Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: OAAE0XCWl+iTCwNIKXF2NppMap1b4E2419E6gCUs7Eo=
Subject key identifier: 75:27:09:70:1C:0C:24:02:1E:07:FD:A9:E3:2B:69:B2:35:DB:2F:EB
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 01974B1F675A27B49E654CBAFDD29DC62BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 121F
Signing time: Sat 07 Jun 2025 16:00:38 +0000
Manifest this update: Sat 07 Jun 2025 16:00:38 +0000
Manifest next update: Sun 08 Jun 2025 16:00:38 +0000
Files and hashes: 1: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: eW9QmRojVodrA8EkAMLc31X+DTDzFcKzRXacL8MOnuQ=)
2: wW2KE3gY8QjEsnXJFmwHDL7WH6g.roa (hash: rYujNDXyFY6K7NmLNp1LWeOiCz0Qh+l0K7mCOQxVp3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:67:5a:27:b4:9e:65:4c:ba:fd:d2:9d:c6:2b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Jun 7 16:00:38 2025 GMT
Not After : Jun 8 16:00:38 2025 GMT
Subject: CN=752709701c0c24021e07fda9e32b69b235db2feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:fe:81:56:56:d3:25:3f:06:ad:b4:6b:ff:
91:b7:12:b7:1e:84:8b:c1:72:1f:55:7d:48:58:5e:
9b:97:92:f4:0a:1e:3e:39:82:f4:8e:4c:c9:cd:cd:
84:6e:49:f5:06:d4:1d:87:1f:c1:56:c0:f0:56:7b:
60:92:68:fc:74:ac:c9:ed:d8:28:a2:af:a3:d9:16:
55:23:99:2d:04:1a:e0:06:35:b5:ae:7e:dd:45:00:
6b:78:5e:b7:88:f8:e6:59:cc:1d:63:7c:3e:a1:bb:
a9:4c:8f:18:a5:06:17:68:88:b7:0c:bc:96:a8:ff:
84:b9:21:af:b9:44:c3:13:2d:bc:8e:ae:5a:d8:55:
e4:a3:8b:89:cc:36:c8:18:5e:84:fa:d7:c0:71:d9:
be:2a:06:b9:9b:1c:c5:1d:69:5e:d2:9b:a0:07:98:
24:2a:54:04:cf:4d:14:20:39:76:16:f8:ed:9c:cb:
9d:38:ba:ed:46:d7:35:30:27:e6:21:56:f8:98:07:
06:1a:b3:5f:10:ca:66:b7:fd:96:6e:04:16:b6:f1:
c4:e7:51:19:be:13:1f:d3:69:47:1d:e8:2f:9a:a7:
11:9d:cc:71:b4:85:92:68:95:66:af:b6:ea:e5:b5:
36:76:96:9d:d2:12:27:eb:b2:f0:81:45:70:a7:b8:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:27:09:70:1C:0C:24:02:1E:07:FD:A9:E3:2B:69:B2:35:DB:2F:EB
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1d:5e:8f:d5:82:65:c2:0e:cc:41:b1:b0:c3:29:6d:93:5e:
88:ca:6e:eb:66:8b:e7:c4:08:67:9e:6b:f4:18:3d:17:1e:1e:
89:76:6a:f9:b6:8e:e3:65:cf:4e:9f:bf:b3:42:6e:63:44:2d:
5b:d9:a2:ba:76:ab:1f:c5:40:c8:58:e7:6f:34:0c:0e:32:4d:
b7:d7:5c:f3:eb:03:6a:d1:45:87:97:be:53:93:73:c7:fd:22:
97:fd:3c:13:90:71:15:34:7d:4e:c3:9e:7c:c0:31:95:b1:b6:
31:49:37:2a:53:e0:d4:a1:f1:99:6a:d6:9a:b0:5f:a7:d4:b8:
e0:8b:b6:1e:c3:f6:ff:95:a9:42:16:c3:19:04:5a:08:e0:7c:
e8:07:57:dc:ba:a0:af:88:25:c2:23:09:8b:d8:c9:27:bf:2f:
6d:2a:de:b7:5b:9d:d7:73:f7:ee:0a:33:fb:21:e0:bf:86:3e:
4b:0a:ff:c2:c0:8b:3b:b1:31:37:31:df:dd:6a:e6:f5:4d:c7:
45:41:9a:fe:e0:54:c7:c7:64:91:50:4b:7c:17:23:2c:bf:14:
30:3e:cf:88:a9:dd:5c:ff:02:5f:23:a8:4b:a1:63:ab:5e:2e:
d4:1a:2c:76:cc:73:4d:82:9f:e6:b3:b3:8a:44:59:13:19:83:
b1:16:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:32:16 2025 by rpki-client