Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
File: pkHn9ngj7vUqGf4dyODmp_QclDM.mft (raw, json)
Hash identifier: s/nCJQ0vpg+ozmSFqCIic8Xecj0K6M2tFgpy3BmxHRs=
Subject key identifier: A3:39:03:E7:87:22:6F:8D:D8:F1:61:BE:4D:1C:14:E4:C6:8A:A1:58
Authority key identifier: A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
Certificate issuer: /CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Certificate serial: 0197470BDC87A647FAFC695C317A26C6229D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
Manifest number: 0918
Signing time: Fri 06 Jun 2025 21:00:49 +0000
Manifest this update: Fri 06 Jun 2025 21:00:49 +0000
Manifest next update: Sat 07 Jun 2025 21:00:49 +0000
Files and hashes: 1: H2ciew030YT_ZKL58SNBSDs0iQc.roa (hash: dr7FPAyraTf1nqxR0HjlvGsow4ZxkGibDCSpB0tZ3CU=)
2: pkHn9ngj7vUqGf4dyODmp_QclDM.crl (hash: hl+bXVgKT2o8NUpusrJOqyRzpCTeUizoqzOkx/FPvEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:dc:87:a6:47:fa:fc:69:5c:31:7a:26:c6:22:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Validity
Not Before: Jun 6 21:00:49 2025 GMT
Not After : Jun 7 21:00:49 2025 GMT
Subject: CN=a33903e787226f8dd8f161be4d1c14e4c68aa158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:0c:c5:6c:c7:7a:5c:fc:27:68:db:14:ba:
c5:65:d1:35:5b:16:3b:32:c4:88:5d:cc:12:c0:b1:
b6:fd:a4:33:27:59:7a:39:bf:ca:78:58:8d:f3:63:
6d:c2:9e:54:66:a2:d4:79:57:3d:67:46:73:3c:9c:
6a:10:6f:38:1e:95:47:94:52:f2:bd:bb:ce:9f:be:
64:22:38:1a:df:0e:3d:ec:c1:80:1a:a3:0a:2b:78:
fa:14:ca:cd:65:07:7e:14:90:03:b1:e0:13:6b:55:
94:d3:b7:77:7e:16:3a:de:0c:14:cb:e8:bb:b6:ab:
5c:ae:60:4f:2b:d6:34:83:ad:b0:a1:22:d4:f0:94:
b4:4a:22:48:99:45:f8:91:be:07:3b:29:e3:c8:cc:
5a:cb:41:9d:30:4d:b4:64:ea:86:33:34:3b:e1:fb:
2e:1e:cc:98:a1:72:80:29:be:8d:b7:74:70:c9:4e:
bb:7c:35:8d:5f:3e:ad:f5:38:05:80:a2:a5:5a:81:
04:ee:6d:6f:40:bd:dc:de:12:12:7f:c3:66:8c:17:
67:46:af:a3:5a:3f:a2:89:7c:7a:6e:71:c5:b6:37:
7b:38:bb:c3:ba:b9:e4:59:c6:27:c9:3c:f2:ec:b6:
f3:f4:49:b7:c9:ce:2f:65:5d:6f:08:96:2a:7c:71:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:39:03:E7:87:22:6F:8D:D8:F1:61:BE:4D:1C:14:E4:C6:8A:A1:58
X509v3 Authority Key Identifier:
keyid:A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:25:bf:de:f4:c0:55:ea:80:20:7a:10:24:63:af:33:da:65:
fa:e6:d6:4e:07:62:de:e7:f7:84:5e:36:a9:54:7c:b1:8a:02:
21:75:c8:6b:83:33:e5:8f:90:31:77:d9:f5:01:70:62:12:ed:
85:dd:8f:83:9b:77:62:d3:71:ca:60:eb:b0:41:bf:c4:12:ac:
e6:14:cd:9e:6c:35:ad:53:de:f6:23:ac:02:de:c8:36:5c:65:
b2:e7:5a:e3:e2:fe:e4:2d:d6:e6:3b:20:40:01:e8:0f:50:1f:
48:f0:a2:2d:fb:5a:d2:51:83:71:37:8f:cb:02:60:c7:9e:bd:
bd:b5:45:f9:13:4c:5e:f0:20:d1:e8:d7:b6:59:d8:31:ea:58:
f0:30:4f:dc:a2:2b:3e:fc:28:7f:79:1b:b6:81:c1:e1:47:0b:
4e:62:7e:19:df:85:c3:ff:9e:8c:29:fd:9d:6d:82:69:9d:f2:
9c:a4:83:a4:e1:7f:36:bd:ac:46:55:be:f2:02:eb:ff:09:80:
d7:3d:e5:b6:b4:03:3b:e0:e1:6a:25:6a:c3:e9:3c:e9:cd:89:
3e:75:f4:19:3f:20:da:1d:52:73:7f:b8:39:8a:4b:f0:6b:c5:
5e:54:a1:22:a9:87:9c:7e:b2:91:0f:de:a6:fa:6c:89:cc:1b:
20:78:36:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:29 2025 by rpki-client