Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: eN/p6jycPVniSIKlqHMAxB5WEJj/Zv3VgRy99o1T4+o=
Subject key identifier: F5:70:D0:CB:04:49:E9:EB:9A:71:31:D1:F2:21:A3:30:8A:36:D8:6A
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 019747E7D7155C160B0E1834E48CDA00DBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 01:01:05 +0000
Manifest this update: Sat 07 Jun 2025 01:01:05 +0000
Manifest next update: Sun 08 Jun 2025 01:01:05 +0000
Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=)
2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: Kp+kaHpV8NV1HeJJZKS+JdSRwiov8+Ne10iZYqy12hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:d7:15:5c:16:0b:0e:18:34:e4:8c:da:00:db:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Jun 7 01:01:05 2025 GMT
Not After : Jun 8 01:01:05 2025 GMT
Subject: CN=f570d0cb0449e9eb9a7131d1f221a3308a36d86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:2a:06:6b:74:e6:06:43:ab:8a:48:b6:67:
1e:12:43:11:fc:de:cc:ed:e5:40:95:55:8c:bd:76:
7f:4a:39:74:d1:de:d1:f4:c3:53:cd:29:9f:81:22:
2f:c2:f5:cb:48:23:c9:08:f1:3b:d4:c8:a2:b6:ec:
eb:69:4d:e6:1e:bd:47:02:93:a5:e7:12:60:1f:d6:
b0:d0:90:c9:b8:c0:07:f7:bc:46:76:e9:0a:f9:d7:
57:0f:04:ec:df:76:9c:42:41:46:10:3f:bc:06:ec:
44:d7:30:32:5d:56:0c:35:78:83:43:2c:aa:ff:22:
4d:ac:3f:5e:ef:21:22:58:f5:0a:4d:ab:8b:67:f2:
f5:4f:c1:75:92:d2:1b:22:62:0a:65:2c:ec:16:48:
6e:b5:4e:0f:27:cd:b5:55:9c:c3:00:f4:69:4b:99:
ee:cf:bd:39:aa:b3:25:1c:a7:9e:e3:46:15:86:1c:
88:ad:56:1c:11:b2:6c:2b:d0:bf:7c:b0:b3:0b:91:
d6:cd:73:04:51:76:c6:87:5c:1c:d9:7d:e2:8c:6b:
b1:20:53:da:3d:57:96:e1:7b:90:b6:75:d3:8d:86:
9f:f2:9a:fb:6c:74:f2:1f:2e:b9:3a:da:85:4b:d1:
75:0d:9c:2a:52:29:1c:ce:6b:2a:34:fb:db:9d:78:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:70:D0:CB:04:49:E9:EB:9A:71:31:D1:F2:21:A3:30:8A:36:D8:6A
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:6f:4d:e9:c7:a8:18:2a:51:2d:9a:6a:ea:78:e5:32:44:b6:
ba:7a:aa:08:8a:8d:f8:9e:a0:0f:9b:37:54:8b:92:49:25:ee:
40:89:8f:d4:3a:9a:b8:0c:e6:95:2f:ca:21:c3:59:be:0d:c0:
d0:ca:49:15:e9:97:42:39:0f:0a:6b:df:5c:c7:02:8e:37:29:
77:15:d1:4f:79:0f:f8:d5:3a:1e:64:f6:94:ab:88:76:84:d3:
8e:b1:76:3e:82:27:dc:ac:37:bc:a3:99:de:42:19:6a:a8:59:
3e:49:e7:ff:52:bd:c7:c1:ee:2e:ad:c0:58:b3:f9:cc:5d:a2:
a1:05:09:88:60:9a:84:d7:eb:bf:da:6c:0c:a0:ae:ef:67:6d:
9c:fd:7f:50:5f:68:94:ce:3a:89:4f:8c:44:97:69:1f:b2:b2:
cd:b5:71:03:2d:b1:ef:f2:e6:f3:7a:40:00:be:78:be:73:58:
02:0c:c3:18:86:f1:13:ff:c2:4e:95:36:44:d3:bf:1f:ff:cb:
77:9e:f6:bd:dd:e7:9c:cb:ef:58:ef:2f:89:d5:a6:ca:6f:4a:
8a:0e:cc:55:5b:9b:3a:da:ad:8b:78:38:7a:fa:98:ed:24:8d:
c1:38:12:4f:80:fe:20:71:d9:52:f8:cd:82:e8:79:c2:ee:10:
7f:ae:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:21:56 2025 by rpki-client