Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier: tBFn/XWcdjzLpxHa7ZN+nx33c+LjAQtAp9ChFTZ7zVs=
Subject key identifier: 8E:92:E7:C4:5E:A8:B8:6B:49:72:1C:42:F6:B8:3B:2A:A8:1F:94:06
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial: 01984664833F3DFFDE458CC5BF939E759CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number: 12A1
Signing time: Sat 26 Jul 2025 11:00:48 +0000
Manifest this update: Sat 26 Jul 2025 11:00:48 +0000
Manifest next update: Sun 27 Jul 2025 11:00:48 +0000
Files and hashes: 1: Hp2ljcULzg53pBCXbKt3KAlFkVw.roa (hash: qsDz5TZedLiWJnxlNWk1Ko36qqmg6+ybGLmJSNA11KU=)
2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: xMhygOpSsQB9ow9AY+zPmj+CZtNGSC+8F94Y1twtP/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:83:3f:3d:ff:de:45:8c:c5:bf:93:9e:75:9c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Validity
Not Before: Jul 26 11:00:48 2025 GMT
Not After : Jul 27 11:00:48 2025 GMT
Subject: CN=8e92e7c45ea8b86b49721c42f6b83b2aa81f9406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:84:88:79:54:f6:ef:19:ca:81:cc:e3:0e:
de:f7:a6:7e:34:a6:22:4e:56:ad:90:28:77:98:a6:
cf:6f:f6:d9:fc:0d:25:43:37:e3:ca:a8:44:28:11:
87:98:4b:36:91:be:fc:65:6c:df:16:fe:a8:d6:ce:
aa:b8:32:37:06:b4:31:cf:6a:45:18:7d:ed:0c:57:
6f:b7:e7:5b:aa:eb:83:69:16:cf:60:73:12:64:cc:
c0:99:3a:1d:c3:ef:fa:79:75:58:b7:85:04:3e:f6:
93:0e:0f:f1:b6:74:62:55:1a:a7:d6:52:45:1c:c7:
30:c8:63:26:4e:12:33:10:7c:61:c6:2d:62:16:3e:
78:29:f3:d7:8a:1d:bc:b3:88:d7:5c:33:9a:23:6b:
50:e5:4b:75:bb:b1:ee:eb:e5:33:fb:75:bf:96:1f:
d1:19:79:08:4c:1f:f4:ca:03:56:4b:32:f2:ab:e7:
56:e4:f8:ef:cf:b1:f9:d8:a4:a9:3a:4d:56:72:76:
09:fa:54:0f:b0:f9:57:9a:2e:36:c3:e6:b0:c0:a0:
63:6d:52:34:30:a2:cd:aa:35:11:4b:0a:d6:7c:1c:
3a:09:f9:6c:45:fe:b6:c8:a5:9c:ad:d5:52:45:90:
cb:39:47:90:a2:8b:fa:55:2b:04:50:e9:01:aa:86:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:92:E7:C4:5E:A8:B8:6B:49:72:1C:42:F6:B8:3B:2A:A8:1F:94:06
X509v3 Authority Key Identifier:
keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:53:70:01:3c:0b:cf:55:01:10:2b:1f:d7:a1:be:84:9f:e2:
bc:3c:24:6c:55:aa:86:ee:4f:07:b3:d5:23:73:24:66:84:2d:
74:22:8e:36:f2:e6:e5:82:c0:78:0e:85:8e:33:28:ad:29:f4:
05:1e:34:60:4f:c5:19:fd:84:a3:d4:0e:03:25:b4:4f:83:73:
8b:62:b8:a7:21:7d:d6:eb:33:15:a0:d8:fc:f4:36:3a:55:55:
43:72:68:b7:d8:f3:95:b3:4f:ec:86:49:27:8e:7c:2a:c9:23:
99:fd:21:e0:d8:df:7f:24:0e:87:e7:cd:a7:15:ca:63:92:59:
b3:81:40:57:9d:03:3d:4a:af:b8:22:50:7b:f9:5b:17:60:ea:
ca:c9:b2:0b:d5:08:78:56:82:d2:06:0d:de:fe:a0:b1:d6:97:
3f:49:96:09:96:40:4d:5a:df:7b:f7:c1:56:27:5b:eb:10:43:
05:da:a1:7c:c7:c1:66:98:4b:2a:37:ae:25:78:d9:2f:0b:b3:
5b:28:33:59:71:3e:83:7b:7d:a7:31:39:ec:4b:99:6b:2a:26:
46:a8:fc:6a:25:77:ac:08:d3:ed:d4:99:08:24:c4:d8:e9:dd:
9c:e9:3d:75:56:a5:a5:b9:4f:d9:cf:63:c3:0d:6b:50:9d:30:
06:fe:c5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:47:01 2025 by rpki-client