Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier: 8rCFlN+hipuro2uBU3zVVnIsxZWbRDbcI5NOIkexLt0=
Subject key identifier: 44:4B:DF:17:BD:E7:C6:A3:86:28:2F:3E:0C:DE:3C:55:FD:9E:9C:06
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 0197B7EAC7D7D8624574FFD69D86BB21C5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number: 06A3
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: YH9rgvwa_c5tkfoIds2w3LcyxQU.roa (hash: O5b96K5UqDPwtmiTY4ipuOfWppIds6W4j/eFK50+Z/0=)
2: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: Qvle1Qo7n/NG38PePcR3C/cECwb8ThvwcQyPhVwsNYo=)
3: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=)
4: vi8z9iHTOaB2FWHQdJejTeAcw5Y.roa (hash: TDy4p0/0R2wjKaBRPb/eq3sprSVIkaJesmw7dyJ2VEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c7:d7:d8:62:45:74:ff:d6:9d:86:bb:21:c5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=444bdf17bde7c6a386282f3e0cde3c55fd9e9c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:18:dd:41:94:92:18:97:49:21:13:83:a5:
a7:b9:f2:d4:56:ce:f5:bc:0f:fe:6d:84:1c:1a:f4:
b9:2f:6b:95:c2:96:03:29:fe:df:8a:f1:2f:1a:ad:
c5:77:70:b7:86:b6:9b:7c:8f:1d:7e:ea:8a:74:05:
d3:4a:1e:7e:7b:72:04:d2:07:f6:27:9f:f0:a8:99:
c8:83:c6:f5:44:4a:e2:32:96:55:af:31:37:6f:78:
22:1a:12:50:b7:19:d2:a5:19:24:89:01:9a:fa:7b:
44:2d:38:4d:6a:78:3e:f0:df:57:28:0f:34:ce:b8:
cb:a5:64:6d:5b:a8:80:55:81:09:f3:5d:8a:9a:b0:
7a:51:e9:e1:f4:6f:1e:b2:0c:9c:6d:75:59:3f:be:
52:33:27:aa:ca:61:b6:e4:48:af:08:80:b7:a8:0a:
61:ad:b9:3e:c5:eb:05:bd:13:81:f8:58:f9:14:48:
9f:9f:57:c4:8f:dc:90:76:40:19:93:a9:db:bb:eb:
83:d4:aa:34:3b:7c:09:a8:5e:c0:eb:f2:63:47:de:
34:1a:d6:b0:c9:18:c0:b9:ec:21:6a:90:57:eb:8a:
3d:a5:16:15:9a:40:13:37:2b:a1:49:9f:30:25:d7:
ee:0b:a2:29:13:57:f7:fa:90:ad:5d:8c:8b:ec:91:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4B:DF:17:BD:E7:C6:A3:86:28:2F:3E:0C:DE:3C:55:FD:9E:9C:06
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ee:fd:b1:c2:b4:c5:cd:0e:c5:7a:23:bb:88:2a:f4:ef:58:
3b:1c:7d:38:6b:37:ce:ee:62:a7:27:d0:ab:bb:88:12:15:c7:
1a:ed:b0:f2:05:79:9c:18:f5:0e:a5:71:23:83:34:3f:b2:90:
66:a3:7e:23:fa:53:81:69:49:9c:5e:fb:5a:7a:e4:e1:71:0d:
21:18:f5:2c:50:73:33:25:67:87:4a:cc:a9:c8:b5:27:1e:56:
49:95:59:3b:c0:03:84:dd:68:aa:88:40:9a:1f:6a:e2:10:55:
5d:b0:8a:3e:e9:8f:ca:9e:41:5a:82:25:1c:a2:af:e9:fb:e3:
f3:33:b5:1c:c8:7a:19:31:04:25:4f:d7:d2:c2:e4:88:38:9b:
6b:8b:fd:8b:51:cb:5d:b5:d5:08:09:59:88:b4:87:74:8c:e6:
7c:ee:df:b9:38:a3:ae:51:d9:46:8a:0e:91:6c:98:66:94:69:
aa:cd:30:77:b1:2e:be:85:24:b2:0c:3a:71:13:c6:12:e3:fb:
03:49:ee:af:c0:3f:25:58:cb:93:5c:70:e3:76:ea:2f:3c:22:
b3:5c:2c:fb:cf:c5:2e:70:72:db:50:a4:b9:f0:76:7c:37:da:
bd:aa:74:cf:6b:3e:14:73:52:ee:07:4a:1f:d4:f6:22:2b:43:
7a:e7:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:37:26 2025 by rpki-client