Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
File: pPC-25eOGSjR6XDKLtlpNxGP_2g.mft (raw, json)
Hash identifier: s2GUMDB9ZZNhd/+V/FayT7ywEM4aiRBBqdUo8Mim+pU=
Subject key identifier: 33:46:67:06:A4:61:AF:28:D9:1A:D3:38:41:41:A7:2D:98:C2:06:2E
Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
Certificate issuer: /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Certificate serial: 0197B820CCC66FB3E05B2786D39833B6C429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
Manifest number: 0F37
Signing time: Sat 28 Jun 2025 20:00:46 +0000
Manifest this update: Sat 28 Jun 2025 20:00:46 +0000
Manifest next update: Sun 29 Jun 2025 20:00:46 +0000
Files and hashes: 1: 9p8e9WoA4C2DPVeIchZFPcz6XaE.roa (hash: 08xeCtquw3Dlp/xIPaCDCsu7UXWt+ysM9TiqCqTDfRY=)
2: pPC-25eOGSjR6XDKLtlpNxGP_2g.crl (hash: lygp1NONw/2GMnuD7XLe+oxHrQbJRY/FM6umOVGB3vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:cc:c6:6f:b3:e0:5b:27:86:d3:98:33:b6:c4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Validity
Not Before: Jun 28 20:00:46 2025 GMT
Not After : Jun 29 20:00:46 2025 GMT
Subject: CN=33466706a461af28d91ad3384141a72d98c2062e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ea:23:eb:5f:ff:8a:27:52:cb:43:81:ce:08:
4b:47:5f:54:07:05:c5:ab:fd:69:08:67:c6:73:30:
ae:b5:40:b6:c0:2d:6e:48:e6:fe:99:f9:f8:1b:cd:
41:b9:3d:b1:4c:f8:5a:31:28:57:f5:d0:39:28:89:
ed:2c:98:1f:d8:f0:cf:fa:1c:a9:39:6f:a4:48:11:
96:98:1a:c8:c9:f7:6a:16:a5:dc:89:74:9b:5b:9a:
8e:a9:22:18:8d:04:3e:25:cb:3d:50:73:1c:8d:c1:
f4:a4:4f:7b:ed:2c:fe:b5:b6:8f:40:a5:5b:43:ee:
c2:7b:16:65:9b:4c:15:eb:bd:fb:2e:28:b5:72:ee:
d3:76:25:54:6f:7e:49:07:ed:85:ed:27:0f:d5:a5:
a6:af:91:22:32:4f:6e:e3:01:7e:b3:26:83:f6:d5:
ba:c8:20:70:87:23:45:3f:10:fd:4e:61:37:e3:45:
cd:3d:f2:a8:a9:cd:71:d5:88:e0:b6:81:a0:4a:fa:
6a:a4:3f:a8:11:8f:e5:9d:2f:70:04:65:cf:0a:6c:
8f:97:8e:77:5f:46:8b:e0:67:2c:8d:b2:43:a2:97:
68:4f:14:16:74:d0:0f:8f:4e:79:bf:19:55:b7:a9:
06:2f:95:b1:9c:be:bd:dd:a7:3c:d9:84:b9:bf:77:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:67:06:A4:61:AF:28:D9:1A:D3:38:41:41:A7:2D:98:C2:06:2E
X509v3 Authority Key Identifier:
keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cc:72:e5:be:61:b0:cc:4d:4e:33:ee:c4:09:36:30:bd:9f:
80:68:0f:2e:06:f3:62:23:74:59:81:10:c4:ce:da:0b:62:da:
24:68:cd:79:a6:41:c1:07:11:a1:00:7f:e9:e7:26:7d:e2:5a:
07:c3:98:f1:c9:9a:ab:85:32:66:65:6e:74:35:3e:56:13:ab:
c9:c5:22:b8:5f:b0:1f:5e:7b:32:15:20:c5:86:88:6a:61:91:
87:dc:88:1d:53:cd:21:f2:89:e1:1f:e4:b5:95:8d:00:30:21:
20:7a:1e:88:e9:e0:f3:e1:82:0d:fa:05:c5:03:46:9d:4d:38:
c5:0a:96:21:c3:0f:5d:35:be:77:49:6b:7e:e5:ac:36:01:e4:
3c:4e:93:af:38:1f:85:2c:28:78:fa:3f:35:bf:49:7a:8e:fa:
8d:3f:05:a1:91:20:39:9a:8d:a6:77:ac:cf:26:92:45:6f:e3:
a5:04:1a:a4:33:83:d7:b2:4d:39:52:58:4d:e7:8f:fd:f2:44:
b9:86:0e:bb:ef:65:95:de:4b:03:6f:24:ea:de:54:7a:20:01:
26:18:04:67:99:87:b1:7f:f7:fc:90:f2:aa:39:57:1f:17:77:
92:16:e4:b9:9c:3b:e8:50:bd:35:7d:ad:22:1b:96:09:ac:b6:
c9:bd:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:58 2025 by rpki-client