Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier: hafnvv0WHVF+jel/n6dlnWDy+e9H6MxZEi7ikzID5iY=
Subject key identifier: 80:46:A9:F8:3A:D5:6A:20:C8:60:8D:39:8F:6A:31:69:2D:1F:5E:A2
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial: 01974779CE9BD5D1C8F0E28D32461308D081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number: 121D
Signing time: Fri 06 Jun 2025 23:00:54 +0000
Manifest this update: Fri 06 Jun 2025 23:00:54 +0000
Manifest next update: Sat 07 Jun 2025 23:00:54 +0000
Files and hashes: 1: Hp2ljcULzg53pBCXbKt3KAlFkVw.roa (hash: qsDz5TZedLiWJnxlNWk1Ko36qqmg6+ybGLmJSNA11KU=)
2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: wwdnY9T/v6ODjoYnUwOc17W7VJMs68qi0C7ciqyXHIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:ce:9b:d5:d1:c8:f0:e2:8d:32:46:13:08:d0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Validity
Not Before: Jun 6 23:00:54 2025 GMT
Not After : Jun 7 23:00:54 2025 GMT
Subject: CN=8046a9f83ad56a20c8608d398f6a31692d1f5ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:8c:06:15:9b:21:ff:c5:6c:79:df:57:fc:
d0:47:a0:f6:6b:18:ff:17:d8:fb:71:92:d2:d1:34:
70:af:b5:e3:30:84:2a:f7:a5:7c:01:79:16:7c:22:
5e:84:e0:71:de:18:7f:f6:67:1e:f8:2f:8b:47:c6:
17:a0:2e:be:36:90:ec:e8:bd:14:f1:6b:e9:1f:93:
59:f1:42:5b:26:98:0e:e5:bc:67:ff:2f:a7:0b:ca:
bb:2e:58:90:f9:41:21:55:b4:a7:15:b5:f9:b9:9e:
1a:85:69:b7:3e:14:bc:ed:b3:3b:99:39:31:cf:2a:
de:8f:b3:16:d4:14:44:dc:a5:a3:fe:a0:d3:d5:fb:
75:73:c4:51:4d:12:66:8f:36:cb:b1:ab:68:71:90:
b4:6b:54:d3:84:89:04:0f:2e:45:06:f4:c7:b4:66:
1a:e8:5b:45:19:5a:58:f3:2c:31:bf:ee:bf:da:26:
28:c5:70:25:d6:0a:00:04:2c:6d:d6:29:13:37:a6:
95:f0:ec:28:da:bf:6d:c0:a2:c2:07:b8:f7:44:08:
90:48:9c:4c:ce:1f:7d:4b:75:16:af:54:87:c1:16:
d5:4c:9d:a4:95:55:cf:da:3c:d3:68:5e:d1:9e:87:
ea:4a:b1:21:21:ce:0c:fb:24:11:e4:72:c6:3c:df:
aa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:A9:F8:3A:D5:6A:20:C8:60:8D:39:8F:6A:31:69:2D:1F:5E:A2
X509v3 Authority Key Identifier:
keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2b:2c:4b:1d:9f:f0:c2:0a:63:ab:9b:ad:1a:a7:c9:50:16:
9b:8e:b9:9b:f1:e1:53:22:e6:25:b8:8f:8f:38:e4:f5:80:3c:
a3:98:1a:b6:c9:db:2a:52:61:6a:86:70:78:ae:9f:0c:2a:4c:
4c:d9:f7:0a:3a:5e:f4:f8:bf:c8:b1:13:9d:84:9a:8c:7f:fd:
ba:dd:67:7c:e0:ab:22:f2:e4:76:ed:03:d7:18:2f:f0:62:f8:
66:42:62:00:e1:3e:14:75:3e:1e:eb:58:8c:9f:63:cd:5a:ff:
55:eb:09:35:93:e6:7a:6a:09:ba:8e:98:5b:10:89:4e:75:42:
da:fa:0d:db:85:52:08:65:5a:b2:58:8a:cc:38:93:b2:35:96:
2f:4c:c6:36:50:16:e4:6a:26:80:72:ad:ae:e7:de:f4:da:d1:
10:27:3d:03:7e:ed:92:16:7d:77:88:7e:3a:a2:b0:cb:13:3b:
6e:65:f4:56:15:8b:57:9e:72:7a:5e:fa:d9:27:26:ed:39:2e:
84:cc:c9:c1:e5:41:f6:fa:05:d1:4b:c6:dd:50:34:f8:48:24:
8f:22:66:a4:2e:4d:90:b0:bc:4c:32:03:74:41:d7:e8:c2:48:
45:14:48:2d:8c:a6:d2:0a:09:30:b4:c2:95:2e:86:5b:6b:aa:
a8:94:7f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:15 2025 by rpki-client