Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: Bi3ERyJ8w1kGliL+daqVuYBDvbeavnMPIf3+fc8q8AQ=
Subject key identifier: AC:E7:C5:A8:99:EF:A9:A8:EB:FE:7C:EC:5B:19:E1:BA:89:01:42:06
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 01984A09E32849A4EAB9DED43C6160FAEF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 04:00:18 +0000
Manifest this update: Sun 27 Jul 2025 04:00:18 +0000
Manifest next update: Mon 28 Jul 2025 04:00:18 +0000
Files and hashes: 1: V4fEP3mKAgRZldstTINNuk_J6BQ.roa (hash: 8GFsD/JurXta37HamqakliSVJtpBqW+/i/sWeLhcYfE=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: s1ouHSUq+cd1NxBx9K9IZIVr7gePSjf9NIhkRnpjDQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:e3:28:49:a4:ea:b9:de:d4:3c:61:60:fa:ef:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Jul 27 04:00:18 2025 GMT
Not After : Jul 28 04:00:18 2025 GMT
Subject: CN=ace7c5a899efa9a8ebfe7cec5b19e1ba89014206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:01:6e:5e:aa:a9:fd:6b:3b:25:ce:44:0e:
a5:48:8a:df:d2:95:a7:26:0b:c0:13:2b:56:d4:8e:
25:90:42:24:99:ff:33:88:ae:af:a4:7b:52:2a:19:
8c:93:d8:33:14:be:f2:96:76:13:f1:49:42:64:f9:
3e:19:81:60:5e:f8:a6:84:1b:31:72:cf:dd:02:a2:
7b:11:9e:b0:ab:90:75:99:a4:86:8d:c3:fb:c0:3a:
c1:b1:3f:60:d4:1a:2f:9c:78:1a:d7:00:ec:1c:5e:
8a:79:2f:07:73:bc:7a:04:31:fa:a6:d4:47:5e:a7:
aa:1a:d0:21:94:b0:67:9f:79:c4:dc:5c:7e:1e:2e:
c0:29:ff:7e:21:79:e9:9d:e3:d8:06:31:3e:f5:4c:
d5:fe:12:48:db:d3:32:a1:b1:0b:ff:24:e1:e6:6f:
25:b7:40:cc:a3:2f:91:9c:b6:97:d1:6e:fd:30:c1:
a8:63:9e:08:0a:87:01:b9:61:08:ec:50:2a:17:c7:
ca:45:4a:99:51:62:eb:c6:bf:99:6a:ce:47:29:07:
62:cf:d7:04:70:1f:e0:ce:32:28:cb:98:58:3a:fc:
20:5e:7b:9e:75:77:4c:b3:30:ed:2e:92:51:8a:48:
9e:01:2e:41:b7:d7:96:ac:37:60:b3:6b:76:85:20:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E7:C5:A8:99:EF:A9:A8:EB:FE:7C:EC:5B:19:E1:BA:89:01:42:06
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3a:16:56:15:a5:fc:a0:3d:d8:44:82:e7:b5:e5:a6:dd:3c:
c6:b0:25:ef:64:95:c9:e1:99:d0:f0:69:da:01:41:cd:16:89:
95:b5:25:3b:ee:11:01:a2:64:1b:36:d2:31:a5:06:e0:0e:f2:
85:f1:21:cf:05:5e:44:c6:c3:14:06:b6:7d:c8:b3:31:f1:0e:
f6:bf:4c:24:63:b2:4e:ad:91:d6:ba:bd:2e:a5:86:75:5b:f9:
28:4c:1f:bd:fc:a9:4e:7a:3e:80:88:03:cb:0d:cc:11:84:4c:
81:dc:85:d5:c1:fc:f1:27:45:e3:c1:16:b8:f9:9e:6f:6f:c2:
ae:01:e9:e0:74:a1:af:34:ad:dd:e9:89:19:4b:8a:57:af:09:
97:2b:0c:83:ee:4c:88:23:d0:df:a6:94:0c:31:2a:c7:85:5c:
3d:bb:fd:2c:8e:0c:b4:17:a6:c3:f4:10:84:f8:b9:71:6d:c0:
ff:73:5a:6e:8f:f6:0a:5b:25:2c:e4:cd:92:15:96:78:f6:7b:
0e:60:be:a6:9a:8a:2b:a1:b2:84:80:e2:74:94:a2:51:22:a9:
9b:c7:51:c3:fc:21:62:98:96:40:1d:ec:2a:82:32:0b:36:98:
1c:df:7a:4b:0d:fb:e8:0f:e3:68:4e:cd:f7:14:ac:00:4c:a6:
32:9e:f5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:07 2025 by rpki-client