Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: eV2YvT5S6XQujvVWeWUhmjI2RXKYwvT6+wZChSj7gE8=
Subject key identifier: 28:F6:2C:41:71:9B:13:21:3A:8F:51:21:87:D6:E0:44:C2:E8:6D:B2
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 01982891E4E92E00C1C4B4609C3874FA74C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 13
Signing time: Sun 20 Jul 2025 16:01:46 +0000
Manifest this update: Sun 20 Jul 2025 16:01:46 +0000
Manifest next update: Mon 21 Jul 2025 16:01:46 +0000
Files and hashes: 1: nzgTTwbAHjDz2-zsShiAXUCqJOU.roa (hash: GBnP7tc+zXd9JtLmcvpJOSz2ArIIJJ/9cimz8hGmRDA=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: rLExjPe7Lha/Pv08QJw3ebKIkrb0Zn9WBazmNRr0DH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:91:e4:e9:2e:00:c1:c4:b4:60:9c:38:74:fa:74:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Jul 20 16:01:46 2025 GMT
Not After : Jul 21 16:01:46 2025 GMT
Subject: CN=28f62c41719b13213a8f512187d6e044c2e86db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:3f:e2:f7:ba:7f:4e:f6:ca:1e:ab:40:db:
03:36:3c:94:b5:5e:2e:da:92:c3:41:81:1b:4f:b1:
3a:68:33:17:21:3f:7a:cc:1a:a5:41:ee:f5:83:83:
99:1e:af:44:98:aa:d0:11:76:ef:b4:c9:48:a3:7c:
c5:37:87:5a:ad:31:8b:58:73:d4:91:68:c4:76:ec:
c5:c8:4a:30:04:3e:b5:98:76:bd:ae:4e:d0:18:a0:
1e:0f:47:f6:2f:d3:79:7f:98:7d:fa:54:d2:e0:53:
b8:cd:11:e8:33:9f:e6:1a:f2:9a:dc:e9:01:3d:e7:
f4:e1:26:3e:0e:01:7d:a7:83:12:4e:d5:56:8c:da:
a8:26:10:29:e9:2d:72:c6:ee:78:25:c8:a1:ce:72:
fd:2b:07:d6:aa:06:8b:06:fd:c0:ca:e1:05:14:5d:
be:83:b4:19:5e:7d:fa:65:da:04:ac:e8:c3:00:f8:
eb:8f:95:dd:fb:d7:6e:c0:bc:8a:51:75:78:12:e6:
36:7e:0b:8d:0c:7d:63:2b:b7:b2:18:7a:b7:fd:9f:
16:44:30:dd:2b:d9:81:06:46:fd:72:85:1a:b2:5c:
7a:20:fd:d6:54:25:b7:24:83:4b:23:f5:6a:e1:05:
86:97:66:2b:db:7f:4c:94:ad:4a:3d:c2:aa:b2:d7:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F6:2C:41:71:9B:13:21:3A:8F:51:21:87:D6:E0:44:C2:E8:6D:B2
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3d:3e:e2:fa:c8:b1:98:f8:57:33:e1:f3:16:78:2b:db:01:
3d:bb:ed:d5:c5:5b:a6:33:75:da:43:c3:07:43:9f:82:b6:9b:
4b:0b:13:06:95:15:43:ae:b3:f5:36:42:9e:f6:ec:d9:ef:3f:
19:10:e0:56:97:6e:9c:06:52:4d:7b:b3:c8:6c:58:28:a9:9f:
5f:7f:0a:27:73:e6:be:9d:66:14:12:57:e5:fd:c7:35:44:4f:
ef:9d:a3:b6:7d:37:3c:95:6f:90:89:84:63:0f:a0:f9:34:45:
8b:94:c4:2d:04:db:26:62:57:8c:48:c0:14:f5:70:4c:02:34:
c2:7f:ef:7f:5e:fe:19:6a:7d:73:df:25:f4:81:97:35:1a:42:
01:9e:49:be:37:4e:ad:79:db:68:a5:57:bf:7c:4f:d8:a2:cc:
1e:17:08:40:68:8d:a0:ef:4e:43:8c:66:49:24:9d:ed:cd:a8:
76:92:93:fe:c5:a1:3a:0c:ed:ed:0f:28:7e:26:81:e9:57:98:
3a:70:ad:c3:25:64:c1:c9:03:15:c1:9b:0f:f3:03:b5:6f:d7:
5d:38:4f:d8:ce:11:93:99:58:a7:ca:f7:a2:04:d8:a6:1c:b5:
e2:86:07:31:5b:ba:75:1a:f8:69:23:d9:f4:5c:66:b7:9c:df:
8b:9a:22:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:24:25 2025 by rpki-client