Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: Y+dCJRT4AFPt4/lcSZO1pBUGcML75QDf6F8yEYq0I88=
Subject key identifier: 90:8D:24:74:74:DE:AA:86:09:A5:F8:21:C3:18:64:4D:6A:6B:2D:41
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 019848F78AB4DC3D985307971F2B0EA2C890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 01EB
Signing time: Sat 26 Jul 2025 23:00:39 +0000
Manifest this update: Sat 26 Jul 2025 23:00:39 +0000
Manifest next update: Sun 27 Jul 2025 23:00:39 +0000
Files and hashes: 1: cbfaYBjluJFGRHIZotfNKfL5QOM.roa (hash: hnnwP5hTMZNnGccOJwmbq229la5aF88t7OiSZXiU/mU=)
2: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: Tctr5lVCEuOMJragMg59biwNo89u+bZGEUhCijCIQ60=)
3: zwNxRZCXOiLKuZa_7Wmh9NcuOqQ.roa (hash: 6xxBkLaHc1up/veCbZl0eXM5uTf3B1SDA3dM0Oft33U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:8a:b4:dc:3d:98:53:07:97:1f:2b:0e:a2:c8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Jul 26 23:00:39 2025 GMT
Not After : Jul 27 23:00:39 2025 GMT
Subject: CN=908d247474deaa8609a5f821c318644d6a6b2d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:72:cb:5e:e8:b8:2b:b9:44:f0:8c:33:61:
ae:8e:57:bb:e3:82:cb:24:75:5f:8a:8f:37:b4:b8:
63:dc:a6:ed:4f:f5:59:3e:30:f4:16:0c:e2:69:d3:
7c:3e:52:fd:e5:69:d9:5f:c5:d5:cb:0f:d6:9c:8e:
c0:8f:eb:21:5c:46:4d:51:3b:2c:17:89:1c:0a:ec:
11:c0:a0:f3:75:30:4d:3e:77:d6:de:f1:9d:8d:4a:
0e:21:a1:c2:5e:28:93:e9:06:05:4c:23:81:6c:53:
09:1a:8e:74:7c:92:6d:b8:fc:ea:23:d4:0e:91:dc:
38:c3:65:7a:f0:37:ab:f0:6f:bf:7a:d9:8e:ba:6b:
6a:1b:1b:8f:76:ac:5e:dc:56:8c:84:98:6e:b2:90:
88:48:ac:e0:d1:36:4c:b8:d9:86:54:dc:d3:20:66:
56:b3:7b:3f:b8:96:74:da:4a:0f:08:aa:a0:52:55:
2c:ce:71:f3:d8:07:6b:0d:37:92:9e:f8:88:0d:37:
ca:fc:ce:d5:5f:a1:e1:b8:a5:f5:a4:ce:da:6a:fa:
e5:6f:08:d9:56:c3:44:f0:4c:52:14:37:4d:86:2c:
04:0d:23:58:6f:93:59:a3:c7:ec:09:53:17:27:85:
29:ad:80:64:eb:b1:8e:a2:a4:56:07:64:b9:95:cf:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8D:24:74:74:DE:AA:86:09:A5:F8:21:C3:18:64:4D:6A:6B:2D:41
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:20:8b:04:d5:6f:d0:a4:31:52:cc:15:82:11:f1:a1:99:9e:
e4:87:d0:87:c0:34:70:c4:64:f5:df:aa:d5:d6:2d:67:2c:af:
18:2b:3d:27:7b:37:47:a7:c4:34:99:b7:ca:2f:49:37:68:40:
c6:f4:00:82:ba:a8:62:51:20:7f:82:31:a2:a3:a3:5b:a1:00:
3d:67:ae:1f:0e:fd:af:6e:05:b8:e8:80:e0:c4:0c:33:3b:7c:
13:fd:88:c8:c5:8f:7c:39:33:1d:6f:d3:a7:0a:6c:cc:f3:9f:
4b:00:5c:30:c9:f0:85:9a:1c:97:14:5a:93:1a:ce:38:a5:60:
d7:54:13:69:ab:42:59:96:ba:84:c3:af:8d:a7:e5:db:2e:14:
67:8f:b2:60:9e:23:3f:29:77:fa:c6:ba:46:32:ff:7d:94:ec:
cd:f3:d8:9e:df:02:ce:23:aa:e6:c5:1b:f3:fd:0c:d1:01:d5:
9c:b1:28:16:d7:f9:0d:53:20:20:ee:be:e0:0d:14:87:b8:e8:
a2:fd:e7:9e:0b:b8:9b:2b:f2:7d:39:55:1b:26:67:18:ae:71:
aa:a5:e5:9a:07:65:88:cc:a0:11:12:89:a7:63:de:99:d8:c7:
a9:0c:4d:4f:00:fd:45:4d:ed:41:f4:52:06:fa:97:76:87:1d:
ec:60:30:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:07:29 2025 by rpki-client