Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
File: pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json)
Hash identifier: Qm/0Gx5CAfC5kn0IeErVSYgLCMz5cped8bGrd45nDfo=
Subject key identifier: EF:96:28:C7:00:D9:7C:20:1C:8E:01:EF:26:56:81:7B:32:61:45:50
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial: 019845F6509DB323461A23F520D0A9DCA21B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 09:00:27 +0000
Manifest this update: Sat 26 Jul 2025 09:00:27 +0000
Manifest next update: Sun 27 Jul 2025 09:00:27 +0000
Files and hashes: 1: W8EH6cHJ1jqNd1-fbWQ4302NcPE.roa (hash: 0aNZYoUKp18HEp9H4MaKrqtXZZf4gT5hLWGwRtSFdxU=)
2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: Enb1bxdD9WB6gFLcbjOqFlNxeQZQuVw6mKmK5GCUdlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:50:9d:b3:23:46:1a:23:f5:20:d0:a9:dc:a2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Validity
Not Before: Jul 26 09:00:27 2025 GMT
Not After : Jul 27 09:00:27 2025 GMT
Subject: CN=ef9628c700d97c201c8e01ef2656817b32614550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:19:52:a9:f6:bf:28:c0:56:0b:a4:cf:ce:
c7:1c:ba:37:c1:a4:46:f9:16:03:d1:53:81:54:5f:
68:5b:2b:62:e5:72:1d:b2:8a:fd:78:df:e5:6a:78:
6b:48:6a:fb:65:2e:8c:5b:03:10:6b:ec:eb:3c:34:
e2:57:d5:5c:c1:c3:49:74:ce:40:3c:48:7f:29:93:
c2:4e:5d:2a:68:21:b2:68:74:5f:2e:51:1e:15:06:
6c:ae:80:93:c9:64:fb:c5:4e:f8:62:83:26:c4:68:
bd:1b:6f:d2:6c:57:fc:6a:63:be:4a:58:24:40:be:
31:a7:c3:05:34:2b:1c:78:34:d4:0e:8a:c9:69:d6:
9b:e5:4c:92:20:35:32:46:5d:5d:c5:8e:11:e7:45:
2b:6f:91:b4:06:67:6d:ce:dd:d5:83:b6:3e:93:af:
5f:1e:dd:bf:bd:10:34:56:88:db:8d:a0:26:a7:e7:
0c:45:e8:79:f3:d5:57:7e:75:8b:3e:bb:b9:5e:e7:
d5:04:e5:f2:2a:b4:5b:8a:bc:ef:f1:25:4a:6e:e0:
95:ac:10:47:a6:42:00:86:f5:0b:f4:7d:0e:f9:43:
0f:38:22:95:ce:1e:5b:b3:78:64:68:89:7d:8b:57:
82:ee:ca:5d:33:02:53:72:e5:45:51:26:b7:54:04:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:96:28:C7:00:D9:7C:20:1C:8E:01:EF:26:56:81:7B:32:61:45:50
X509v3 Authority Key Identifier:
keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:70:e2:91:12:0f:8d:3a:98:7f:cd:14:29:64:91:4b:36:63:
49:45:ae:d3:d1:62:bb:c2:33:a5:aa:c5:bd:e0:83:e6:33:33:
63:77:27:42:68:d4:fa:13:d1:68:f5:81:4a:ab:0d:a4:b8:86:
ad:a0:f1:8c:4a:9f:92:b5:65:79:81:50:cf:92:d3:02:80:e5:
72:25:d6:a6:ff:0b:d2:6c:83:4c:cc:7d:8f:87:73:03:0c:d1:
14:2c:e0:b4:2d:d3:3e:6a:32:f0:36:3f:69:53:bd:f2:8f:ac:
77:0f:b1:b0:43:af:94:b9:6f:53:a8:5e:8b:16:17:84:08:90:
a8:c9:48:e6:39:e2:05:d4:1b:5f:dd:99:de:ad:a1:21:9e:5c:
01:25:cc:9c:61:46:bd:e1:7a:02:3d:4e:92:71:3f:da:6e:5b:
f0:23:40:3f:31:95:aa:a6:e5:cb:fb:39:d1:e4:f5:02:ac:ba:
bb:9f:ca:8b:0b:6a:a9:bf:23:90:1c:50:c5:be:9f:c8:2a:e5:
08:be:1f:7a:78:b8:c4:cf:f1:a7:52:ef:ba:ca:02:e5:96:bf:
a9:11:0a:b2:6f:df:5a:44:35:6d:0c:bd:0a:4e:19:2d:1e:7d:
f5:c5:a7:d6:60:a9:cf:8b:8c:96:49:24:ba:85:35:72:71:36:
84:0a:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:09 2025 by rpki-client