Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json)
Hash identifier: ud3BqsZ2VcSBloD3w4s2gU16zB5/I99T1uQt37KLmo8=
Subject key identifier: DE:BA:C8:79:DC:99:D9:D1:49:CD:49:BF:A2:C7:94:61:F0:D8:4E:B8
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial: 019750465DCC550384FFF09BD720A1CE98E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
Manifest number: 0DFD
Signing time: Sun 08 Jun 2025 16:01:18 +0000
Manifest this update: Sun 08 Jun 2025 16:01:18 +0000
Manifest next update: Mon 09 Jun 2025 16:01:18 +0000
Files and hashes: 1: PUpMBlY3y3LiEyvtN3mwZr7fC6o.roa (hash: 83wzwEaj6Lu4SVxQ13wsJpRArhNJgziukBIbApzP3jM=)
2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: IMEjcU9qds/7x2B0/PwTbswL+P739aTIMtLCwBTFhZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:5d:cc:55:03:84:ff:f0:9b:d7:20:a1:ce:98:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Validity
Not Before: Jun 8 16:01:18 2025 GMT
Not After : Jun 9 16:01:18 2025 GMT
Subject: CN=debac879dc99d9d149cd49bfa2c79461f0d84eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:28:37:b4:c5:b7:5b:31:46:70:e8:85:ab:86:
ff:76:a2:a2:d1:75:cd:eb:e8:f1:ef:06:48:a4:c6:
fb:3e:62:a4:29:8f:e7:0c:88:a4:84:59:b8:53:b9:
01:a4:34:e7:cc:61:f3:d6:94:9b:e8:eb:e0:8c:de:
2b:99:35:fe:6e:60:e0:6b:f3:4f:27:54:67:d0:7a:
9f:cf:bf:8b:41:50:82:7e:ff:b9:82:77:ce:c5:47:
3c:79:4a:cf:f6:9f:ae:f5:2e:72:0b:73:8c:7c:73:
21:93:91:e0:a6:2c:24:fc:2b:d4:8b:ae:36:a1:cd:
d2:23:08:e3:64:80:9e:b5:bd:a3:d2:6b:24:3b:88:
d2:92:0c:da:fa:d8:4e:48:e0:ac:4d:6d:28:36:7a:
c4:14:80:44:e8:01:2a:67:e7:b9:fd:7f:a1:1b:27:
54:2f:72:36:0a:8b:82:e1:14:3d:19:06:69:5d:da:
c5:c5:9e:08:aa:2d:ca:57:ce:bd:d8:db:9d:a0:96:
ba:c7:c9:c0:1e:85:a8:71:e8:f4:86:14:24:df:8d:
34:e1:6a:69:07:97:3b:ce:55:88:b9:a7:6a:c8:4e:
b8:6f:df:55:ee:5e:63:2e:c6:b0:94:27:b6:97:d9:
55:c0:a5:2d:a0:9e:4a:ce:3a:4d:9d:d8:53:43:7b:
f2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:C8:79:DC:99:D9:D1:49:CD:49:BF:A2:C7:94:61:F0:D8:4E:B8
X509v3 Authority Key Identifier:
keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a0:5c:d1:90:3f:0a:c5:96:93:d3:06:15:57:bf:56:5b:54:
40:83:49:08:43:de:09:0f:d2:75:ef:78:63:3e:48:60:64:71:
88:54:21:d7:6b:c0:2b:5f:7d:2f:77:37:a3:72:d6:0f:50:7f:
4d:a4:66:2e:10:91:af:96:7b:e4:f6:51:01:17:b6:d8:7f:b6:
70:5c:38:08:5f:46:b4:59:e7:27:19:b1:ba:19:73:d1:3d:33:
37:8a:5e:22:49:cc:8f:04:1f:28:ba:1b:12:57:18:8d:b5:11:
ab:30:18:6b:9b:57:eb:95:97:e9:fc:b1:32:07:eb:20:a8:13:
76:cd:4b:75:1b:b6:99:1a:81:74:da:48:e9:39:ac:55:ea:ef:
17:ec:1a:fd:e0:ac:44:e5:9b:83:9c:eb:9c:ce:37:04:9d:a0:
d3:82:10:c2:c8:cb:09:28:15:37:fd:5f:46:2b:cc:2a:f2:f6:
eb:55:9f:e2:f8:a1:fa:f3:f7:30:e2:a1:20:2d:c4:3d:cc:f2:
ef:80:83:cf:cc:6d:4a:5d:33:28:f1:41:50:86:f1:ca:7c:35:
f1:88:84:a3:ea:69:ad:b4:bb:b8:a5:6e:13:7a:90:8f:53:13:
6a:54:d5:30:ac:ae:02:dc:e7:2b:48:8e:69:9c:c2:f3:82:1f:
b0:77:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:30:13 2025 by rpki-client