Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: 2sIbpjOl7CQhWM0WLqg2ulRZ8TRTJVlNq9jgE/sJc+c=
Subject key identifier: 5A:CB:17:6C:46:B2:4B:5E:BA:88:F0:47:35:09:08:BC:B7:05:6D:5F
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 0197469DADA01AFD9976B5BE15A2326F6EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 0BC8
Signing time: Fri 06 Jun 2025 19:00:28 +0000
Manifest this update: Fri 06 Jun 2025 19:00:28 +0000
Manifest next update: Sat 07 Jun 2025 19:00:28 +0000
Files and hashes: 1: 4jSg2ODlu3CFd6jIl7kHiP-BX_4.roa (hash: xgMqCXuymiqYkTjb0uA/T+UuFonELwxqYTVdoLkLInU=)
2: 9NbAaWTN6CWxeEqYQjGZLmOhbQQ.roa (hash: h5XO3HcLJOMuvQP0KQj1fHH4O24IzSVqKiTXw+BaXeo=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: cyegfYkgyxJ9i8M43PEODck9gVeok7dU2H/Z0Sf4xis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:ad:a0:1a:fd:99:76:b5:be:15:a2:32:6f:6e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Jun 6 19:00:28 2025 GMT
Not After : Jun 7 19:00:28 2025 GMT
Subject: CN=5acb176c46b24b5eba88f047350908bcb7056d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:27:32:1b:f9:69:fb:37:4b:97:83:bb:49:
78:9b:d9:cf:0b:8c:f2:ad:f6:75:ae:d3:38:5a:a2:
69:11:e0:98:ac:96:38:a7:18:4e:ac:c3:d5:63:5a:
e3:96:b5:e2:fa:19:53:54:7f:1a:3e:f2:24:dd:29:
24:36:32:ac:99:45:68:03:b0:6a:cd:b0:35:f0:f1:
88:7c:cd:dd:0d:be:a0:51:64:cb:34:ac:c9:ac:d1:
b2:93:21:2e:32:6e:4c:91:36:66:a7:39:fa:58:1f:
8c:5f:9e:cd:d7:7e:46:7d:23:8b:71:fc:17:0e:73:
81:ae:89:ee:3d:fd:39:08:10:89:26:96:6f:fd:8a:
2e:15:fd:e1:03:d9:ea:e0:37:b2:b9:d0:88:66:a7:
f0:4c:93:dc:79:b7:d7:45:60:14:09:00:1f:e5:49:
81:44:c2:e1:1d:c4:58:b0:fe:a9:cf:1e:a3:aa:94:
25:24:31:be:15:4d:68:3a:2a:89:c8:1f:7b:26:9b:
09:d6:6f:cf:33:b3:14:a7:50:4c:35:fd:8f:fa:20:
79:55:ed:2f:3e:c6:dd:7d:8a:b7:c6:84:d4:66:a9:
79:2d:81:ec:89:0b:78:a4:5c:95:84:9b:43:eb:c9:
6a:9b:af:f7:44:40:55:70:8a:23:41:dd:e6:e5:16:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:17:6C:46:B2:4B:5E:BA:88:F0:47:35:09:08:BC:B7:05:6D:5F
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:74:c6:e6:e1:09:09:82:0a:ae:5a:8f:b9:5d:39:de:1d:0b:
75:19:41:f9:dd:a4:f1:91:dd:3e:a2:b4:02:d6:65:36:08:bb:
4f:a9:bf:a6:9f:8d:c9:2f:12:46:48:b6:74:78:81:82:c8:12:
74:c4:a8:c3:eb:aa:e4:6b:d2:7a:b3:45:0d:8c:93:57:4b:c9:
98:96:ee:e9:84:94:19:99:9e:35:e6:2e:a3:06:ad:64:69:ca:
71:52:b2:fa:1c:ee:ce:8f:35:56:47:4c:5b:9e:48:71:6a:f4:
db:21:19:25:95:4f:ce:d5:d2:d9:da:62:98:20:db:5c:25:57:
5f:84:b8:09:ea:f9:f0:d7:25:13:8c:70:ce:c4:6d:0e:35:9a:
ec:6b:35:36:32:ff:ae:36:2a:35:0f:af:77:2b:d4:42:da:7f:
66:ba:6c:88:4c:39:99:09:1d:d2:eb:b5:27:0a:e1:95:c6:94:
1a:1b:bf:78:19:20:26:94:60:0b:e8:bd:0f:2a:0b:95:90:1f:
18:de:f5:78:fa:26:c6:b3:53:bf:cb:ab:8d:e5:31:72:45:ed:
f2:94:30:52:41:11:b1:b4:e6:a6:35:66:a8:7c:9b:6c:a4:0a:
a6:e9:e1:37:08:51:c5:c9:1e:32:a2:b5:fd:ba:9e:79:9c:a9:
c1:18:93:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:37 2025 by rpki-client