Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: IKFpiDmfto6lfP9gtTghtZDk7G5VznAeEC6Aa2ijBhI=
Subject key identifier: B2:E8:62:A5:0D:38:CA:C3:9B:04:63:2C:F0:CE:C1:B7:D6:1B:33:C6
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 01975C133EC6A1E8C2EC665FEE2BCC9C72E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 0301
Signing time: Tue 10 Jun 2025 23:00:54 +0000
Manifest this update: Tue 10 Jun 2025 23:00:54 +0000
Manifest next update: Wed 11 Jun 2025 23:00:54 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: 5sSK2WYBy6+fTvS2BO3UAjkBMU+dJOhbsNY0xeyLi48=)
2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:3e:c6:a1:e8:c2:ec:66:5f:ee:2b:cc:9c:72:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Jun 10 23:00:54 2025 GMT
Not After : Jun 11 23:00:54 2025 GMT
Subject: CN=b2e862a50d38cac39b04632cf0cec1b7d61b33c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:50:34:b0:65:aa:bc:8e:51:94:ce:c6:f5:
08:5f:14:fd:b0:b8:d5:23:d5:f5:3a:c3:c4:b0:e1:
67:db:03:11:08:6f:ca:90:b1:c6:ef:d1:22:c2:a0:
a6:69:3f:a9:46:91:73:47:90:dd:f7:ca:df:61:54:
5b:54:e3:85:e4:44:d0:8e:03:f1:db:11:81:fc:dc:
8d:5a:e4:e7:4d:38:26:f6:f9:a2:dd:5a:66:e2:41:
37:c1:f6:08:80:7b:47:31:ea:c2:a8:f3:a4:6c:2e:
54:ac:e7:86:e5:a0:a0:80:f1:62:aa:6b:8d:ee:1d:
14:e8:07:2f:4a:10:f0:8b:e9:6a:7a:15:a1:cb:e0:
3a:e4:9d:1a:ab:65:0c:e9:2a:87:75:cf:a8:ab:28:
1a:1d:f8:6d:ff:5a:e6:b9:21:74:fc:34:ff:c5:eb:
35:c1:fd:99:ed:26:8a:09:86:f8:76:28:eb:fd:d3:
e4:70:72:d2:6e:96:57:f0:48:c6:ab:c5:97:a1:42:
49:c8:42:49:ea:67:01:7e:f9:16:6e:93:da:5c:64:
d5:a5:e2:c4:a1:4c:a6:7c:ff:39:cf:44:75:b1:b1:
4f:c1:b9:f6:c2:5a:78:41:7b:90:dc:85:6c:df:d4:
8a:f3:7b:11:e0:8e:be:91:12:40:d3:f1:ca:82:0d:
81:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E8:62:A5:0D:38:CA:C3:9B:04:63:2C:F0:CE:C1:B7:D6:1B:33:C6
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:da:ef:bd:b1:b4:58:89:50:cd:58:13:fa:5b:4d:0a:63:3f:
18:c5:f7:62:3d:ad:f8:05:e8:53:2d:8a:d5:ad:a7:59:e1:da:
99:92:34:59:08:94:8d:cd:e8:60:66:76:7e:5f:58:3b:32:80:
56:79:21:a5:21:11:ac:16:7f:d8:80:80:69:b7:f1:ef:2f:e0:
c1:8c:2f:67:19:0c:f9:88:e9:d3:f9:07:28:0c:75:32:6f:65:
c7:93:9f:5e:f3:d9:6f:2d:c2:57:6b:64:c2:62:35:72:9a:6d:
10:57:47:3f:59:e1:c9:cb:2e:38:bc:fa:2a:2c:50:c4:44:62:
60:a5:a2:92:14:fc:9d:8b:1d:cf:28:39:38:92:9c:89:9e:35:
c7:25:9a:2e:3f:55:8e:d6:2b:22:b1:87:1e:d6:99:8f:65:49:
68:a0:c6:e1:3e:d3:bb:06:a3:fb:d0:26:b1:72:f3:eb:67:ce:
24:72:5a:1d:1f:5b:67:c5:8a:b3:00:30:c9:d1:68:ea:61:3d:
2c:97:fa:90:d1:1b:71:ff:3f:82:d4:33:f0:d5:24:b9:6e:06:
3c:14:c0:0d:fc:c0:eb:33:36:0a:7d:10:46:0e:da:b6:7b:5e:
df:f9:b8:a4:13:0e:5b:ff:a4:62:ab:af:3a:f5:7d:52:36:e5:
48:75:dc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:49:54 2025 by rpki-client