Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: QeGrzdODalEMWWYq5DyJ/+ahT4ElNzKdMKJOqeGrmAI=
Subject key identifier: 68:AF:60:C0:CA:24:14:89:A0:2F:8A:AB:39:99:D5:D9:09:D1:CB:02
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 019763CC4E7565CA2406F3F0FDB7469A809F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 1015
Signing time: Thu 12 Jun 2025 11:00:23 +0000
Manifest this update: Thu 12 Jun 2025 11:00:23 +0000
Manifest next update: Fri 13 Jun 2025 11:00:23 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: bdrrISIOqscuO+KFKv+SxLtJOjr7/T3TIOCicaznEaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:4e:75:65:ca:24:06:f3:f0:fd:b7:46:9a:80:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: Jun 12 11:00:23 2025 GMT
Not After : Jun 13 11:00:23 2025 GMT
Subject: CN=68af60c0ca241489a02f8aab3999d5d909d1cb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:cc:6e:f7:49:98:b5:b6:97:d4:d0:35:3d:
fc:82:1c:c8:0a:34:cc:9c:0d:19:54:b3:d5:55:21:
11:42:8f:bf:fe:35:a5:21:98:8a:f6:01:12:1d:3d:
14:ce:f9:4f:f2:c4:4a:cd:e0:d8:e4:73:08:b3:ae:
e3:24:c9:68:3b:60:9b:ea:8f:86:ad:50:7f:4c:f4:
1a:45:7c:ab:19:30:59:fc:6f:69:9b:25:fd:e3:59:
b2:16:ea:c1:56:8d:69:64:68:6d:ed:04:1b:bc:89:
4e:fd:8d:e3:9f:ef:af:b1:41:e4:0e:7f:24:40:c9:
9f:aa:09:30:e8:43:fc:46:3f:6c:7f:9c:f4:ba:94:
1f:77:2f:d1:d7:df:3f:f7:dd:2e:1b:dd:3f:a0:11:
81:05:38:0a:31:03:15:0c:c2:6e:b5:3a:e9:d4:1e:
a1:6b:82:4c:7d:71:b7:44:6c:02:00:08:65:df:a2:
aa:e7:30:0c:aa:ee:a4:e8:cd:20:13:f7:a1:c7:c4:
50:8b:0a:ea:e2:db:be:d6:69:e5:dd:29:65:85:c9:
e1:02:70:e5:6f:3b:d4:8e:58:f1:3e:08:bf:86:4f:
5b:e8:1f:26:57:ba:11:c6:a5:04:22:15:44:d7:fc:
1e:53:1e:05:b0:2c:6d:09:00:75:28:01:41:9d:0d:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:60:C0:CA:24:14:89:A0:2F:8A:AB:39:99:D5:D9:09:D1:CB:02
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:5d:4a:b5:ae:92:79:89:e5:9c:f5:72:d8:65:7e:41:64:b9:
d1:f3:d9:3e:b3:f0:20:8c:25:08:4c:6f:43:dc:cf:8d:73:a5:
37:01:72:eb:da:5c:1f:42:1a:bd:a7:23:96:82:2b:cf:05:b0:
b8:11:08:48:b0:c2:9f:3f:59:a1:2b:da:53:33:8c:db:cd:46:
4a:66:aa:c5:da:da:67:99:09:9f:bc:37:6d:61:b0:40:8c:9c:
6a:4b:3a:95:8d:53:e5:0e:f5:07:8f:ce:cf:11:82:3d:cf:1c:
af:24:c0:62:53:3e:16:9c:56:6f:64:96:78:41:97:4e:35:3c:
2f:fa:b1:68:57:99:63:bb:cc:06:01:fc:8f:d7:0e:81:dd:fc:
81:da:4b:58:c1:d5:e0:29:35:bc:f7:08:c9:7f:cf:99:6d:2a:
d4:85:5e:d3:b9:78:ea:21:54:41:a6:cc:44:29:e2:ee:60:2f:
53:10:94:66:07:3d:e0:4c:c7:c2:dd:22:ce:64:31:ef:07:03:
38:40:44:7a:cc:d1:79:02:52:fc:5f:b5:bf:d4:d0:24:7b:cd:
cd:93:63:cb:16:25:89:07:52:80:bb:77:45:a3:fb:c1:30:1e:
f5:1e:fe:71:f6:c7:cb:89:e4:d7:91:43:e4:1b:47:46:d5:64:
ab:b0:e5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:58:47 2025 by rpki-client