Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: bjKphExdmnCxu873xUc+OcEjs5MS7vLsLm5wlQpkqKA=
Subject key identifier: C9:EA:C6:68:FF:B6:26:CC:F6:CB:9A:58:0B:F9:3F:F7:48:0F:62:AC
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 0197458B20378CEE4E7150B63B083D56DF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 150B
Signing time: Fri 06 Jun 2025 14:00:34 +0000
Manifest this update: Fri 06 Jun 2025 14:00:34 +0000
Manifest next update: Sat 07 Jun 2025 14:00:34 +0000
Files and hashes: 1: o-nYlXPYTvbWycHnP4jG4hys78s.roa (hash: +9u5uc7wAwLvJQwWxklCfmQHya0NysgfSBmasNGP6Yk=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: mvh00j7oZ7ebaeJmAqpiFtvI5SwyECDxJ1RwzEYfqyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:20:37:8c:ee:4e:71:50:b6:3b:08:3d:56:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Jun 6 14:00:34 2025 GMT
Not After : Jun 7 14:00:34 2025 GMT
Subject: CN=c9eac668ffb626ccf6cb9a580bf93ff7480f62ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:f8:21:f0:d2:b7:9d:4a:fe:2a:aa:cc:1d:
a8:91:48:ed:05:83:80:9f:95:67:27:09:48:86:e2:
db:4e:81:ac:6b:fb:7d:1b:72:6c:ad:c1:7b:06:8f:
2a:cf:c0:7e:ae:fd:07:7e:35:0e:32:6e:1e:12:cc:
ce:15:a5:68:90:c3:fb:b7:d2:17:1c:f0:18:83:22:
fc:d4:82:44:d5:dc:ee:74:e1:c7:7e:28:2f:98:21:
f1:7f:14:da:6d:46:f1:be:81:5d:e7:b8:9e:29:f0:
93:a0:c4:4f:57:2d:99:60:60:6c:3a:85:5d:b8:2e:
54:b7:aa:41:7d:52:e0:2b:b7:76:2d:a6:e6:6b:aa:
61:4b:96:66:34:cc:16:f9:32:c4:5a:26:72:33:5b:
43:cb:f0:11:02:63:39:48:14:ff:4f:89:c2:62:cd:
97:30:de:8c:68:5f:71:91:ba:82:67:7d:70:33:79:
43:72:c7:43:6f:2f:0b:32:5a:b0:46:97:64:d0:64:
bb:62:eb:67:e5:5f:a5:e5:80:60:be:e3:e5:68:9d:
5d:78:c8:71:0d:e1:f5:cf:4e:5a:88:ac:3d:4c:db:
9d:16:5d:d4:dc:e1:fe:35:ae:74:9e:5a:4f:0c:f3:
7d:8d:6f:ed:c4:61:2c:ad:0b:b3:24:77:b5:33:2b:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EA:C6:68:FF:B6:26:CC:F6:CB:9A:58:0B:F9:3F:F7:48:0F:62:AC
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0b:f2:24:dc:02:d6:d2:aa:40:8f:39:e1:c7:17:91:a7:0e:
bd:32:2c:8c:ec:18:78:8c:69:82:73:a8:60:13:5e:48:07:c4:
30:fd:72:1c:b2:d8:e5:b1:32:54:22:e8:2f:2d:c4:f1:65:26:
41:12:40:28:7c:4c:4e:e9:08:97:32:bf:ca:b4:5b:17:44:e7:
03:55:5b:d3:9c:98:d1:fe:58:2b:bc:c0:a4:40:f8:62:10:a0:
bd:88:44:01:12:2c:69:32:11:f1:d7:2f:4b:6d:ba:5e:ed:8c:
45:1a:2d:f2:08:c2:27:37:47:4e:af:29:16:a6:f3:f6:20:f9:
9e:3f:4d:36:50:c6:d8:c0:7d:4e:91:0a:0c:0b:02:f2:81:76:
a3:88:34:eb:6c:79:2e:3f:fc:d2:66:c7:91:68:37:16:1e:65:
9f:5f:0a:e8:08:dc:93:4e:d1:f6:97:35:eb:cb:85:93:3a:ed:
f8:88:25:80:75:4a:8a:9a:02:15:04:fe:1e:c2:01:73:85:03:
c7:db:ec:73:c7:67:98:a9:91:03:4e:d6:b4:bc:67:ec:05:63:
9b:9b:d6:29:9c:71:b8:fd:e5:f6:d0:c5:8c:e8:c9:fc:fb:73:
ce:e6:ab:c8:28:45:d2:c4:47:b0:cf:89:9f:ed:5e:65:b1:cc:
cc:f2:e6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:22 2025 by rpki-client