Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File: piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier: YCnhgbmGIBbfm74hcwion2Bo4Z3mRZCk4RZvhxn0mXo=
Subject key identifier: 62:02:64:16:85:C8:DF:B8:97:1E:51:BF:77:B4:08:57:87:04:25:B9
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 01974A7B10E0CF2CB1C6D6FAFE9DB5D19CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number: 09C0
Signing time: Sat 07 Jun 2025 13:01:08 +0000
Manifest this update: Sat 07 Jun 2025 13:01:08 +0000
Manifest next update: Sun 08 Jun 2025 13:01:08 +0000
Files and hashes: 1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=)
2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=)
3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: 16ol3WICAF8IOFwWipZJilGhN3VKUvr+KUfkNUKRk5Y=)
4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:10:e0:cf:2c:b1:c6:d6:fa:fe:9d:b5:d1:9c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Jun 7 13:01:08 2025 GMT
Not After : Jun 8 13:01:08 2025 GMT
Subject: CN=6202641685c8dfb8971e51bf77b40857870425b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:44:84:b9:94:99:4d:47:d6:83:52:2c:d9:
81:97:61:b1:fc:fa:07:6f:99:72:bd:f2:0b:d7:94:
af:16:e8:e1:68:7c:4b:74:cc:97:fa:45:05:8c:bd:
73:f3:4e:95:c5:b4:d1:1e:40:bd:da:23:89:3d:60:
b7:68:aa:3f:36:56:3f:b9:72:37:13:23:b9:7d:9c:
0a:33:ef:12:ac:62:f8:3f:bf:0f:14:02:c3:0e:90:
b1:05:00:bd:d7:dd:16:34:ff:57:b9:f9:c5:8a:18:
24:2c:bf:2b:2a:ab:ab:51:74:a4:2e:c8:af:13:55:
b3:a7:09:7b:ae:7f:4f:d9:ae:8a:c9:43:82:5f:47:
aa:60:e2:ff:98:c4:d9:7f:13:fa:a2:55:9b:7b:2a:
0f:cd:9c:6b:67:a1:8d:a1:a3:1f:84:ee:63:40:70:
c8:2a:50:d4:e5:6f:01:d7:88:02:77:33:91:38:fc:
52:c8:ca:7b:74:73:3a:15:cb:ac:7e:15:e6:9c:55:
0d:0b:3e:fd:a9:83:d4:e0:9c:7a:e8:d3:35:b0:e2:
84:3a:29:6d:f1:56:e8:45:43:93:a7:8f:d7:19:10:
83:24:92:1e:66:1c:88:70:15:5e:25:13:8e:56:0e:
7b:0c:0f:46:3d:57:f5:d0:4b:67:1e:50:e6:15:47:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:02:64:16:85:C8:DF:B8:97:1E:51:BF:77:B4:08:57:87:04:25:B9
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:3d:fb:de:a2:19:86:ac:a2:74:7e:07:b4:06:55:1e:8b:1a:
3c:7f:e9:a4:ef:1a:4a:40:3a:d5:93:89:b8:95:6b:51:f1:c8:
83:bc:a7:56:39:85:86:f8:88:c2:e8:30:46:1d:96:20:8d:89:
57:d5:96:4e:4b:66:71:e5:02:a7:ba:36:15:b9:22:95:cc:39:
2c:ef:c8:e7:47:dd:6d:05:31:62:6c:f2:3e:05:2f:cf:e9:7e:
37:b3:9f:72:06:49:8b:18:49:e3:ba:12:b7:08:bb:c2:0e:34:
6d:28:8b:bf:36:13:99:4a:df:88:58:8f:5a:2d:c8:bd:ec:52:
cb:be:4d:ca:f4:9c:78:db:6b:4b:24:07:85:d8:61:bf:19:e0:
f3:51:f9:e0:46:cb:98:20:aa:ec:fb:aa:46:68:54:ec:e2:9f:
90:14:ab:d4:5a:7f:01:76:b4:c1:35:f0:e1:09:51:fb:82:f8:
07:da:a8:5d:2e:d8:a5:a9:5d:0e:64:be:e8:34:5b:de:e9:80:
84:5a:3d:d5:b8:66:5f:f3:bf:12:9c:f0:2a:93:a7:49:50:14:
cc:17:4b:a6:21:d5:5d:73:b1:d8:90:12:b4:61:85:37:c4:53:
3a:56:51:d5:06:2a:5c:9f:a5:b3:f2:24:34:55:b1:24:ce:af:
eb:74:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:30 2025 by rpki-client