Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: 1wDpJ4RlKYPgKbcWeXmD2Ld5KCoVu8HkX/CW8FZ5WAM=
Subject key identifier: 88:23:AB:CE:4A:2B:60:C7:90:96:45:E5:05:C0:B1:93:96:F2:78:58
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 01975D262047285B65E4D112126907FA0765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 0685
Signing time: Wed 11 Jun 2025 04:01:09 +0000
Manifest this update: Wed 11 Jun 2025 04:01:09 +0000
Manifest next update: Thu 12 Jun 2025 04:01:09 +0000
Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=)
2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=)
3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: Xxb+RgXiXxrzs+xKvromm5pV+nd/oVHqw68XZVz79VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:26:20:47:28:5b:65:e4:d1:12:12:69:07:fa:07:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Jun 11 04:01:09 2025 GMT
Not After : Jun 12 04:01:09 2025 GMT
Subject: CN=8823abce4a2b60c7909645e505c0b19396f27858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:d9:9e:27:aa:d4:2e:af:97:1d:67:6e:d7:
f1:92:4a:93:5d:61:a3:d8:d5:42:d0:c8:3a:2b:08:
c8:3a:45:97:9b:d1:ac:f8:a5:7b:a9:b6:3f:92:c7:
96:d0:b6:72:e4:58:ef:ff:3a:67:4b:53:77:01:c4:
b2:15:d1:3f:38:c2:d1:35:10:22:1e:cb:be:eb:40:
b5:51:f1:56:47:31:1e:93:38:94:2b:55:f3:5f:8c:
17:9b:d8:1f:74:53:56:95:47:65:e8:17:01:3b:43:
b3:a6:bb:a6:ff:d0:5e:c2:bb:00:2c:52:4d:de:52:
0a:d3:48:3f:d3:4c:39:47:54:ec:0d:48:b3:ba:f6:
77:ac:80:73:47:8f:02:f7:0d:81:2a:b4:3f:cf:25:
94:b5:0f:5d:f8:96:c8:53:f0:20:0f:8c:df:28:b6:
6a:32:cf:f3:6b:74:7b:2a:57:aa:90:c0:68:e7:a9:
94:ee:b5:57:3a:2f:f9:f9:96:de:cc:d3:4e:fc:e6:
8c:24:e2:33:d9:57:b8:50:dd:fc:8a:29:a4:1d:e0:
2a:90:36:56:fd:77:b1:67:f3:e9:e9:f1:6c:c1:7d:
06:9b:6b:3e:41:52:4b:cd:75:77:c3:3b:5f:89:48:
84:e9:00:21:82:ad:db:c6:3a:7d:74:fe:9b:10:a8:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:23:AB:CE:4A:2B:60:C7:90:96:45:E5:05:C0:B1:93:96:F2:78:58
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a3:25:db:9a:d4:60:23:4a:f1:83:a2:5f:4a:e1:6f:b5:65:
fb:5b:a5:d9:1c:45:1c:13:12:6b:cc:90:7a:52:29:88:fe:82:
46:cc:15:68:a6:89:ef:b5:77:65:18:fe:51:c1:d4:15:a9:55:
d3:6d:dc:4a:eb:65:d9:5d:e6:11:fe:fe:25:5a:92:65:89:3d:
69:52:7a:b8:6b:1e:12:77:ef:cb:6f:ac:bd:77:87:98:51:44:
10:06:7f:62:4b:2c:f8:f4:56:e4:25:e4:92:27:b3:89:3b:2a:
25:b7:cb:43:85:e1:8a:7a:c6:0c:9c:42:0c:53:9d:7b:7a:e1:
c6:e5:2a:90:f9:f7:bf:cc:ce:c7:76:38:31:4f:ad:2c:ab:1d:
a9:5e:e3:db:4b:d2:61:65:da:08:8a:e6:8c:4f:d3:73:c2:d9:
1f:e4:bb:fd:5b:04:8b:e7:a4:f4:7d:11:cf:01:8a:1b:ff:b2:
ed:a0:25:26:5d:5d:ba:d8:5e:78:76:a9:07:e1:39:aa:7d:3e:
06:0b:f0:37:b0:c2:92:45:cd:7f:49:b8:90:cb:80:9a:ea:ed:
7c:a8:03:3e:b6:fb:7f:e2:8f:00:b6:69:8d:23:7e:02:08:e3:
f5:5b:70:1c:54:b2:7b:b6:b1:bf:03:c4:22:30:2e:89:95:33:
ea:41:a5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:40:20 2025 by rpki-client