Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: pdDqZv4itHy2nfzzgC4s2KpSrI78b6vcfa4kM4wwvuY=
Subject key identifier: C7:67:F3:57:6E:63:31:95:F7:75:4B:4B:C9:C8:D8:2B:AD:5E:02:A3
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 01975535A251E8CFFDBF9C1983AFB877EF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 15:01:07 +0000
Manifest this update: Mon 09 Jun 2025 15:01:07 +0000
Manifest next update: Tue 10 Jun 2025 15:01:07 +0000
Files and hashes: 1: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (hash: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: Y3s3KSNwYzdmS3pkmYHULr0IrfMRkfjM3n1kbXCTXLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:35:a2:51:e8:cf:fd:bf:9c:19:83:af:b8:77:ef:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Jun 9 15:01:07 2025 GMT
Not After : Jun 10 15:01:07 2025 GMT
Subject: CN=c767f3576e633195f7754b4bc9c8d82bad5e02a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:16:5f:c6:fc:46:77:d0:41:fa:c5:29:be:
2f:97:15:4d:60:a2:20:6a:51:b8:7c:fa:e3:b1:5b:
41:82:aa:0c:60:7d:3f:f4:aa:05:76:80:84:6f:bc:
b5:5c:23:b7:28:bc:0f:34:87:db:11:5a:e6:1d:0f:
e1:32:93:b5:01:f5:84:29:f8:c8:c0:35:98:26:a9:
da:f8:99:12:1f:fb:71:09:c0:32:56:25:51:14:0b:
dd:84:f4:80:6f:13:da:76:ed:9d:61:ab:a2:11:7a:
54:a1:95:84:92:8c:16:fb:ad:a8:60:25:1c:33:11:
99:a7:01:22:8e:b7:28:89:f7:a6:f5:b6:e5:bf:ed:
50:50:4e:69:dd:84:d3:5a:99:64:a6:ac:78:39:70:
b5:c8:d6:42:75:c2:1b:e5:37:9c:18:f4:e4:3b:89:
95:b1:23:5e:2b:ec:1f:34:03:13:d2:b8:87:97:78:
43:ff:49:ff:2b:52:c2:0b:65:46:ab:08:c0:0a:5f:
ea:fe:88:3f:c6:29:16:f4:91:63:f1:e9:b8:22:55:
bd:b8:88:ae:78:e7:08:e3:15:f0:e2:b2:a8:a2:a5:
b3:24:6d:eb:80:6e:f4:80:64:f1:30:c3:32:21:8c:
43:29:01:af:29:90:69:7b:cf:7f:56:ee:e5:58:36:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:F3:57:6E:63:31:95:F7:75:4B:4B:C9:C8:D8:2B:AD:5E:02:A3
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:63:da:40:d5:8e:79:d4:4a:ea:1f:d8:21:ab:c4:87:e1:ea:
6b:07:1c:76:c9:df:48:ee:df:26:88:25:5d:45:b0:fc:05:f6:
c7:36:61:fa:a3:61:28:af:cf:77:1e:6b:23:92:80:92:71:a9:
43:7d:e1:8d:41:b9:8d:c0:f9:0c:6d:47:9b:8d:cb:d5:5d:8c:
89:26:ed:0e:f0:29:56:2d:6b:0a:f2:4a:eb:92:68:87:a1:af:
d1:21:63:da:c2:8e:06:4f:5e:21:29:f1:27:32:33:bf:e7:e0:
e5:c8:63:5e:cd:60:0a:66:24:32:89:84:09:41:07:9a:df:29:
77:19:08:8a:c8:fb:13:c0:07:62:51:8f:e3:a7:3b:05:57:bb:
8f:c6:6b:cc:bd:f7:19:c5:27:fe:17:5c:c9:82:d5:7f:ec:64:
38:49:13:3c:07:a2:92:dc:a1:f3:a7:6d:8a:8c:c7:08:b8:12:
a1:45:d5:76:af:15:83:70:2c:eb:1e:0c:df:2c:5d:eb:77:ed:
93:7c:92:fb:e6:33:08:75:b1:3e:ac:32:c7:84:6b:bb:eb:6a:
68:bd:d0:71:79:2e:68:9b:17:db:30:45:93:15:6b:56:74:97:
a6:67:bf:a8:32:13:84:e6:dd:b2:3d:92:67:fa:35:8d:07:21:
9d:f9:7f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:27:42 2025 by rpki-client