Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: da+R7dwaANu8IgiXfwpCd4CGzaQlU4ReLQN9i9PPzk0=
Subject key identifier: CB:BB:47:86:F3:94:6A:F3:1C:C9:61:6F:74:1B:A4:AC:77:B5:1B:B7
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 019739505C32173A7F553DF822D88E07D2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 0C56
Signing time: Wed 04 Jun 2025 05:00:57 +0000
Manifest this update: Wed 04 Jun 2025 05:00:57 +0000
Manifest next update: Thu 05 Jun 2025 05:00:57 +0000
Files and hashes: 1: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (hash: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=)
2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: qvBem3oYPN3Z4qzDxXSl2fF+a6IeuI2JPPgFq2AsaBA=)
3: qo2a4lO3f4INhuJwHg-a_kb1Uw0.roa (hash: Mq/0MPb+8DLoVQSsA/LmGY9yMeYe1hfS1EX+C5wkfg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:50:5c:32:17:3a:7f:55:3d:f8:22:d8:8e:07:d2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Jun 4 05:00:57 2025 GMT
Not After : Jun 5 05:00:57 2025 GMT
Subject: CN=cbbb4786f3946af31cc9616f741ba4ac77b51bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:e6:02:72:94:e9:e9:5b:04:43:51:ac:71:
15:cf:27:80:d7:4a:0c:87:94:eb:5f:b9:38:0f:09:
45:f4:7c:6c:a5:d2:65:62:43:4f:af:36:88:45:96:
3c:ff:f9:df:c8:0c:a6:78:bf:e4:65:f8:fd:53:2b:
57:b6:47:32:dd:03:23:12:fa:35:d1:f8:4a:14:47:
d5:11:5a:e5:74:6a:2c:58:51:2b:2e:11:b5:ce:22:
68:41:63:28:55:7b:31:55:85:d8:89:32:4a:a2:7b:
91:f9:58:a6:d4:fa:a2:88:75:6e:00:fe:56:dc:39:
46:c9:e2:69:6b:25:a1:ab:c0:92:84:f6:0b:3d:59:
11:27:6b:b2:9e:15:37:25:02:94:78:96:9a:24:8b:
4b:d1:94:cb:59:7a:15:d2:72:de:1e:b5:c3:9e:bb:
12:18:39:62:bc:cc:68:79:17:c9:02:89:b5:2e:ea:
8a:cc:3e:1c:ae:79:f9:77:a9:07:02:58:f0:45:8d:
90:be:e3:44:16:15:f8:69:50:10:7a:5b:06:42:80:
49:b7:d8:9a:ef:ac:c5:81:8f:2b:a0:00:95:b2:f7:
e0:f1:53:f9:ac:8e:c1:95:f1:dd:2f:b8:15:a8:6a:
16:54:73:6f:6e:be:5c:3c:ec:8d:a7:80:f0:3f:b0:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BB:47:86:F3:94:6A:F3:1C:C9:61:6F:74:1B:A4:AC:77:B5:1B:B7
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c1:ad:0e:33:c0:c3:8f:ef:c8:47:49:96:45:ae:40:de:a5:
ea:b0:d2:f3:86:66:b0:4f:b3:c0:a6:ae:ee:96:b0:c4:a0:54:
92:6d:95:73:ba:37:41:86:97:31:35:e6:6f:a1:c3:fb:92:d8:
7a:14:c5:63:e7:05:3a:38:d9:79:b0:90:f3:b9:7d:19:71:fb:
2e:2c:51:7a:60:65:07:3d:8a:08:f5:11:6a:1f:4e:ed:7e:65:
fb:6b:20:ce:94:7f:f3:76:fc:32:6e:62:1c:41:69:eb:a0:41:
2e:6c:e2:cd:50:23:e2:e0:57:c6:41:18:b0:21:47:b0:a0:da:
f8:4b:cf:16:86:41:b1:04:e5:ee:9c:b6:98:8f:af:53:74:59:
6b:f5:6b:86:b3:cc:3b:f0:2d:74:42:b3:59:b0:2e:03:95:15:
9d:15:d5:b1:ca:c4:b1:4a:45:6b:18:21:da:d4:77:c2:f6:c6:
db:57:eb:06:61:f3:e1:94:82:09:62:de:8d:2d:e1:ac:16:4a:
71:4f:8c:03:6e:77:a7:1a:56:bc:28:9f:1b:5f:90:30:07:87:
56:5d:9f:38:68:70:61:9e:fb:47:9e:9b:5e:19:7c:0d:b9:0a:
58:de:a9:da:4d:e3:41:45:d8:c5:aa:99:98:02:f3:1f:f6:a4:
41:2f:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:04:38 2025 by rpki-client