Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: cLkLQUFhnJLI4esCrO4HmALFcMd/y/WqFckwqQNpvj4=
Subject key identifier: 25:0D:8B:CE:2B:A3:68:F0:34:35:02:A8:1C:BB:08:33:52:4A:C4:CC
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 019745F92FD0251D7DC140561618EBCD8232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0A5C
Signing time: Fri 06 Jun 2025 16:00:47 +0000
Manifest this update: Fri 06 Jun 2025 16:00:47 +0000
Manifest next update: Sat 07 Jun 2025 16:00:47 +0000
Files and hashes: 1: XKCgbBOF2hVHKDo78niiU6jULHg.roa (hash: QEaRFAJhUUsQeo4vGH+Fx3VQmk/EsBaPpLYF/MqkgOs=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: 2dhaPajea5IGsADVmb0DCluhhGir7667htSnd/l9vYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:2f:d0:25:1d:7d:c1:40:56:16:18:eb:cd:82:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Jun 6 16:00:47 2025 GMT
Not After : Jun 7 16:00:47 2025 GMT
Subject: CN=250d8bce2ba368f0343502a81cbb0833524ac4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:e4:c2:72:89:f1:03:ee:7b:a9:75:6e:ce:
e7:1b:13:c0:d6:fd:56:1a:94:17:90:b0:be:38:9b:
79:58:bf:a2:62:f2:06:80:e1:f9:96:48:5e:66:ce:
c8:1b:66:6e:e4:84:6f:35:5a:a4:cf:3b:ae:0f:23:
f5:ee:d6:41:ac:9c:71:e6:93:25:e7:fc:a1:d9:78:
8f:5a:d7:48:fc:fe:71:77:67:b1:38:1d:db:dd:1f:
c0:d7:53:e0:d7:49:c2:56:82:eb:c6:8e:a2:84:7f:
7c:20:6d:6d:01:3d:03:9f:4f:ff:4b:70:df:88:76:
9c:87:ce:07:b2:09:96:1f:f3:82:56:18:37:e2:44:
18:b5:d2:13:99:aa:ab:13:c2:60:54:4c:dc:9f:21:
c9:97:3a:1d:c2:86:38:13:6c:79:81:f5:4f:6a:1d:
d0:9a:ed:e4:7d:0f:71:c8:a0:87:b2:59:fe:a9:1d:
54:72:aa:fc:47:8b:70:68:f8:53:39:a3:3f:6e:fc:
9e:3d:42:4b:5f:99:8d:8a:88:a4:3d:38:34:3e:11:
aa:4d:07:77:b2:5a:e8:05:cf:19:a0:80:0c:90:4c:
8c:6e:81:54:f3:9a:db:d7:b7:45:e8:f3:56:87:9b:
95:3d:42:ee:f3:b0:80:86:c3:cf:5c:e6:93:0e:c1:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0D:8B:CE:2B:A3:68:F0:34:35:02:A8:1C:BB:08:33:52:4A:C4:CC
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:98:c9:8b:b1:75:6f:ad:71:2d:2b:b2:14:69:3c:15:8b:aa:
e1:84:49:a1:a3:33:79:a2:d0:b7:d0:6a:34:99:f0:ab:56:70:
5e:41:42:c3:db:71:3d:2c:98:d8:95:ab:9e:e7:0d:48:72:6d:
51:c1:03:a9:7c:98:a2:a6:fc:29:64:cd:71:2c:1a:21:ac:75:
76:15:b5:1c:3f:9e:34:5b:ad:1b:55:97:d5:25:9e:42:9f:21:
54:6c:eb:96:ca:41:2f:1a:93:62:ed:47:ba:3f:06:77:28:99:
1b:8c:67:00:77:a4:ad:ac:04:e4:6f:7e:bb:d1:34:7d:f2:1f:
a0:b9:b9:4c:26:f8:c9:97:11:57:50:67:33:36:b2:56:37:4b:
1b:a7:bc:d5:d8:75:6d:0d:9d:54:2e:ae:ac:2f:cb:41:d2:37:
38:85:12:25:80:91:84:34:be:c6:f1:c4:03:9d:0b:bc:e6:ba:
63:3c:51:25:b8:1f:28:cc:77:3f:1a:78:f3:86:6b:1c:ba:91:
2d:34:06:12:f1:e9:7e:76:dc:a0:b5:6b:63:b9:87:7b:04:f9:
7c:f3:a9:75:6e:5b:1b:72:07:a5:95:e8:84:89:49:9c:a6:b2:
1e:2e:ce:dd:9c:a3:bf:52:26:5d:c7:a0:3e:76:0c:e2:c5:12:
e1:9a:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:35 2025 by rpki-client