Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: N3Ukyooj/9iPh835JtNg+PuOryYC4bf6ETWYuqfPV9w=
Subject key identifier: 82:B6:BB:1B:00:A3:98:20:53:44:00:A0:AA:5B:4D:53:2E:91:D6:56
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 0197469D9EBA3A310FF19A1B070E473BF57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 0523
Signing time: Fri 06 Jun 2025 19:00:24 +0000
Manifest this update: Fri 06 Jun 2025 19:00:24 +0000
Manifest next update: Sat 07 Jun 2025 19:00:24 +0000
Files and hashes: 1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: +9dwxkzL4NPmqFX9wM3jOyr50D8V9r9RZD0DcpHWIEo=)
2: ro12KKiX-LBkOFDMXKVrhIyQ9tA.roa (hash: 3rfI99WFfWKHo+rtyifcnFcBumsIBP/guPHdSOGN9zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:9e:ba:3a:31:0f:f1:9a:1b:07:0e:47:3b:f5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Jun 6 19:00:24 2025 GMT
Not After : Jun 7 19:00:24 2025 GMT
Subject: CN=82b6bb1b00a39820534400a0aa5b4d532e91d656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:a4:99:d9:98:36:00:71:8f:87:82:ab:2e:
e7:41:09:4a:ce:3f:59:c3:fc:e3:d1:d9:af:65:24:
73:94:0c:a8:b6:95:70:37:07:1c:17:1f:a1:f0:79:
db:2e:f3:38:cb:94:fe:a7:67:e4:b6:f5:40:7e:72:
c3:11:06:6a:02:3c:5f:69:88:54:55:9d:ad:a4:25:
30:a6:67:38:67:d0:e0:8f:2c:69:73:fe:6f:c0:c6:
da:45:cc:16:d9:29:4b:68:4e:95:a1:10:a7:2c:90:
37:04:6d:81:aa:a6:d2:0f:72:a3:b1:02:0f:e4:82:
a1:6e:28:fb:f7:f0:a2:c5:f6:20:04:6c:6a:e3:4a:
de:08:3f:e4:ad:cc:6d:81:9e:bf:43:8f:35:bf:fd:
2a:85:d6:95:9b:c3:12:c0:41:c6:1e:92:53:4b:f9:
81:e1:70:76:f4:fe:77:d0:c8:22:9d:93:98:90:7c:
6d:88:a5:0a:13:91:dc:9d:ff:67:99:7c:dd:ef:89:
45:6d:59:bf:dd:21:6d:d4:7f:76:65:01:4a:38:f0:
c1:73:53:1a:5c:0a:15:56:5a:18:b5:04:3d:f5:21:
2b:49:06:f2:7f:8f:ae:e8:c9:69:ef:97:b5:9b:c6:
b0:98:0d:50:98:91:c9:09:ce:03:75:7d:91:42:cb:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B6:BB:1B:00:A3:98:20:53:44:00:A0:AA:5B:4D:53:2E:91:D6:56
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4f:51:02:7d:ed:86:40:b7:20:28:91:2f:07:e1:06:f8:c5:
cc:f1:1d:01:15:15:73:24:c5:8e:97:25:b6:7a:e3:b5:af:db:
56:f9:f5:d8:99:05:7d:6a:3c:5e:8f:bf:44:12:0f:a7:e2:0b:
61:c6:1d:a7:5d:9a:34:32:54:71:e5:50:c0:d8:ea:5a:01:5c:
57:d4:f7:78:92:7a:88:60:5a:04:34:b0:61:c5:89:56:cd:74:
90:62:0c:e0:fd:fb:e5:61:41:c4:c4:10:88:a2:cc:54:a4:0a:
07:ea:39:b7:d1:e6:d1:da:9e:f9:cf:b9:c9:e1:12:ce:ee:2a:
5b:8b:af:e8:4f:31:2c:c4:52:92:94:09:3b:78:70:bb:68:75:
e1:37:e3:b5:c5:6e:8a:ea:a8:d1:ce:11:aa:79:df:89:02:54:
d6:ba:48:3d:f5:18:cf:39:b8:41:f0:28:0d:45:6c:44:96:d5:
bb:0f:84:4e:3d:9d:5e:55:c9:88:27:5c:14:34:a0:25:f8:20:
6e:6b:b9:40:13:a2:c0:ba:ab:13:e6:ec:58:46:34:df:8f:c8:
7a:56:40:25:28:e8:1d:7d:40:5d:c6:6b:e0:12:2d:69:3e:f6:
32:52:1c:e5:ba:83:88:5d:72:f8:40:f5:6f:fd:bc:13:87:f8:
51:2a:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:27 2025 by rpki-client