Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: feXS7BD8RIuXDni6v1lELnMokCAvoHQWtzYkoPBccd8=
Subject key identifier: 8F:5B:A8:EA:C1:F4:80:99:10:23:0E:F1:4E:0B:99:F3:55:84:85:C1
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 01974C9FEFBA430AB368F1FA7C0F1D7FD97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0C13
Signing time: Sat 07 Jun 2025 23:00:39 +0000
Manifest this update: Sat 07 Jun 2025 23:00:39 +0000
Manifest next update: Sun 08 Jun 2025 23:00:39 +0000
Files and hashes: 1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: YjUALWZ60ZcLoqR/NL6IhvI3a8gz2U2SsnFYBkrxWgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:ef:ba:43:0a:b3:68:f1:fa:7c:0f:1d:7f:d9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Jun 7 23:00:39 2025 GMT
Not After : Jun 8 23:00:39 2025 GMT
Subject: CN=8f5ba8eac1f4809910230ef14e0b99f3558485c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b9:c2:f9:ad:c2:a1:a1:fc:98:34:c0:c2:a4:
8f:4e:26:91:f4:72:7c:45:dc:d9:6d:00:6d:80:f4:
01:d1:84:27:31:55:ce:05:99:e5:02:00:97:ab:4a:
c9:85:f0:5d:f4:f2:10:50:45:c4:d0:d6:ba:1e:79:
34:ac:f0:8a:fb:fd:2d:7b:62:a5:37:c8:83:d9:bf:
fc:e5:19:0e:c0:2e:c9:ae:97:43:85:62:45:93:01:
7f:85:49:0f:aa:3a:87:82:85:64:b1:bf:e0:e3:84:
f2:38:8f:92:1a:63:70:78:14:ba:f0:9a:9a:d1:7e:
e1:16:62:ec:63:2a:ea:0c:fd:72:b7:ae:51:50:63:
6d:4f:67:d0:64:94:40:18:b9:cf:df:d3:f1:67:cf:
b4:d4:4a:4e:5d:00:eb:a0:d3:c7:d8:19:c3:9d:d3:
7d:e4:89:0b:30:d3:d9:cb:e1:0e:56:0c:82:1a:9d:
28:94:fa:a3:2b:73:2f:32:55:c0:92:a9:c3:cb:3d:
b9:5e:fa:cf:58:6e:f8:47:e8:fe:85:d9:4c:86:32:
5b:51:e0:8e:5b:b7:37:37:04:95:68:17:33:d1:54:
48:d9:ea:b0:86:f6:c3:ce:e6:a1:24:65:08:ba:c2:
64:45:5b:0f:1a:5c:6b:85:12:e0:1d:9b:9b:86:16:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5B:A8:EA:C1:F4:80:99:10:23:0E:F1:4E:0B:99:F3:55:84:85:C1
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f0:aa:5b:d6:dd:63:c2:d8:31:6f:d2:65:7b:e0:4d:f7:e9:
4a:21:2b:05:33:12:34:c2:64:b7:84:3b:71:e9:ec:86:02:cd:
8f:f9:d6:2e:23:e9:8d:d9:40:3f:a9:20:c5:2e:74:45:3c:8b:
94:45:2f:fd:a3:ba:18:89:e5:c8:c8:ef:6a:00:82:ed:f9:c8:
fa:40:97:d5:a5:6a:eb:b8:99:33:92:5f:fa:5d:ab:e9:07:33:
6c:2f:63:20:49:e3:93:f2:a9:44:86:1e:45:b9:8d:0c:81:00:
9a:94:6e:99:ab:1b:30:70:06:0b:41:0c:81:c1:b3:0b:17:b8:
a4:84:3b:a4:cb:35:f6:66:d1:2e:5b:91:de:2c:15:7e:fe:63:
9b:1d:df:1b:69:ae:1c:23:19:c4:b3:1c:14:36:c8:a6:12:92:
11:49:79:32:95:73:6f:73:a4:68:05:56:2c:f7:56:8e:40:0f:
70:9b:4b:5b:b0:29:5e:c8:0a:68:6a:3e:83:7e:a0:db:14:d2:
4b:4c:0a:11:22:26:9f:aa:42:78:46:14:2a:82:9b:70:7a:22:
34:ab:2c:38:d1:77:d3:ec:b4:0c:3f:68:24:6c:51:1d:c0:f9:
6d:e0:f6:47:32:67:de:50:ff:22:35:53:d4:b1:e4:a5:24:45:
f3:9c:91:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:01 2025 by rpki-client