Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: AjQNH5B12aIW0pWnf5jk4pH2PLBFo9+AL3ga+TROJto=
Subject key identifier: 35:CD:67:AD:62:D9:2E:AD:13:E1:28:1A:7A:FA:89:C6:D0:44:01:D5
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 01974742BAFBB4AC3181F5D7F961494FE062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 12A6
Signing time: Fri 06 Jun 2025 22:00:44 +0000
Manifest this update: Fri 06 Jun 2025 22:00:44 +0000
Manifest next update: Sat 07 Jun 2025 22:00:44 +0000
Files and hashes: 1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=)
2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=)
3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: Gmmer6bsOpCzXjPfZZGQS1AjYKSINSvcOlqJKOAnX1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:ba:fb:b4:ac:31:81:f5:d7:f9:61:49:4f:e0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Jun 6 22:00:44 2025 GMT
Not After : Jun 7 22:00:44 2025 GMT
Subject: CN=35cd67ad62d92ead13e1281a7afa89c6d04401d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cc:12:ef:53:9b:69:4c:bd:6a:ee:d5:b8:73:
d2:10:d7:00:59:8d:a6:41:22:4e:90:b2:75:dd:77:
30:04:27:2c:63:43:3d:e0:ab:85:33:89:8c:96:b8:
dd:e1:c6:9d:78:a8:e9:69:27:06:61:ba:f2:41:2d:
02:3d:8c:3a:6b:4a:4f:26:08:55:fe:b5:2f:22:ce:
d2:f1:57:e5:19:64:be:22:20:e3:00:15:3f:6a:21:
4e:57:12:25:52:62:ed:c5:4c:2c:94:e0:e6:bb:2b:
12:b8:b4:b8:b7:6a:d1:a4:5b:5d:79:c8:f6:2d:3c:
b0:41:44:6f:c7:46:81:a8:8e:49:28:4d:bb:1d:55:
fe:b4:3d:11:b4:8b:e7:96:69:54:2e:2b:29:a8:8e:
5b:88:d0:59:50:59:ed:a7:00:85:b9:9f:6b:e9:5a:
20:b2:e0:1b:ba:ee:00:93:7c:7a:71:1c:de:11:a3:
08:04:2e:93:e7:de:11:a1:f4:7a:7b:ac:b2:54:ac:
1e:b2:2f:e0:f7:00:27:2a:f3:1c:25:3f:8f:c2:e6:
59:96:c2:6b:c4:c9:31:87:8a:96:88:1d:ef:9d:fb:
fa:ce:25:8c:f6:86:ab:0f:6c:82:d5:f1:b7:4f:92:
65:76:3e:52:39:cc:0d:db:c3:62:da:a3:c5:ad:b7:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:67:AD:62:D9:2E:AD:13:E1:28:1A:7A:FA:89:C6:D0:44:01:D5
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:aa:41:ad:d3:3a:60:84:3b:14:3d:c0:d3:a8:b2:f6:71:d4:
fb:b0:6c:86:30:68:0e:e7:d2:a3:6a:43:9c:93:7e:a1:fd:07:
63:b7:cd:4a:29:dd:78:0a:df:4c:2c:c8:4f:4c:2a:58:a4:99:
11:d3:de:6e:27:ce:d3:2a:bc:09:04:8f:79:5a:6c:60:e1:b3:
79:70:db:81:23:87:de:54:96:ce:6a:b1:93:7d:df:59:1a:7f:
1f:02:dd:02:6e:d0:00:b4:38:bc:f3:31:51:f8:b7:63:8c:b5:
b2:aa:33:bf:17:31:d1:9e:14:00:3c:16:bd:02:d4:8c:9a:23:
f4:72:f4:ef:67:d9:73:93:d6:84:62:ed:95:25:9b:17:fc:04:
9a:bb:2c:cf:61:16:64:cd:83:6c:89:f7:d4:1b:dc:7e:08:f1:
16:ed:11:0b:a0:71:ff:db:64:23:3a:e2:99:bc:dc:db:d2:68:
24:3f:b0:90:5e:36:54:99:ff:b3:56:4b:31:e8:f8:6d:12:fd:
30:00:d8:67:54:09:2f:73:da:e5:b9:05:b6:6f:7a:0e:95:b3:
0f:f1:a9:a1:bc:d9:e0:88:ac:36:0e:a3:1a:96:99:68:40:e1:
27:2b:ae:bc:2c:a8:f5:98:0c:68:67:31:fd:45:97:1a:2d:bd:
79:82:98:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:32 2025 by rpki-client