Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: wTmtn3f04AcpODcosVYcj4dp7jVIpxKTq/JCn5Bp2wY=
Subject key identifier: FA:DA:91:24:19:C2:36:B8:1C:5B:9B:60:A3:55:79:72:2B:F3:AB:96
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 01974DE9D693C598C368D25BCA4071EE7484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 05:00:59 +0000
Manifest this update: Sun 08 Jun 2025 05:00:59 +0000
Manifest next update: Mon 09 Jun 2025 05:00:59 +0000
Files and hashes: 1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: SwRYldtZKoe6HBCuqVT4tqsc9fuN8R3jwINwc9Ynugs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:d6:93:c5:98:c3:68:d2:5b:ca:40:71:ee:74:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Jun 8 05:00:59 2025 GMT
Not After : Jun 9 05:00:59 2025 GMT
Subject: CN=fada912419c236b81c5b9b60a35579722bf3ab96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:ef:e8:32:10:b2:de:83:38:5a:2c:25:d1:
9b:0a:77:c6:1b:d2:3b:9e:57:9f:e6:7b:fb:86:15:
a0:f8:47:d0:40:db:80:6b:b3:37:e4:e4:a8:be:72:
02:05:73:3a:70:6e:3f:92:4e:6f:14:9d:d3:2a:7d:
95:48:c5:11:43:5e:30:40:2b:28:0b:85:e0:f6:4d:
ea:e6:6b:50:f0:8f:dc:90:52:ed:93:b8:eb:29:a3:
6d:38:9e:ff:84:40:f7:2e:05:b8:9a:57:7f:50:ea:
e1:2c:9d:d0:87:7c:e3:f0:e3:2f:3b:92:22:ff:06:
08:b9:0e:6e:ff:ce:ae:02:7a:83:a2:49:d2:9f:0e:
92:d0:7a:f5:6e:47:89:a2:2e:ae:23:7a:a3:ed:db:
d6:ba:49:a1:f2:02:16:bb:7d:61:37:6f:c0:29:04:
51:fc:ed:20:f9:06:84:aa:6f:93:02:24:c0:79:b8:
b0:82:ca:06:a1:da:fa:43:8b:19:4d:1c:6f:f9:67:
4b:fa:e4:b2:c9:70:6a:b6:88:d1:36:02:97:e4:30:
b2:66:13:4d:7e:b9:59:f5:54:91:4e:4d:e3:eb:3f:
e5:d6:9f:12:f4:12:e1:e0:bc:bf:70:d0:57:ef:39:
9b:74:ae:2b:5b:05:9b:09:f1:21:bf:39:4e:8d:1e:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DA:91:24:19:C2:36:B8:1C:5B:9B:60:A3:55:79:72:2B:F3:AB:96
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7b:a7:b0:9e:83:8e:c1:5e:18:2f:e0:26:f2:16:20:f1:9a:
43:dd:ec:03:53:26:bf:4c:8e:b7:44:c7:c8:cd:df:ec:da:3b:
1c:5a:6e:11:fc:a8:43:eb:f1:15:74:4b:ad:f5:c6:3b:05:bd:
08:e6:cf:a0:9c:1d:73:ad:6b:a0:71:d9:87:b8:37:f4:d6:a6:
a4:7a:c2:ec:65:95:a5:b1:3c:36:e4:2f:e8:e4:68:9c:e3:3a:
b3:6c:fc:bd:54:b9:7c:02:17:f6:77:94:99:96:f9:d6:a7:c1:
56:87:e6:55:13:2a:91:1a:8e:db:09:51:7a:8e:3b:4e:74:21:
69:d8:07:43:28:1a:98:84:66:3f:b5:03:d5:53:ae:65:af:53:
c9:ba:23:d7:74:2a:1e:0e:e1:91:c3:16:d5:99:0b:1d:51:75:
dd:a0:e0:b8:7b:ad:d8:0f:e3:49:56:d1:41:b4:f2:6d:7e:97:
d3:3d:58:57:0f:c2:7e:25:f0:6d:b2:69:f1:46:93:a0:a9:b7:
f7:51:77:ad:7f:2f:c5:c5:95:af:e2:b2:d7:36:dc:c9:cb:c7:
38:2f:eb:39:e4:50:65:39:e1:1a:49:ba:b6:c3:03:52:81:bc:
ae:f3:9d:ee:57:82:36:7a:6c:22:26:5c:0f:fa:d2:e8:49:8f:
7a:24:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:37:40 2025 by rpki-client