Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: UeoRg62LLakKCMLIX9+m3WWAcbdkZbc36CfCdgO6WWY=
Subject key identifier: 29:FC:86:77:FA:D5:67:04:D3:72:A9:B0:6B:85:ED:A2:D0:63:A6:DE
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 01984966E888C9B983355A74B141095DA584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 09F4
Signing time: Sun 27 Jul 2025 01:02:17 +0000
Manifest this update: Sun 27 Jul 2025 01:02:17 +0000
Manifest next update: Mon 28 Jul 2025 01:02:17 +0000
Files and hashes: 1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: UGHWbU07gp4FwAuLY90gk6v2SeE8Fz6UYnkrfVf0Vng=)
2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:e8:88:c9:b9:83:35:5a:74:b1:41:09:5d:a5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Jul 27 01:02:17 2025 GMT
Not After : Jul 28 01:02:17 2025 GMT
Subject: CN=29fc8677fad56704d372a9b06b85eda2d063a6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:64:0c:38:c3:b2:d4:c2:58:86:a4:8b:9f:
72:3b:a8:32:14:02:47:7e:c2:a5:8f:8d:31:1d:3d:
48:f6:40:68:ba:8c:90:20:7e:c1:e1:e3:15:bf:cc:
96:0f:5d:0f:50:ee:0c:9b:6d:11:0a:ec:cf:90:2c:
b9:f5:23:d5:ed:d2:b2:c0:60:05:8e:22:d4:99:cb:
44:49:38:7b:f7:7b:57:76:11:d6:d9:b3:83:9d:78:
6b:b5:18:40:b4:b4:83:08:6a:b9:9c:a4:fa:6d:56:
5b:96:d9:b8:0b:c9:99:de:65:f5:26:1b:bb:75:91:
0a:b3:52:55:4f:41:d9:39:9d:91:9d:4a:95:30:0b:
29:06:e5:ee:77:33:d5:2a:06:c4:f5:b6:4d:1d:8b:
8b:3e:68:45:7e:b9:6b:42:0a:0c:9c:9f:89:90:48:
b3:7c:fe:f7:47:dc:ef:f4:b3:2f:b8:d0:ff:b0:25:
dd:88:e0:4d:e2:b1:35:b4:c9:7b:f6:86:85:94:fc:
38:d7:d4:b5:62:22:6a:d1:a8:4d:96:23:6f:88:4f:
e1:64:01:73:2c:8d:44:42:92:65:4e:4b:aa:ef:ff:
3c:1a:93:72:39:68:93:4d:86:2c:ad:bc:39:a6:49:
ec:56:f3:1b:15:8f:07:ca:dd:d2:12:dc:c2:db:77:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FC:86:77:FA:D5:67:04:D3:72:A9:B0:6B:85:ED:A2:D0:63:A6:DE
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:39:81:47:2f:c4:75:15:6a:2d:e4:a2:af:a3:6f:2d:a0:6c:
5e:da:d0:3e:aa:2d:fe:d2:8f:20:d8:46:76:3d:69:30:25:a1:
63:ef:48:5d:c8:58:01:ec:68:b4:c7:f8:ff:9e:3d:bf:5e:f7:
66:21:89:f1:ed:d6:ee:9a:56:d9:43:19:07:aa:eb:83:74:35:
5c:bd:99:09:9e:c3:61:99:22:82:ce:3a:ea:96:37:c3:b8:51:
c5:56:ae:26:dd:eb:d7:87:49:97:bd:45:0d:65:87:8c:c8:c7:
10:2d:a5:1b:53:75:f8:9b:6b:f4:85:38:d8:13:55:51:59:63:
f1:8e:b4:fe:ac:90:0d:bf:a3:1b:e9:7e:dc:9c:56:5f:59:a0:
a7:b9:9d:58:c6:18:65:1a:f7:c9:12:95:89:a3:44:f4:bd:00:
be:6d:ed:42:ab:70:24:52:73:8b:50:10:f2:6c:c9:5e:c1:a6:
d8:0d:5a:e7:4f:17:0f:9b:63:25:e6:40:be:6c:05:c4:23:2a:
b0:8f:b4:87:cd:67:13:8b:a7:c4:80:59:c3:a1:2b:c0:d0:87:
19:2d:2a:91:43:ae:69:b5:cf:78:58:18:00:5c:f1:1a:19:0d:
eb:89:d0:99:8d:2c:3c:60:db:3c:53:1e:ee:30:06:eb:26:f8:
dc:b1:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:27:26 2025 by rpki-client