Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: 4Qqti7KAf9zCgNn2c5wk5w28KsGSLraeA1G0UJFQWtA=
Subject key identifier: 2C:41:BF:DC:7B:D0:ED:15:9D:90:E8:4F:FB:50:0A:7A:9D:89:86:1A
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 01984A0A1759AF0B915393C9916D4E39EE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 04D6
Signing time: Sun 27 Jul 2025 04:00:31 +0000
Manifest this update: Sun 27 Jul 2025 04:00:31 +0000
Manifest next update: Mon 28 Jul 2025 04:00:31 +0000
Files and hashes: 1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=)
2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: 4eTe8/8G60RcorlwuU59QBSP+0TH7Qaahab62T3k7e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:17:59:af:0b:91:53:93:c9:91:6d:4e:39:ee:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Jul 27 04:00:31 2025 GMT
Not After : Jul 28 04:00:31 2025 GMT
Subject: CN=2c41bfdc7bd0ed159d90e84ffb500a7a9d89861a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:68:94:bf:49:af:f6:ae:88:0a:13:f9:75:
40:e6:ce:91:23:ac:ce:e9:af:be:13:2b:96:b8:c5:
1b:45:29:93:62:bd:28:2e:f4:df:b5:5f:bd:19:64:
9f:75:88:2a:a4:85:99:cc:e6:39:f7:b7:e9:da:dc:
30:45:55:ee:6c:7a:de:4e:2d:14:17:e3:1a:ca:c8:
1d:9f:b6:a0:38:9b:6e:39:68:37:00:a6:30:53:60:
ab:c8:11:b0:49:8b:65:02:5d:8a:d8:4e:66:c7:d8:
50:40:1b:2a:ce:07:61:32:21:08:f6:41:63:a3:72:
0e:bb:a4:f2:e8:62:55:be:0e:85:7a:d3:86:13:4b:
96:1d:2a:01:e7:cf:cc:22:c2:07:12:7e:b6:56:aa:
42:3a:f3:2f:57:23:b0:1e:cd:8a:1a:b9:04:e7:04:
c8:cf:d3:6b:45:5c:f7:20:de:c8:01:85:4c:d4:f6:
e6:ac:cf:a3:c7:b3:8a:d9:12:96:c8:9f:75:82:3e:
57:e2:c9:2e:75:a4:54:81:e7:1d:21:01:4d:5a:11:
a8:76:e0:78:44:bd:4f:16:30:1c:56:04:2e:7d:28:
6d:c4:80:88:05:8b:33:18:11:2f:96:78:4e:55:bd:
0a:e2:36:7c:b3:33:1f:90:c8:e0:c3:a2:45:83:e0:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:BF:DC:7B:D0:ED:15:9D:90:E8:4F:FB:50:0A:7A:9D:89:86:1A
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5e:44:71:60:d4:18:59:6a:fb:a4:3e:57:f6:51:90:ae:24:
a8:20:af:ff:cb:3c:2e:df:c4:39:fc:7f:b0:67:4e:a9:bf:17:
a5:a4:9f:e0:d4:f2:c6:a2:96:a6:16:39:89:fd:9b:9f:19:62:
a8:56:e5:6a:80:23:4a:1b:a1:3c:ed:b7:9a:a1:9c:ad:fa:33:
cb:81:18:18:cd:3b:13:2c:ba:11:65:8b:22:03:df:15:8c:b3:
d2:27:2e:5a:80:5e:4c:9f:1a:a1:ae:6d:cd:dd:8c:73:04:ac:
34:ea:8b:10:e4:28:eb:59:67:40:9c:4a:89:69:2c:4f:69:92:
86:88:54:f0:87:7b:24:76:74:34:98:79:8f:02:fd:26:33:3f:
f4:7c:80:16:90:8c:b9:04:a5:7e:ba:da:39:50:28:14:5d:8c:
3b:df:b2:70:bc:5c:78:8b:44:4a:3f:df:e5:c9:9a:72:53:8b:
33:67:95:2b:15:04:7d:10:03:37:4e:1c:98:fe:89:ce:3d:83:
c7:84:42:68:4c:7d:4b:b8:88:8b:a7:d0:60:63:88:7d:1b:10:
1a:86:99:51:f3:bd:74:a2:ca:19:42:45:6c:4b:c8:b5:9f:7e:
b7:43:81:0c:e8:a0:39:b9:ca:d1:3a:03:a9:43:34:09:1d:b1:
2b:a2:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:50:14 2025 by rpki-client