Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: fvQJoGeLvVZwYWfST59eHrjO2onYjFDwWK/9XpC7ptA=
Subject key identifier: B7:46:2A:1A:02:03:6D:31:89:D5:89:72:76:EE:D5:3F:F8:99:D8:9E
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 01974E5807EF929BA9837F0056651F8DADEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 07:01:21 +0000
Manifest this update: Sun 08 Jun 2025 07:01:21 +0000
Manifest next update: Mon 09 Jun 2025 07:01:21 +0000
Files and hashes: 1: 1-GwxGdQdSDv0GNH37kCGFbw_26Q.roa (hash: 8CUzx4XPAhE8seJ5BK68QhEaKNzFZcIoKPr1Lhqpte4=)
2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: prCmKIftj1zTac5jh2zx8zQrLfWEfAmvAS/UX6D7sNQ=)
3: tLZE9xN0wEMlciA44LFiADYH8LI.roa (hash: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:07:ef:92:9b:a9:83:7f:00:56:65:1f:8d:ad:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Jun 8 07:01:21 2025 GMT
Not After : Jun 9 07:01:21 2025 GMT
Subject: CN=b7462a1a02036d3189d5897276eed53ff899d89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:14:e2:b9:8f:1c:c7:aa:df:82:86:b9:ba:c1:
27:f0:b2:01:20:9f:84:35:18:ad:a6:5f:6e:48:11:
f3:0f:bf:e0:af:fb:f2:cf:89:06:8b:bb:65:06:30:
01:00:a2:88:70:03:eb:7b:54:f7:84:95:dd:f0:c4:
95:54:49:60:d9:53:3c:ab:c2:cf:7a:b7:5a:63:b2:
de:77:31:0c:2a:8c:30:88:02:41:61:70:5a:ec:c2:
03:24:d3:04:45:5b:ac:55:f2:98:7a:57:ff:86:e2:
b6:a7:b6:ce:c7:c0:41:26:05:ab:8c:c8:9f:a4:a0:
54:e4:08:da:96:a8:ee:b8:7c:74:ad:ab:29:d4:29:
d5:a5:57:41:c5:d2:a5:75:a0:46:73:dd:6c:2a:a6:
c9:99:b9:5a:43:93:63:48:1c:3d:24:15:22:b8:03:
79:3e:e0:80:47:2c:1f:1b:6d:ca:f9:b9:cd:98:a3:
36:91:3e:dd:96:62:32:24:47:18:39:f4:8a:7e:f0:
a6:14:3a:43:ef:0b:cf:28:05:78:7c:d5:36:ec:c9:
e7:67:74:c5:35:8b:de:53:62:d9:98:c6:e6:f1:bb:
ad:b3:79:78:39:0f:22:15:2e:0b:d6:81:d0:22:f9:
23:7c:ff:60:9a:b5:f1:5d:98:ba:50:36:ee:34:42:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:46:2A:1A:02:03:6D:31:89:D5:89:72:76:EE:D5:3F:F8:99:D8:9E
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:63:5f:2a:ff:a7:34:1d:98:66:08:88:3d:5e:32:b2:8d:ba:
05:a5:15:45:22:d4:3c:5c:6c:21:5b:8e:7b:f7:6e:56:92:40:
72:97:bc:31:81:15:72:f0:d1:14:14:99:1e:0b:b4:80:2e:05:
bc:2b:00:36:c7:e5:60:b4:f6:ac:66:03:be:05:8a:95:c3:ef:
40:11:e8:a8:f3:f8:51:9d:b3:3e:be:0e:4b:c1:09:b9:90:a1:
f6:6f:0e:5b:d3:77:8c:a0:36:22:8f:7d:ac:42:db:8b:c4:6c:
17:68:dc:59:77:ec:33:a8:c6:7a:36:eb:4b:51:0f:c1:59:ab:
53:3f:b4:b7:79:d7:93:f9:49:77:09:7f:8c:a3:ad:4d:5f:70:
8f:4e:54:6c:72:10:3d:ba:7f:22:de:b6:df:e8:c3:bb:96:ba:
05:a4:07:49:3b:a4:9c:80:38:b4:24:ca:87:a9:7a:c3:a0:49:
20:6a:8e:24:47:e8:f7:9a:62:b1:66:fa:30:2c:b3:45:fc:e7:
bd:a5:44:f4:7c:06:7a:fd:82:0f:93:53:67:11:4c:81:7b:d5:
0b:51:d4:85:4d:2e:92:60:95:a4:49:91:33:77:f1:b0:39:96:
38:c3:60:71:ea:c5:20:ed:54:41:26:52:73:98:1e:e4:dd:6f:
95:68:62:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:44:29 2025 by rpki-client