Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: /ypqEPt/3FQlWL/Ol4CAGmPb8CTq68PMxpjbx43ECfQ=
Subject key identifier: 5B:6A:1F:3D:12:0C:A8:BA:F8:13:ED:06:AC:E9:89:AE:FE:78:41:F0
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 019749D62D16E4803F344F314E04B93E8392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 10:01:02 +0000
Manifest this update: Sat 07 Jun 2025 10:01:02 +0000
Manifest next update: Sun 08 Jun 2025 10:01:02 +0000
Files and hashes: 1: 41_o2BIwv76TF64VP1DAdfjTxPo.roa (hash: ZsvXvwGlxNqhMT0bqp079C/5ezKY6fiYSiOoxT1NO2o=)
2: 4mRSyOWbS8hQScfHLulGf4Y6ZgQ.roa (hash: o3JSSVtXNFoFrqvnt6XhA+Y0uItKhtMcyPKqriXcd08=)
3: Qw_MgL0jZxAEcUaQV1xqF4PVe2w.roa (hash: K6DZu82eoM3254ECuNlV9U+0ldDohrzL2NCBM61LLzM=)
4: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (hash: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=)
5: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: J4+oFiMg0qD2mPex60nfQ0VzAqpUtMqgr7wvyI3jLtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:2d:16:e4:80:3f:34:4f:31:4e:04:b9:3e:83:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Jun 7 10:01:02 2025 GMT
Not After : Jun 8 10:01:02 2025 GMT
Subject: CN=5b6a1f3d120ca8baf813ed06ace989aefe7841f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:93:b8:8e:54:13:32:6f:45:8f:a1:26:6a:
67:cb:9a:b7:d3:e8:d9:42:d6:99:55:8b:fb:c0:a1:
b4:3a:b0:5b:8e:7c:50:f8:e3:f5:30:ee:7f:da:f3:
5d:c9:93:6e:f4:26:69:89:00:5e:63:b2:a4:d2:54:
3e:c0:51:e6:7e:92:4a:23:07:e2:52:3b:2e:05:bf:
40:b6:d1:12:7b:bc:4d:ec:88:9e:c2:d6:0a:bd:c1:
a5:17:96:66:b5:66:16:d1:90:8b:fc:d7:94:c2:d2:
25:fc:5a:a4:ce:51:02:c3:9a:8b:7f:3a:53:26:6d:
22:50:30:7b:76:63:e0:1b:67:fc:79:1d:a4:e2:04:
26:2d:d4:2b:7d:af:3d:a8:e5:92:e3:f3:28:02:92:
5c:fd:e8:a0:a7:eb:e1:d6:72:b5:64:e8:00:6f:e0:
6e:c2:33:65:f3:f0:02:84:d5:46:6f:a5:4e:0e:19:
fe:94:b2:c6:d1:06:1f:48:00:ba:da:8d:9b:ff:93:
7f:16:51:11:cf:6e:76:f3:0f:f4:fc:f3:8d:62:9a:
21:47:64:94:c5:69:2c:6a:3e:71:58:58:f5:6c:9f:
26:8e:54:bf:b9:85:4b:1a:f4:cd:49:e6:3e:0d:c8:
44:b6:e4:ca:2f:db:47:ae:31:d4:d7:bf:9f:20:5c:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6A:1F:3D:12:0C:A8:BA:F8:13:ED:06:AC:E9:89:AE:FE:78:41:F0
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:eb:6d:57:60:70:a9:e4:ba:be:ac:e7:05:15:c2:cf:49:31:
11:9c:52:04:3f:74:c3:4b:ad:8f:ad:6d:d0:43:ab:6f:ba:03:
b3:84:4e:d0:ac:de:12:4c:bc:96:8f:a0:6c:40:e6:d6:5e:cb:
52:ed:80:aa:8d:b2:b4:0f:e0:7c:a4:92:c9:06:73:e3:0d:68:
f7:cf:19:33:26:77:71:ae:0e:fb:f8:ab:cd:a7:d8:07:d6:57:
df:00:b0:0f:6d:56:5f:74:b9:2f:d3:43:1f:a0:0b:3a:86:9a:
c7:6e:5e:92:30:fe:87:05:a4:51:46:a8:a5:8b:4e:67:a7:82:
d0:3e:e4:18:0e:02:20:b4:65:5a:42:a8:66:ce:a1:03:4d:22:
82:7e:b6:f1:76:75:9f:9f:81:64:c8:0f:66:69:13:27:32:5a:
f1:16:53:4b:5d:56:a3:0b:85:50:90:d1:98:80:69:2c:c6:84:
ea:29:bc:b2:42:9d:f0:01:77:a4:eb:4b:8c:7a:bf:60:99:9b:
4c:99:f7:c7:e7:77:74:4b:32:9c:99:74:77:34:cd:ec:0a:ae:
99:47:a6:c9:6b:55:2f:a9:2e:d3:01:59:40:0f:85:7d:9c:14:
76:85:c7:65:db:6c:c4:0a:57:f4:eb:e4:98:34:58:79:23:c4:
58:c9:9e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:11 2025 by rpki-client