Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: YnrS3FjR+7mVR7jtPbpcIZDGIQkpYFp5lzXZASK92qo=
Subject key identifier: 02:50:F6:6B:1A:A6:BB:55:8B:E3:90:B3:F7:50:F0:02:6A:6A:18:15
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 01976F62971BE9533D1178D2C90E0E1ACEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 101B
Signing time: Sat 14 Jun 2025 17:00:21 +0000
Manifest this update: Sat 14 Jun 2025 17:00:21 +0000
Manifest next update: Sun 15 Jun 2025 17:00:21 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: 4CKxpoPqFVixDUX6DiVlwUX4e6QD+IFQKJ1P7qtQEdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:97:1b:e9:53:3d:11:78:d2:c9:0e:0e:1a:ce:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: Jun 14 17:00:21 2025 GMT
Not After : Jun 15 17:00:21 2025 GMT
Subject: CN=0250f66b1aa6bb558be390b3f750f0026a6a1815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:f0:a0:01:ba:63:87:f5:2a:37:1c:3b:2c:
aa:2c:a7:67:43:dd:e4:17:d8:34:86:92:27:be:ad:
8f:93:da:a0:5e:2a:c6:0f:21:26:ed:ae:12:56:d4:
d8:4d:80:43:48:0f:3b:17:f8:c1:92:74:27:f2:3f:
57:29:2f:62:49:6b:00:c8:b8:5f:20:c3:5a:fc:83:
eb:b7:40:de:8d:a8:02:71:17:65:c7:84:98:46:73:
ef:0b:07:da:b1:33:1a:3b:f7:a1:2d:37:22:db:f0:
3f:1b:89:e0:19:b6:0d:17:e6:49:bb:0c:b0:31:93:
97:f0:bc:c4:c7:d9:59:e2:cb:c7:69:c9:0f:d9:ee:
5e:cc:9c:cb:ce:f8:86:1c:48:20:b7:4a:8c:31:57:
c0:d0:5d:60:ab:87:56:42:11:79:92:47:28:9a:29:
bf:8d:90:65:80:88:cd:7c:a4:42:ab:66:b1:01:5f:
35:79:92:e2:9c:11:bd:56:89:80:bf:02:b0:40:7f:
a7:5b:ac:6c:d0:b4:10:57:3a:6a:33:28:0b:d4:e8:
6b:c8:22:ce:fa:52:b7:79:73:ab:ad:41:e3:fa:a5:
98:b9:a3:c3:8a:66:7a:b2:c5:5b:5e:44:c0:6f:a9:
2a:29:f6:1d:5e:79:64:4e:ec:44:15:b2:92:ea:f9:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:F6:6B:1A:A6:BB:55:8B:E3:90:B3:F7:50:F0:02:6A:6A:18:15
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:71:ac:17:59:a8:25:51:c4:df:49:32:e4:81:41:32:6b:42:
5c:9d:a3:f9:04:ca:53:2b:05:27:77:6a:c6:ef:8a:dd:2b:c4:
76:33:75:41:78:8b:28:f6:f9:11:c7:48:29:e8:37:d2:5a:f5:
c8:d2:84:e0:bc:4e:4d:c3:b3:04:fd:e1:d2:b1:1c:0e:6a:7a:
f4:c9:03:f4:f4:03:9d:fa:18:e1:fa:b7:7c:5f:cc:86:fe:d6:
2d:9d:57:e3:70:0e:02:b1:c5:e2:00:60:31:d1:55:97:a7:f9:
42:08:23:91:12:79:71:ee:3c:de:f9:16:9d:5a:1a:6f:f4:e6:
c3:cc:46:c0:72:88:fb:0f:5f:d7:0e:bf:9c:15:81:dc:18:10:
b5:c3:d2:8a:13:95:51:3d:45:f7:4e:a6:df:68:35:04:af:fd:
41:78:7d:45:31:8c:62:70:80:de:04:07:39:cf:11:a7:69:31:
0d:79:a3:64:60:a5:66:a0:59:45:54:3c:96:30:07:13:2b:40:
c0:77:0e:e9:61:26:13:ad:f3:16:d3:72:13:4f:70:17:15:f4:
ea:b9:3f:f5:3f:c5:85:b4:e4:ae:ef:6b:44:69:fa:f0:c6:9a:
6a:6b:a1:a7:79:bb:c1:ce:a0:18:42:21:58:35:82:ae:e6:f9:
5d:40:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:28:01 2025 by rpki-client