Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
File: pVB1uOQuRRTvSdP-ovGHJk50-y4.mft (raw, json)
Hash identifier: OP9cyE908AV3QSiZhcw2fzat4lfnQ/oIYDpCefBDeQQ=
Subject key identifier: 0D:BB:E3:AF:3C:E3:01:11:00:B6:68:94:B9:1D:85:03:3A:EF:4D:32
Authority key identifier: A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
Certificate issuer: /CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Certificate serial: 0197493185710065BA857DA8BD7C4A773947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
Manifest number: 0217
Signing time: Sat 07 Jun 2025 07:01:11 +0000
Manifest this update: Sat 07 Jun 2025 07:01:11 +0000
Manifest next update: Sun 08 Jun 2025 07:01:11 +0000
Files and hashes: 1: AHyerdr5uxL6xuyGfsHFNBv_XjU.roa (hash: /uUPID3475V6+DCQHcFaqhePNwogod/B8RgCIUOzHrI=)
2: pVB1uOQuRRTvSdP-ovGHJk50-y4.crl (hash: nyFcknVAu6EgK4mn/geWN8WcU2iEqmEX2i5TzjNBmBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:85:71:00:65:ba:85:7d:a8:bd:7c:4a:77:39:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Validity
Not Before: Jun 7 07:01:11 2025 GMT
Not After : Jun 8 07:01:11 2025 GMT
Subject: CN=0dbbe3af3ce3011100b66894b91d85033aef4d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:e6:4d:9b:04:87:ef:93:7c:92:d7:48:39:
bd:f6:bd:61:f6:a6:f2:35:f3:9d:b6:d4:aa:c9:41:
6e:9c:ec:fd:4f:8b:4a:a4:91:bb:5d:ca:3d:7f:d9:
72:b5:ef:20:41:c7:9d:91:fc:e9:db:32:79:43:d4:
1d:ea:15:d4:3b:5f:71:90:7e:24:89:71:e0:cd:25:
54:eb:b1:3e:ef:96:4b:de:66:b0:15:50:66:48:02:
db:0d:1c:10:7d:b0:15:7b:3b:26:b3:0f:c3:47:52:
e8:1a:9e:10:cc:36:c8:bd:52:16:02:40:20:af:07:
2a:ad:61:0a:8a:e7:f8:49:92:30:be:38:0f:04:a6:
31:23:7e:5e:1a:14:04:c5:37:99:ee:cd:d2:f8:67:
2f:64:a0:6a:3f:9a:c5:7d:93:53:f9:c3:a2:4b:06:
f1:cb:a6:a4:76:47:84:99:dc:eb:d8:1a:e5:3a:f8:
cf:10:3c:4a:82:94:7c:54:ab:f1:28:57:67:97:5d:
75:dd:08:c2:6b:f7:9c:5b:3a:ba:50:9c:42:14:c2:
ae:3e:8e:b6:c8:46:e9:01:d8:7d:62:73:0c:39:d7:
25:5f:7c:05:c6:e9:3d:ae:55:b8:75:48:a3:49:9d:
35:09:1c:e5:21:ec:71:3d:1b:4a:25:75:af:56:c6:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BB:E3:AF:3C:E3:01:11:00:B6:68:94:B9:1D:85:03:3A:EF:4D:32
X509v3 Authority Key Identifier:
keyid:A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2e:74:42:2b:ee:bc:b5:28:02:e5:51:57:9a:89:4e:cf:dd:
36:58:1f:ae:17:0e:64:6d:a2:7a:ae:67:f7:80:34:3c:6e:a3:
cc:46:b6:e2:a9:f6:eb:fc:34:67:0e:04:75:8f:e9:cc:b1:e5:
16:31:a1:74:c0:99:20:2d:6e:a9:f8:46:7d:04:14:7b:69:a3:
bb:ed:56:5b:67:2c:1a:c3:8d:e1:89:34:45:8c:e6:7f:35:33:
a5:aa:23:67:80:4b:fd:70:3f:b8:80:68:a2:f4:af:fd:b2:0a:
41:d1:de:bd:69:a2:eb:d1:9a:2b:5e:69:44:27:b3:30:ea:e9:
89:d0:82:a7:43:63:2f:26:d9:db:88:94:ff:a5:d8:22:a2:fc:
d7:ac:29:0a:65:0b:a1:36:eb:9d:ea:77:67:cc:29:4c:11:b8:
f4:c4:e9:33:ec:99:94:72:70:9c:92:a4:b5:52:d4:8d:08:af:
f9:03:55:b4:5e:56:e0:86:e9:12:df:93:c1:9b:1d:e1:e7:f6:
4c:9d:36:ca:1a:40:44:e5:ec:55:a1:a0:85:f9:45:fc:94:c8:
fc:d0:63:7a:39:16:81:69:11:af:86:58:37:ca:bf:e5:2b:c3:
b8:36:bb:0f:ad:04:79:e5:36:e0:30:57:ee:9d:8f:22:25:d7:
5e:a2:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:35:57 2025 by rpki-client