Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: 1JIAuz+MFGqK6mprsdx++2tw4uFUw8kL+KeuTyGB+Cw=
Subject key identifier: 9D:87:63:14:1F:66:6F:AC:6B:34:F8:8C:32:82:AA:78:D0:74:A6:6F
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 01974C69881D6EF5E9524FA3AA558351FA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 152B
Signing time: Sat 07 Jun 2025 22:01:13 +0000
Manifest this update: Sat 07 Jun 2025 22:01:13 +0000
Manifest next update: Sun 08 Jun 2025 22:01:13 +0000
Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=)
2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: MVlzp4hcsfA8makPnSIpVxuP/Gb+yxqzR0URlORfXCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:88:1d:6e:f5:e9:52:4f:a3:aa:55:83:51:fa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Jun 7 22:01:13 2025 GMT
Not After : Jun 8 22:01:13 2025 GMT
Subject: CN=9d8763141f666fac6b34f88c3282aa78d074a66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:05:79:de:1f:0c:48:6c:86:ff:4c:2e:78:
4d:6a:78:9e:13:9a:9c:a8:36:31:09:c2:e7:62:d9:
89:73:4c:51:b7:19:e8:97:40:e4:3a:86:47:f1:0c:
56:95:fc:3b:c7:fa:95:93:d4:32:84:7f:04:ac:ec:
f6:a5:65:fe:a0:fc:d0:c4:de:1f:bf:2a:95:ea:24:
eb:4b:b5:be:11:77:c0:dc:17:92:c8:b3:a1:be:b8:
0f:97:c5:b3:7d:eb:20:43:e9:e8:b5:3b:f7:32:b9:
48:b3:b3:ec:fa:02:76:81:db:c3:99:59:75:21:57:
a3:9d:a9:82:f2:33:13:bc:44:e7:da:8d:f5:24:0e:
16:26:14:5f:2b:b2:0f:79:d4:a3:77:f7:f4:01:bf:
33:a0:4e:00:d7:3d:8f:5b:30:05:81:d6:cb:b2:b0:
00:f1:ec:a3:5d:54:25:0c:8a:40:45:bf:4b:79:a1:
94:6e:40:28:c7:62:e0:fc:17:26:b1:a1:97:cc:bb:
5b:2f:8f:3f:ca:86:9f:d7:d0:2c:ac:4b:86:44:8a:
76:18:60:cb:58:08:fb:ea:74:70:08:e2:e7:af:5a:
a8:fe:a5:f8:ca:e8:e1:be:67:2f:a4:d4:b5:ec:63:
49:47:c6:ef:91:2f:e4:1c:b3:d0:a5:69:72:90:6e:
41:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:87:63:14:1F:66:6F:AC:6B:34:F8:8C:32:82:AA:78:D0:74:A6:6F
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6c:85:4a:a5:e0:a8:47:23:86:9c:19:53:4a:25:e0:ea:e7:
a2:e1:35:a9:08:39:6c:60:64:df:90:55:5f:5a:09:53:df:d5:
78:1d:c6:50:af:c6:97:b4:17:24:da:3c:0c:39:f2:da:d5:1b:
e6:33:97:59:ca:c9:8f:3f:a0:1a:d4:75:1a:38:50:0c:77:90:
e5:13:61:27:26:bd:2f:1d:7a:3b:03:b3:08:97:dd:59:94:49:
df:9a:71:f1:3d:3e:30:58:a1:f4:8e:e6:8c:66:70:a8:62:d6:
3e:bb:ea:75:82:6f:81:dc:2f:1a:2a:dd:98:bf:ba:e7:69:5d:
22:eb:0a:f8:d3:af:7f:ad:47:63:1c:53:91:7b:57:78:66:c1:
31:ad:44:a4:c4:c5:60:03:58:c5:e4:8a:ea:c0:d6:29:24:93:
40:dd:65:8c:13:4e:88:86:84:5f:0b:f1:7e:d8:82:35:ab:02:
ea:d9:d2:5a:8c:38:2b:5e:86:78:7f:94:7f:04:56:c7:2c:dd:
b8:77:48:d6:45:eb:ea:05:9b:79:ef:a1:77:bb:69:af:73:73:
a2:50:05:27:02:db:68:74:6d:78:54:85:4d:ad:11:f7:d2:74:
14:73:0b:aa:f5:38:8d:16:4f:df:a4:3e:ef:bf:f5:e6:3b:37:
51:67:ef:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:14 2025 by rpki-client