Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: JVAwZAmaKO4/LrMtxcodu07kM8S124/T1qqO+ugSx6w=
Subject key identifier: DC:B4:8A:E9:0F:AE:3E:70:A6:84:01:87:6B:6E:6F:57:2B:39:16:5F
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 0197493148A08FEBD8F3D292F297D725FCD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 0442
Signing time: Sat 07 Jun 2025 07:00:55 +0000
Manifest this update: Sat 07 Jun 2025 07:00:55 +0000
Manifest next update: Sun 08 Jun 2025 07:00:55 +0000
Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: YCHy9qxxfudiNFm5D8J9/+IzbZX0P9sJSm7RkmpstJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:48:a0:8f:eb:d8:f3:d2:92:f2:97:d7:25:fc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Jun 7 07:00:55 2025 GMT
Not After : Jun 8 07:00:55 2025 GMT
Subject: CN=dcb48ae90fae3e70a68401876b6e6f572b39165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:8e:bf:41:84:52:73:ab:f3:06:67:a1:c5:
d4:e7:cb:ea:17:71:b0:7d:f5:23:c2:16:fd:23:e9:
ce:1f:bb:65:40:f0:b3:49:34:b0:b6:27:fc:78:d5:
aa:02:b5:cb:22:32:54:2d:88:9b:8d:61:50:b5:53:
da:da:a6:8c:95:a7:7d:e5:03:22:a0:9f:01:c9:9b:
a3:61:a8:7b:20:40:a5:4c:7c:5d:a9:f9:1a:dd:6c:
8a:25:f6:98:cd:85:c6:8e:7a:38:c5:52:75:e0:1c:
d1:f9:86:5e:ba:65:c2:d7:6c:fa:76:fe:bd:ed:8a:
77:6d:43:66:71:b9:df:b2:b1:67:ba:81:e0:3f:12:
2c:68:1f:5d:d2:24:23:6c:b4:66:f5:62:fa:f4:23:
54:a8:ea:a6:e2:2c:e2:cf:ab:c5:25:ab:90:aa:72:
bd:a0:cb:49:d5:7b:26:c2:98:cc:a1:52:a8:f5:89:
67:a6:c0:1f:f3:a5:03:f4:a3:39:b3:9e:ad:e4:d2:
97:0e:59:5a:7a:57:79:c3:f4:8e:55:2a:d2:a3:9c:
2c:2e:8b:e6:28:94:70:ed:8d:e5:de:e6:13:96:e5:
0c:fe:20:90:ca:68:a7:d2:81:96:3a:16:04:54:8c:
e3:e5:fb:6a:56:a1:89:8e:69:4b:89:31:04:ec:0a:
03:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B4:8A:E9:0F:AE:3E:70:A6:84:01:87:6B:6E:6F:57:2B:39:16:5F
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6a:c8:c3:35:ae:22:d5:90:e6:a0:01:9f:c0:f2:8f:14:7d:
52:3c:ce:ee:55:14:e0:fd:9d:0a:85:e1:f2:b5:29:9c:2c:62:
44:d6:22:6a:22:13:26:64:27:17:30:62:0f:66:15:e3:e0:dd:
93:75:57:31:dc:7d:3f:a3:a7:06:52:34:f6:a1:3f:1f:c7:2c:
60:62:3c:79:47:72:f0:01:24:3f:80:26:29:ed:6e:91:a8:40:
c3:eb:76:48:77:32:d3:28:67:38:f8:8e:02:60:bb:c4:5c:2b:
cc:d4:eb:c6:90:16:19:f2:59:a5:4b:47:d5:f7:d5:94:f7:af:
0a:e6:ff:b2:83:ff:d5:fc:9f:53:c4:9e:25:34:64:92:ac:42:
db:ad:f3:00:9b:56:5a:68:1a:05:3f:41:e3:86:a7:97:b7:6d:
64:17:83:16:92:bc:15:07:5b:e1:62:bf:64:7b:a3:e1:26:76:
f2:77:e3:ea:ce:b5:66:a1:a0:f1:17:95:6c:8d:5f:99:34:4d:
e9:5c:14:29:c9:1e:a7:c5:af:f7:73:cc:95:b5:3a:76:67:6d:
c5:30:0f:57:17:93:59:e9:42:c2:af:8a:55:7d:2b:09:36:d8:
df:dd:1b:fd:43:47:f8:56:59:f2:bd:47:21:9a:30:eb:b5:9a:
a0:ca:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:34 2025 by rpki-client