Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
File: pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json)
Hash identifier: lXyakOLhk+JY6k9evezzsRNKpOve3vS5kerrhJBvswM=
Subject key identifier: 1A:A3:2D:DD:D7:1A:1D:C2:AA:61:64:4F:5E:93:83:5E:BF:32:63:C1
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Certificate issuer: /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial: 0197481E1CD09A5D5FBF15A3630A60002AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 02:00:22 +0000
Manifest this update: Sat 07 Jun 2025 02:00:22 +0000
Manifest next update: Sun 08 Jun 2025 02:00:22 +0000
Files and hashes: 1: 3slyfZXxVcWO-rhXLBn1z60ShoQ.roa (hash: aD+13qB77l1eWjcaYEDaoeBPF19MIy6v6JQPzBT88zc=)
2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: DUUhfnPR6tgC1Efb5hUNx+tR6MwZcUDJa+D2wfR++ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:1c:d0:9a:5d:5f:bf:15:a3:63:0a:60:00:2a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Validity
Not Before: Jun 7 02:00:22 2025 GMT
Not After : Jun 8 02:00:22 2025 GMT
Subject: CN=1aa32dddd71a1dc2aa61644f5e93835ebf3263c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:46:20:bf:4d:c9:2e:1d:e2:81:35:6b:0b:26:
33:28:41:88:53:e8:eb:15:8f:bf:7d:05:12:0b:6b:
00:1c:a1:0d:9d:e9:1b:7f:ab:5b:d1:9e:00:df:ee:
2f:4f:cb:9d:86:f7:57:75:00:02:d5:7b:c5:23:14:
f4:10:8d:3f:00:2b:04:54:d2:21:6b:c0:d6:d3:77:
37:95:ac:ec:34:69:9f:b9:2a:c2:19:c5:d1:bd:6c:
4e:28:8f:5c:58:93:3f:3d:34:81:bb:e4:d9:5d:bb:
4e:57:f7:e3:ed:f7:44:47:68:a6:a9:41:71:ee:32:
e7:78:e0:bd:cb:9d:13:45:d9:e0:ed:b5:87:79:42:
eb:6b:86:c0:1f:85:48:b1:6b:a4:1e:39:27:6b:cc:
36:c1:a9:58:cd:68:4b:31:64:68:3d:e9:59:1c:d0:
a3:d2:53:e1:fd:04:87:6b:9e:03:92:14:f0:da:59:
6d:05:ee:35:cb:82:6c:22:d4:db:2c:35:fd:d5:6e:
5c:08:a6:ad:aa:ad:42:5e:df:1e:7a:e2:9f:07:8f:
1f:7b:9f:70:81:18:28:1b:26:67:43:6d:b6:ed:8d:
9b:64:69:bb:f9:70:ae:03:e2:c2:35:d5:c3:28:7e:
45:9f:48:2e:21:6f:c2:c8:f1:26:8d:3f:93:2e:5e:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:2D:DD:D7:1A:1D:C2:AA:61:64:4F:5E:93:83:5E:BF:32:63:C1
X509v3 Authority Key Identifier:
keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d8:5c:ad:b4:da:f6:9a:a6:29:ac:c9:7d:70:f7:82:d8:59:
31:f6:03:cd:b3:ee:de:b6:6e:83:10:87:0d:d2:6e:e3:4b:23:
94:d0:00:b7:b3:29:f7:a4:9c:94:90:14:60:dc:d9:d3:86:8e:
50:27:16:d6:d5:4b:e2:29:a7:5c:17:25:2c:51:ef:04:8f:dc:
98:73:f9:71:fc:f6:7f:f7:dc:8f:e4:56:4f:da:14:54:77:73:
e1:2d:42:73:ac:4a:1b:d4:c1:0c:70:3f:a7:78:84:2d:03:3d:
5d:e0:c5:c6:fc:49:9b:e4:51:97:d3:cc:ba:cd:ec:c5:20:f8:
47:9f:2e:5e:aa:18:c5:52:55:03:b2:81:d9:ad:3d:82:3f:f8:
da:68:a3:e5:6a:aa:1b:68:7c:d8:05:ef:3f:44:ef:da:c6:fc:
8c:45:c9:06:be:33:60:0e:3b:5a:a9:07:fe:f3:be:2d:4f:35:
c3:4e:c8:6d:a0:9e:f4:74:6b:4c:84:19:f7:f1:7c:ef:fa:47:
2a:ce:fb:06:8f:bb:6f:f8:52:af:41:42:5e:8b:d8:3a:3a:c0:
58:ed:ff:ac:33:0d:01:4a:b0:2a:4f:ce:9d:f2:49:ef:22:14:
7b:d5:2e:37:71:bb:7f:5f:6b:b7:32:ab:4a:04:1e:3d:d7:25:
2a:1d:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:48 2025 by rpki-client