Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: I+yQ6j4UnwIuKeHtTQeLzL21XlD+4ZqRdVO5K6//UgA=
Subject key identifier: E4:1E:76:F3:56:0C:35:35:D7:09:B8:72:E2:A3:09:0C:36:C5:2F:FA
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 01974E57221ACB8B5477D332D0DF9FD9629C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 07:00:22 +0000
Manifest this update: Sun 08 Jun 2025 07:00:22 +0000
Manifest next update: Mon 09 Jun 2025 07:00:22 +0000
Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: MZ8KfPVpD3ad93YjqDgxTBYVcu20kXOoIx4mGsvT6J8=)
2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=)
3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:22:1a:cb:8b:54:77:d3:32:d0:df:9f:d9:62:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Jun 8 07:00:22 2025 GMT
Not After : Jun 9 07:00:22 2025 GMT
Subject: CN=e41e76f3560c3535d709b872e2a3090c36c52ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:fa:1c:b4:99:52:51:9f:b6:72:54:33:8a:
b1:dc:69:95:30:f0:10:61:e9:ce:72:6b:65:bf:1d:
7a:c6:9f:7e:e6:fa:94:60:cd:b3:70:4c:e6:0a:c5:
7a:3a:1e:0f:f2:22:7c:8a:44:40:9f:3e:85:3a:4c:
44:f2:39:74:3d:a0:f8:a1:b7:05:5d:52:3b:1d:31:
94:d4:76:e8:7b:ba:a8:c4:76:e8:b6:b1:89:d3:63:
04:b3:ed:c8:94:3c:38:8f:71:75:db:68:81:0e:0b:
e5:6d:cd:9b:87:a2:4b:93:9e:f5:47:65:08:95:9a:
73:0e:9c:b7:57:c1:99:10:40:d1:5c:c0:14:fb:f5:
3d:6b:c0:1f:82:7b:ca:5c:b9:dc:6b:23:ad:73:5b:
9b:56:7b:9f:06:ad:78:a5:74:b7:7f:fc:a3:5c:5e:
51:d4:f4:c7:89:b3:cb:1a:c5:25:b4:c6:43:c4:f1:
da:46:e4:ee:1f:65:e0:1d:e2:1c:3b:0a:8d:95:a9:
1d:72:30:30:4c:0b:15:91:0e:88:90:fd:6e:5f:1a:
08:17:b2:aa:16:7d:68:5a:7b:35:c6:c9:1a:f3:48:
03:37:67:3b:04:93:ed:7a:6f:49:5c:b0:53:ca:d6:
61:ba:fb:04:6b:3c:64:dd:c4:39:d4:f4:57:eb:8c:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1E:76:F3:56:0C:35:35:D7:09:B8:72:E2:A3:09:0C:36:C5:2F:FA
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:83:07:8d:fc:4e:cf:0e:70:12:7d:a9:a3:54:cc:57:3c:56:
a1:b5:d5:cd:63:39:19:99:b9:7a:cd:7c:64:6b:1f:3d:6f:de:
40:58:c3:71:25:52:91:97:f9:8e:27:5f:e6:44:4f:37:b4:df:
6b:bc:e4:09:28:b3:77:a6:5f:d0:d8:76:d1:de:a3:ba:fd:0d:
6a:92:71:04:17:3f:7e:fe:95:e8:61:d4:61:b7:c9:1b:80:3d:
b8:77:ee:84:c4:29:c6:00:7a:dc:44:39:ab:27:2e:f3:62:06:
25:bd:fb:07:f7:fb:b9:79:60:57:60:76:24:2a:3c:14:dd:63:
4c:e2:ea:35:ba:44:19:2f:bc:a5:06:38:f8:bb:d5:8d:7c:da:
91:43:a5:09:80:7b:8f:d5:3c:ee:be:f7:e1:b3:e2:a0:bd:ba:
c5:ed:51:86:87:dd:46:c8:36:29:c0:30:26:8b:3b:2d:23:37:
91:31:5b:68:65:a2:74:49:7f:2b:c1:ab:d1:4b:fd:cd:2e:63:
d4:a4:8a:e2:d4:af:66:af:a2:ee:ed:ab:fa:b4:4f:bb:31:38:
5c:32:2d:f6:46:6b:65:0e:bb:85:0f:3b:c8:1d:a0:0f:c7:12:
50:f6:47:92:6e:a9:30:9b:ef:4c:8d:87:bc:e5:4b:84:4c:a9:
07:bd:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:46:52 2025 by rpki-client