:62:
5f:70:39:ec:ff:59:31:a9:d7:00:f5:89:3f:ef:11:3c:a4:d1:
da:cc:0a:47:bc:9e:52:a9:3e:66:ec:d8:14:89:06:40:11:92:
c9:b6:85:79:37:3d:40:9b:8d:d5:e4:68:ae:06:98:9a:a1:fd:
87:fd:2e:d4:42:be:70:07:43:1b:07:f9:c6:94:1c:86:ac:47:
7c:42:02:8b:d2:01:9f:ba:94:11:c1:be:e9:d5:e7:cd:04:1a:
7d:d6:06:6a:69:15:12:b3:ab:d2:6e:46:26:ea:be:49:de:54:
2b:49:5b:59:56:d0:1d:b1:63:52:31:df:f8:aa:ab:64:9f:c6:
43:e9:dd:4f:22:12:e2:62:aa:01:a5:67:d0:76:2c:be:ba:92:
6c:5b:12:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:23:39 2025 by rpki-client