Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: hdoeupRxeklI0huMDfc0tJ+WhBb7nCTnND7p+/0Ale8=
Subject key identifier: F1:D9:8B:28:59:7A:B9:AB:86:FA:88:9A:C2:C9:22:F6:5E:02:F0:89
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 019745F8FF76E56EA921EE2CF867575BF154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 1587
Signing time: Fri 06 Jun 2025 16:00:35 +0000
Manifest this update: Fri 06 Jun 2025 16:00:35 +0000
Manifest next update: Sat 07 Jun 2025 16:00:35 +0000
Files and hashes: 1: Clf1O67BMO2Rhs6Zi3d5eqYtS78.roa (hash: gEsGT+BkcxrPL5LEXQ9nd6Eso8OhYDY6ncvwiqyMT9o=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: 6z1srwEX4jO4fs/pP3h6gbKGR7n32ESJJqRvIw78r3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:ff:76:e5:6e:a9:21:ee:2c:f8:67:57:5b:f1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Jun 6 16:00:35 2025 GMT
Not After : Jun 7 16:00:35 2025 GMT
Subject: CN=f1d98b28597ab9ab86fa889ac2c922f65e02f089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:45:7b:82:cd:6e:c4:ed:ca:90:59:8f:c2:
e9:9f:69:b9:03:dc:07:89:fc:8f:c5:ad:88:c1:ce:
61:89:aa:7b:16:69:a4:f2:c9:a5:b8:8b:4f:d9:3d:
6a:35:f2:3b:a4:80:7b:a1:03:50:4a:ba:27:21:28:
ba:8a:94:9b:f7:16:6d:ba:8e:6e:4c:28:3f:d9:5b:
ad:63:b3:c6:54:ee:4f:ee:dc:d0:0a:13:d6:11:25:
c2:1b:58:16:55:53:80:b3:b6:60:1f:b3:d5:84:4f:
95:bf:53:2b:b3:fd:b2:3e:df:b4:38:63:05:29:8a:
90:44:d9:bf:06:d4:73:c5:03:42:ad:62:72:84:24:
41:05:9e:be:82:35:b1:ef:ea:04:7f:17:45:64:c9:
bb:47:9e:2a:05:ec:40:df:ae:33:ce:39:3d:fe:b1:
df:f7:8b:d3:67:89:e0:f5:18:3d:65:62:d6:7c:4e:
6d:95:1b:e4:48:f4:92:4c:46:1e:b7:3a:06:49:b8:
92:35:6c:26:96:03:23:b9:31:c2:7b:64:63:2e:6d:
01:1b:fb:c1:86:43:64:d8:bb:fb:30:05:3f:6b:f8:
c2:96:85:b3:2a:da:1d:18:57:3d:6f:00:ff:37:12:
60:9a:99:04:07:63:74:fb:8c:7c:dc:80:c2:36:29:
7a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D9:8B:28:59:7A:B9:AB:86:FA:88:9A:C2:C9:22:F6:5E:02:F0:89
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5a:d4:f1:90:b2:11:94:d6:a5:b6:01:a9:ea:85:3c:b7:75:
99:d1:e5:fa:a5:4c:74:16:61:2c:d5:e9:f5:4c:70:a4:c5:0f:
60:fb:36:4e:f1:f1:0d:3c:2e:11:fe:07:7c:31:c2:e2:15:96:
b0:0f:d2:cf:f5:6f:63:43:9d:81:a0:2d:f1:e8:9e:e1:c1:95:
60:ea:23:49:3e:eb:1c:42:01:a1:c9:8a:3d:79:34:ef:3d:1e:
ea:98:0f:b2:e4:6b:e1:da:bb:47:c6:a7:e9:01:be:74:00:fb:
b5:39:d8:89:af:da:2b:22:c1:0a:87:53:ca:d3:16:13:62:5e:
2b:fe:44:64:7e:9c:c1:3f:0a:17:55:38:f4:e2:81:a8:e4:f1:
3e:12:0f:f9:c0:54:d8:c4:4f:18:1b:4f:5c:70:68:aa:db:1d:
23:20:c1:c7:8d:f7:e9:40:4a:47:70:ba:26:88:b5:be:43:cc:
b3:66:16:cf:cb:b4:15:24:30:d8:86:d2:bf:e4:5d:38:c8:3e:
56:23:28:75:68:df:ca:2d:e8:d2:f1:f7:c0:e1:0c:d1:10:a2:
11:3f:f4:4e:2a:1f:57:d9:06:06:ac:8e:3e:13:d8:2d:66:94:
6f:c5:24:a3:3b:65:2a:f8:2e:9c:c0:4c:a8:82:fb:1a:c3:a3:
cb:48:69:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:40 2025 by rpki-client