Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
File: pN15cHEksgZy5pw44Xtma3-ufB0.mft (raw, json)
Hash identifier: AsNfWPqGxgSu1CU+byEJLIr5OhBvrMalAm3ZDdSfHfs=
Subject key identifier: EA:6F:FB:1C:C7:19:B2:00:A7:F0:13:B6:0C:F8:2D:51:FE:EE:22:1C
Authority key identifier: A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
Certificate issuer: /CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Certificate serial: 0197481E13FF6BD57C75C35817E3D3648716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
Manifest number: 0452
Signing time: Sat 07 Jun 2025 02:00:20 +0000
Manifest this update: Sat 07 Jun 2025 02:00:20 +0000
Manifest next update: Sun 08 Jun 2025 02:00:20 +0000
Files and hashes: 1: chSPcB-8PJwSsmzBV-10wqsxDLw.roa (hash: O+lS3nkRm8C+lzL/Hin40zEYWRx8Gg/FA+5nWyAJNII=)
2: pN15cHEksgZy5pw44Xtma3-ufB0.crl (hash: 6S6rWOlQ3CP4Yd0QRFHTo1LxOIP3K70VdT4QANdYk8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:13:ff:6b:d5:7c:75:c3:58:17:e3:d3:64:87:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Validity
Not Before: Jun 7 02:00:20 2025 GMT
Not After : Jun 8 02:00:20 2025 GMT
Subject: CN=ea6ffb1cc719b200a7f013b60cf82d51feee221c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:85:0e:2a:6a:18:1d:26:71:8c:9b:f9:df:
c8:fe:fc:6d:bd:91:17:75:8e:dc:ed:f5:24:57:70:
fa:a7:c2:c4:2e:31:2d:43:8b:e7:52:ea:7d:36:4d:
c9:22:5e:7a:d0:77:24:24:8a:59:be:b7:3e:0a:c2:
25:93:5d:74:61:2c:1b:3c:bd:89:2c:5a:ca:8c:6a:
64:25:0f:65:fa:f2:f9:7b:7f:a5:c3:6a:8c:ec:3b:
a7:2c:ee:24:87:3b:71:b5:27:9c:97:98:54:47:15:
51:f0:6a:51:04:2b:c4:90:65:a3:38:66:56:77:fa:
ae:d6:c2:43:90:7d:62:7b:2b:b2:c2:ba:bc:aa:cc:
84:61:67:11:92:4c:35:c7:c1:cd:d8:56:46:64:85:
b8:13:14:8a:5a:05:b4:78:f7:81:2c:9b:0c:c2:f1:
2a:ed:0c:69:f1:9f:a5:fb:45:5a:44:6d:ae:a0:95:
c8:dc:bb:f8:89:52:65:ce:ae:5d:ac:4f:1a:75:75:
09:2e:bf:b4:2e:c3:36:e8:ab:9c:f2:e2:e5:42:66:
10:d8:66:aa:8e:91:80:f9:85:a0:0c:d8:ca:8e:64:
ca:3a:c2:d7:1a:89:70:dc:7e:35:c0:6b:2a:a5:ce:
90:56:e7:b3:c3:b2:74:2a:1e:95:51:8b:49:c4:1e:
ec:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6F:FB:1C:C7:19:B2:00:A7:F0:13:B6:0C:F8:2D:51:FE:EE:22:1C
X509v3 Authority Key Identifier:
keyid:A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:72:2d:31:ea:84:bd:f1:02:cc:ac:a3:c1:ea:75:bb:d8:aa:
9f:f7:97:e3:36:43:fa:dc:e0:28:37:fc:9b:d7:49:88:3d:3d:
b8:d9:6d:fb:38:ec:ed:cc:ac:7b:1a:77:a4:e1:65:71:6c:1d:
14:6f:04:5f:85:0b:b9:86:a2:c0:c7:bf:3a:fd:51:f5:36:63:
0c:08:4d:da:2e:e7:24:8e:43:f9:4a:42:f7:93:7d:06:56:af:
a6:28:f2:3e:d5:52:e9:12:53:40:fb:79:fd:3d:4e:db:d5:16:
98:34:97:7d:5d:b8:c4:e2:df:2b:49:7a:c5:9b:e4:31:54:60:
08:96:03:e5:9a:d2:a7:08:bd:bc:4f:02:0a:ed:84:47:22:c5:
75:53:35:69:dd:20:bc:a7:16:a7:67:9f:15:7b:c2:c6:14:bc:
ac:09:e5:41:63:30:d3:ee:0f:31:21:0b:39:3e:2c:87:5a:9f:
01:c8:5f:56:e6:a9:44:62:a8:fb:26:ee:de:75:7c:4c:e7:20:
12:21:54:76:f7:52:bc:b9:d0:90:10:55:84:94:59:22:85:81:
4d:d9:51:8c:09:0b:ba:e1:26:17:8e:bb:04:b8:23:b2:f4:a3:
4c:61:df:48:3d:c2:95:00:48:e6:a4:91:2f:cb:4a:4f:70:1d:
81:bf:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:33:40 2025 by rpki-client