Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: mAqyWrpKvOFmcZkln55QM3P5pc3R+EgfXmurV7N4tMo=
Subject key identifier: A8:2A:B4:F7:AE:1C:0A:03:0D:20:48:88:22:5F:38:A5:F5:64:D6:D0
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 01974C31F504CD3A9A0373BD956CEC8DD378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 21:00:31 +0000
Manifest this update: Sat 07 Jun 2025 21:00:31 +0000
Manifest next update: Sun 08 Jun 2025 21:00:31 +0000
Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: z66xQO2Tgp412XgPpUn3F3V7YATyRdr3QvjeCSHGu4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:f5:04:cd:3a:9a:03:73:bd:95:6c:ec:8d:d3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Jun 7 21:00:31 2025 GMT
Not After : Jun 8 21:00:31 2025 GMT
Subject: CN=a82ab4f7ae1c0a030d204888225f38a5f564d6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:9a:b8:24:68:77:35:be:a7:f8:2a:f9:91:
96:13:a4:2d:4f:2b:38:a5:c7:52:22:c7:29:dd:6e:
54:0b:78:54:ef:76:35:f9:70:5b:91:cb:d1:21:e5:
ea:e8:8a:bb:1c:e7:6b:54:ce:b6:fc:bf:6c:26:8f:
d0:0d:0e:64:e1:f0:61:da:58:a0:3b:b3:15:b8:69:
f1:03:9d:a6:7f:57:1a:ff:8f:60:b1:38:77:e6:28:
15:d0:d3:af:16:a7:7f:13:39:3c:ff:8c:c2:15:c6:
25:1b:2c:ed:13:53:a4:99:3c:bf:d4:d7:ee:87:9f:
8b:e9:09:45:61:99:98:08:26:e9:f9:b9:a7:90:59:
67:12:46:c8:aa:7b:5c:89:18:76:52:16:37:b9:46:
0a:91:5d:98:82:7d:9f:22:bc:e6:e6:7f:06:1c:fa:
b4:81:d2:35:6a:0f:5b:c8:46:37:fa:27:62:ab:1d:
3c:fa:34:04:73:2b:69:73:db:5e:d9:f2:80:92:cb:
b3:32:45:de:8b:fc:ef:0a:b8:b2:f6:48:54:96:be:
5f:d8:80:00:27:07:86:dd:35:44:7f:80:31:3a:52:
37:e2:7f:6f:16:bd:20:53:3e:4d:32:76:ce:1d:d5:
84:06:88:f0:d7:4a:5b:8e:24:c0:32:2c:79:f4:95:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2A:B4:F7:AE:1C:0A:03:0D:20:48:88:22:5F:38:A5:F5:64:D6:D0
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:14:d3:a8:f1:88:0c:b8:f0:d5:3d:27:ca:75:20:95:4c:73:
ec:94:55:26:96:c5:89:40:19:bb:45:b0:7b:0c:f4:15:28:d3:
6a:70:7d:89:b2:a2:02:7a:5a:cd:fa:f0:77:25:80:6b:68:06:
79:b5:a0:81:48:f0:49:78:ef:78:69:48:10:5f:79:d6:d3:cc:
d0:2b:99:5a:a6:b1:2c:a3:80:fb:82:b3:80:22:cb:0b:c7:f7:
9b:8c:ad:cf:9e:de:ae:ce:1e:aa:e3:51:c6:15:3c:c5:2e:e2:
04:b1:1d:29:c5:83:58:48:75:c9:02:bf:02:13:17:29:34:4d:
40:4a:c0:d7:fc:49:a2:c7:8c:bc:0b:35:ee:24:47:72:f2:6a:
a3:70:5b:53:ce:6a:3e:9b:8f:82:43:9d:38:f3:56:0e:36:93:
0d:e6:8a:88:e8:d3:02:15:5e:c1:79:31:02:6d:d6:d6:5c:6e:
fd:9f:a0:84:20:1a:b7:78:a5:45:80:2f:c5:c1:4e:99:1b:20:
d6:c5:78:97:68:cb:73:51:e5:e8:06:d7:e9:30:19:79:a6:a7:
cc:bd:80:97:36:b0:ba:d2:85:1f:37:72:a3:c7:9c:3f:71:9f:
7e:7f:62:a5:45:cd:81:07:4e:33:09:d3:60:c9:a3:0e:89:c5:
8d:5b:b7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:33:57 2025 by rpki-client