Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json)
Hash identifier: NLVOmAioueI7IslItkwYCQTD5EJn3Bp1LV3PZYZ8t10=
Subject key identifier: 0B:1F:FB:06:B8:16:05:72:57:E3:F1:3F:B1:BE:5E:9D:50:60:4A:06
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial: 019847785F8B8EB472CED4434A2C9FEB628F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
Manifest number: 0E7D
Signing time: Sat 26 Jul 2025 16:02:07 +0000
Manifest this update: Sat 26 Jul 2025 16:02:07 +0000
Manifest next update: Sun 27 Jul 2025 16:02:07 +0000
Files and hashes: 1: PUpMBlY3y3LiEyvtN3mwZr7fC6o.roa (hash: 83wzwEaj6Lu4SVxQ13wsJpRArhNJgziukBIbApzP3jM=)
2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: tT3kweBupyKnQucrE+2WEm0r9ODAhQA19U7kIVRvWh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:5f:8b:8e:b4:72:ce:d4:43:4a:2c:9f:eb:62:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Validity
Not Before: Jul 26 16:02:07 2025 GMT
Not After : Jul 27 16:02:07 2025 GMT
Subject: CN=0b1ffb06b816057257e3f13fb1be5e9d50604a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:bf:61:b5:52:43:56:86:25:55:af:2c:60:
3a:68:9f:b1:c1:5f:6c:94:19:b3:00:07:2f:c5:06:
68:2f:09:5d:50:fa:f8:cd:96:00:f9:bf:ef:5a:74:
b5:7a:15:02:34:0c:ec:2b:f3:4c:ce:2d:68:78:d7:
09:76:b7:c7:a6:6e:2f:17:ce:78:e6:69:96:46:44:
3f:87:0b:f2:84:15:cd:dd:1f:65:65:fa:d6:86:b3:
c3:69:ef:de:00:2d:2e:55:a8:ef:85:fb:0c:4d:01:
49:e8:37:a1:f4:e9:9b:fd:8f:83:9e:64:29:b7:9a:
ce:f4:38:5b:06:96:92:46:04:eb:70:7b:8a:db:0e:
c3:7e:09:0c:2f:09:9a:10:38:6e:bb:83:38:9a:a2:
d3:6a:f4:93:42:aa:74:17:5d:72:79:38:8f:a1:d8:
22:ec:85:16:6e:60:e0:57:06:a4:70:c8:1a:d2:b4:
5a:d8:d4:21:64:08:1b:37:39:09:57:d3:8b:c2:04:
a1:b1:21:d4:db:37:4a:a0:22:28:ca:9e:64:ef:b7:
bf:6a:58:1d:03:a1:0d:5c:b4:73:0a:40:89:4e:32:
b0:63:a0:57:5d:1f:1e:b8:c4:a3:ff:52:6f:80:f7:
62:5e:a8:79:7e:6a:b2:ab:ad:c6:00:7d:1a:eb:34:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1F:FB:06:B8:16:05:72:57:E3:F1:3F:B1:BE:5E:9D:50:60:4A:06
X509v3 Authority Key Identifier:
keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d7:93:23:67:c8:6d:6d:e5:60:c7:89:9e:fa:07:40:e5:25:
54:91:38:ce:3a:e8:e6:1f:05:df:90:12:92:0f:bc:76:54:da:
83:bd:fe:e3:d8:ed:00:69:c9:4c:1b:4e:74:ce:5b:8c:98:21:
49:df:9d:a4:ed:c7:52:d1:ba:79:f2:58:0c:70:61:60:99:9b:
3d:ef:9a:f8:86:ec:38:9d:97:6f:be:eb:a9:b3:75:3f:f1:48:
8b:32:70:6c:4b:d2:07:c8:f6:ae:2d:12:02:55:32:51:3f:8c:
41:e7:04:13:67:e8:80:f0:a5:6a:28:8a:68:0b:12:ee:f8:6b:
56:b8:be:ba:73:4e:e2:f8:0b:ea:0f:35:9c:8b:0b:21:1e:85:
21:83:a3:8f:fa:20:18:0b:8d:f9:41:4a:a8:ab:73:1c:5e:1c:
e0:99:4a:a1:aa:47:fd:64:5a:8a:d3:1c:5a:f9:d9:53:19:b2:
5f:08:35:99:e9:14:5d:fc:9d:84:65:56:57:25:47:71:81:8e:
77:be:ff:1a:5e:2d:da:13:60:6f:92:ce:f8:95:df:27:96:03:
f5:bc:51:2b:45:aa:c1:7d:b8:d6:cc:bf:45:13:26:28:64:3f:
25:1b:b3:f1:3a:d9:70:2c:06:7b:c8:ab:28:90:a2:b6:d7:71:
c5:fd:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:53:14 2025 by rpki-client