Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: mIUVqMYl08e9NVGNZFGKKmcfdTj4H68UL5Ei/kG1beE=
Subject key identifier: DE:86:29:C7:A0:22:73:ED:F8:5B:7F:AF:E1:19:63:B6:1C:27:13:17
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 01975A24CEFDCE6F96179EA5CB946CFCB7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 0300
Signing time: Tue 10 Jun 2025 14:00:51 +0000
Manifest this update: Tue 10 Jun 2025 14:00:51 +0000
Manifest next update: Wed 11 Jun 2025 14:00:51 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: /M3Laz9t0uAfry4kEBG10Dg0S5IjwkiIU3IjqfVYnJA=)
2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:ce:fd:ce:6f:96:17:9e:a5:cb:94:6c:fc:b7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Jun 10 14:00:51 2025 GMT
Not After : Jun 11 14:00:51 2025 GMT
Subject: CN=de8629c7a02273edf85b7fafe11963b61c271317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:ed:a9:1c:cf:ad:53:67:a4:03:b0:c6:31:
9d:66:00:17:ef:a1:b4:ec:14:4f:5a:0c:63:db:64:
4f:f5:2b:60:76:9c:b2:35:68:b9:5c:f8:46:35:eb:
48:c7:38:c3:c4:da:88:05:85:0e:19:df:17:b3:1f:
b4:9d:db:7b:6e:8e:1e:59:44:bc:df:73:32:31:8c:
f9:c4:fe:c7:b3:3f:d6:b8:ba:55:19:e3:16:e9:8c:
7d:95:51:fd:17:62:9d:10:59:ed:26:5e:6f:72:4e:
06:38:08:d3:06:79:91:70:63:0a:62:d8:27:a4:0e:
18:fd:9e:35:de:65:93:92:d5:ae:19:0e:f7:48:95:
fe:fc:57:52:0a:17:82:af:13:b2:4e:34:84:bc:d3:
4f:dd:64:2e:e3:33:47:79:86:8e:d7:f6:b7:1f:41:
3d:20:45:22:a4:db:54:ed:ff:cf:c7:1e:6d:11:f1:
d7:d2:05:b8:93:bd:5e:58:75:8e:9d:3d:d3:b0:99:
4a:eb:fc:2d:bd:af:a9:72:60:9b:a5:6d:02:16:5a:
97:14:20:32:a3:6d:76:af:ea:c8:4c:8a:a7:95:6b:
21:0c:04:2b:cb:13:08:73:49:b0:0d:af:eb:45:37:
34:cb:8d:59:4a:e0:15:50:0f:e4:49:96:11:cd:f7:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:86:29:C7:A0:22:73:ED:F8:5B:7F:AF:E1:19:63:B6:1C:27:13:17
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:97:7d:87:22:49:a6:ae:3b:de:3a:41:ba:60:13:d0:d2:80:
17:75:9b:56:98:f5:c0:4a:9b:25:2b:f5:2f:e6:2a:d7:be:9e:
b9:21:d7:ec:6f:87:49:ce:5c:2a:8e:b2:ac:d5:9d:00:e9:40:
78:1f:9b:51:a0:a4:80:e1:ed:20:85:c5:40:8a:82:96:6c:40:
81:6d:91:fd:2f:4d:1c:12:64:f0:98:01:77:93:e2:12:2c:b4:
aa:46:33:80:88:db:79:99:89:63:c4:26:c9:55:f7:ef:9a:11:
47:ff:82:a3:bb:4c:51:6c:ce:26:bc:72:d9:96:39:5c:4d:cb:
53:b4:f8:9e:db:1d:40:0e:0b:e2:e3:49:6b:5c:ce:e9:0d:89:
69:e7:ad:8a:10:4b:2c:4e:22:fe:23:96:8b:bd:d2:ad:08:f6:
b5:3e:1c:40:b6:64:56:3b:e3:01:f8:45:30:f2:bf:bd:f1:52:
50:8d:b2:6c:1c:45:52:e3:80:1d:f0:5f:29:92:e6:86:e3:ef:
b1:62:da:bb:e6:2d:29:38:2a:a4:e4:31:61:ad:25:62:c8:77:
7c:e3:d1:37:f3:6a:9e:b2:a8:ec:8a:8d:bb:ec:d0:e7:43:57:
ed:33:b7:2f:ce:d5:65:85:07:ab:0b:5a:f1:6d:b7:ed:7e:63:
5e:8f:57:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:36:48 2025 by rpki-client