Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: 8PsQuo7LE7X+23s6G6kW83IXD5Un8Ad8eAr+m5C5zLs=
Subject key identifier: 49:89:DC:06:9F:96:F7:5F:6D:C1:FA:5D:18:3F:16:01:9A:22:6A:84
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 019849652DD6E6D0B891DFB5E1BEBAC543D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0C8C
Signing time: Sun 27 Jul 2025 01:00:24 +0000
Manifest this update: Sun 27 Jul 2025 01:00:24 +0000
Manifest next update: Mon 28 Jul 2025 01:00:24 +0000
Files and hashes: 1: RuFROxCqzeIbzpx-h2zhu4XG73k.roa (hash: mYt7O5vyisef0XC7lwr4ZHkct165sZT5ZjyUS4XqL/8=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: 5SDQlEnLq8CgjxUkFPtjr1fqi6d3S2sRhnBHMt/pums=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:2d:d6:e6:d0:b8:91:df:b5:e1:be:ba:c5:43:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Jul 27 01:00:24 2025 GMT
Not After : Jul 28 01:00:24 2025 GMT
Subject: CN=4989dc069f96f75f6dc1fa5d183f16019a226a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:ed:6b:3a:48:60:ba:07:01:2d:f1:0d:ac:
cd:b0:fd:fc:84:13:d3:7e:20:fb:04:ff:75:92:de:
ff:99:c2:b0:e5:e7:f0:8d:81:c2:0d:60:62:48:6f:
92:d2:a1:58:ed:4c:d9:88:42:5f:81:41:44:6f:90:
fe:61:ab:b3:43:08:94:38:19:f1:bb:87:d3:9d:aa:
95:ef:ea:85:9d:63:df:05:2e:c2:cd:09:fc:47:22:
76:72:3a:19:15:60:c5:be:5a:d5:78:3b:13:0a:e4:
0f:3f:19:47:59:99:ec:70:59:79:5e:3d:d3:2a:e8:
61:42:a2:6d:87:2d:54:cf:6e:7a:ea:ec:7f:fb:f7:
b2:d2:40:6a:b4:d7:e2:56:59:ca:4e:a7:f4:2a:73:
5a:e8:70:d9:2a:33:76:da:06:35:be:a2:41:7b:38:
cc:0e:40:a8:1c:ab:91:34:37:e2:08:fa:34:fc:54:
b9:01:a3:c5:e8:4a:aa:bc:0d:20:81:e5:25:af:ff:
5f:c7:76:21:88:dc:8f:af:99:b0:7a:f2:86:8f:ca:
87:aa:74:6c:5b:5a:ea:1b:da:df:93:85:79:da:2a:
03:20:0d:36:c0:49:0e:0b:30:59:87:09:dc:b2:e9:
6f:59:f6:42:5d:da:e2:52:90:1e:1c:b7:89:3a:99:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:89:DC:06:9F:96:F7:5F:6D:C1:FA:5D:18:3F:16:01:9A:22:6A:84
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ec:47:b1:be:84:87:15:64:cd:57:8f:5d:5e:c8:f1:11:e3:
43:5a:ed:a9:32:35:65:8e:9b:27:56:01:6e:c9:47:36:54:7f:
4a:04:3b:cd:a9:77:97:e0:83:7c:18:83:a5:16:fb:e3:b6:67:
37:8e:85:a1:f3:30:26:2d:ef:89:80:49:23:8e:91:28:1d:de:
d6:62:88:c0:29:b3:cc:26:2f:09:07:b9:ff:93:0b:69:d8:d7:
78:b7:cb:0d:cb:30:11:ea:90:6c:07:f9:b0:dd:69:4f:d4:89:
2e:7c:51:9f:f6:fb:9e:f5:60:74:22:9a:b3:ed:37:89:78:67:
3b:3b:a7:a0:f4:9e:4a:52:50:27:b9:a8:af:99:46:c2:0e:58:
be:78:22:db:57:23:1c:aa:80:78:93:43:c7:00:4a:69:75:d0:
06:d5:ad:15:5c:71:34:49:62:ba:bc:9c:09:e4:3b:63:e7:6a:
24:dd:4b:2b:2d:57:0b:b9:e8:42:0e:15:0d:0c:41:a4:58:0e:
05:52:e5:bf:e9:e4:bf:59:e7:b9:18:b5:2e:80:9b:26:b5:56:
8c:e8:60:b6:d7:39:28:0d:72:5f:cc:5b:d8:03:f8:40:52:c6:
07:9a:45:b5:98:e1:98:81:7d:d1:4f:16:75:3c:62:5c:25:2c:
31:33:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:11 2025 by rpki-client