Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
File: pSNBhTlzXL2bC6PCeew1V9cmJlo.mft (raw, json)
Hash identifier: YylBjCGQ5JJ5WTNQuXm0JWtC4Ec9Jloy54/QVFZm+wM=
Subject key identifier: 73:D8:AC:E4:D4:E2:CA:AD:87:E1:54:A4:99:94:A8:36:EB:AC:36:8C
Authority key identifier: A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Certificate issuer: /CN=a523418539735cbd9b0ba3c279ec3557d726265a
Certificate serial: 01974A0CA8518BB2523FB26E30912583AE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
Manifest number: 1333
Signing time: Sat 07 Jun 2025 11:00:32 +0000
Manifest this update: Sat 07 Jun 2025 11:00:32 +0000
Manifest next update: Sun 08 Jun 2025 11:00:32 +0000
Files and hashes: 1: 8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa (hash: Ub5Ka+iibeNMtT5d651FP9y1wedTUH3xQXSWP3OHFL0=)
2: pSNBhTlzXL2bC6PCeew1V9cmJlo.crl (hash: QMyJLr4aGtw8Aiyi/c7Q08equJ6xK1UFBB+Lf1aLFbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:a8:51:8b:b2:52:3f:b2:6e:30:91:25:83:ae:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a523418539735cbd9b0ba3c279ec3557d726265a
Validity
Not Before: Jun 7 11:00:32 2025 GMT
Not After : Jun 8 11:00:32 2025 GMT
Subject: CN=73d8ace4d4e2caad87e154a49994a836ebac368c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:13:bf:53:1b:02:5f:ad:c0:6c:a6:6c:cb:
36:06:8b:23:b2:eb:0e:6c:c1:bf:6e:7e:e6:88:6f:
50:ad:85:7d:f6:1f:e8:59:46:18:8e:a4:8c:cc:01:
e6:4b:9f:92:50:37:a1:b3:17:2f:87:91:6e:c1:d6:
5e:5e:c3:6b:cb:18:f6:59:31:27:21:1c:5f:9b:b2:
b0:9f:c4:58:63:9e:8f:ba:21:f0:f1:e7:96:8e:34:
dd:46:97:56:2a:75:7e:97:4a:38:9b:98:3f:c9:26:
fa:f9:d5:db:bd:8d:ee:51:61:c6:3b:a3:39:ea:91:
be:02:8e:f0:da:b6:95:44:f9:63:a8:2e:d4:d8:7f:
19:2e:47:e7:df:8e:c1:74:e5:19:bb:c9:d7:11:2c:
9c:19:6f:32:a4:86:11:0c:7b:83:63:05:88:34:74:
71:03:33:06:c7:a4:83:2c:9b:37:ee:3d:e1:22:21:
5c:73:9f:fd:40:fa:06:07:ab:df:ed:54:c1:39:e2:
79:00:cd:28:da:56:e1:cd:84:c7:f6:ab:3e:09:1e:
8d:c8:94:da:26:03:d3:1d:02:7c:1c:96:83:76:e3:
e7:87:15:b8:62:da:78:21:df:c0:51:ac:59:da:ee:
6c:a7:6e:ba:fe:67:43:0b:4d:01:b1:e7:4b:36:b3:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D8:AC:E4:D4:E2:CA:AD:87:E1:54:A4:99:94:A8:36:EB:AC:36:8C
X509v3 Authority Key Identifier:
keyid:A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:66:71:3f:85:a9:2a:c6:6f:89:24:ad:ac:79:40:57:c8:7f:
48:d1:67:5a:fe:c0:3d:96:5f:e2:b1:f3:a4:d9:77:a2:5d:7a:
3b:0d:95:7e:69:51:3a:36:43:62:d5:3c:95:d5:6d:0e:cd:c5:
e7:f3:ba:6c:cd:ec:44:4b:5b:26:82:18:ef:98:53:4e:a4:a3:
49:c5:3a:f4:50:0b:d8:21:be:b3:ae:e6:92:71:89:6b:38:11:
fd:0a:18:e2:ff:54:05:99:98:a7:ef:f7:bf:4f:b8:15:48:3a:
06:8c:27:f7:61:03:39:7b:b3:b0:e1:4d:86:28:d1:c4:04:07:
0b:b8:fa:17:3b:ab:d2:36:e3:48:9c:8c:1e:e6:3c:a8:38:82:
50:2c:8a:31:82:21:30:0a:c1:07:99:70:a9:2c:f3:e3:1a:e3:
da:c0:3c:dc:eb:ae:9d:bd:cb:88:b4:97:19:01:67:66:a6:b9:
56:0d:2c:24:6d:3a:1d:41:2c:cd:b9:4e:42:c3:11:04:0a:c0:
8f:fa:6c:d1:48:09:69:84:1e:9d:33:1b:22:ae:e8:b5:c2:43:
66:56:66:b8:44:0c:e8:33:5d:4e:fd:2d:62:0a:68:12:c8:db:
b5:6e:30:99:e2:13:4f:75:a2:a7:59:23:a7:d9:33:02:eb:65:
f3:cd:41:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:14:15 2025 by rpki-client