Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: Ae7OpdUETXCVxHrqC5S4Bfnofbps0pS3eWYD29/C2Zw=
Subject key identifier: 47:86:C9:AF:76:48:F7:FE:4E:40:4C:6B:30:57:8F:39:0C:FC:41:C6
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 0197B6A1FF49DCEFB2E307A378C5A34D1AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0C50
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: DLstc3U0rg1XJMzpW3kLJk6bWww.roa (hash: aRJQLolF5fKnY48Uu+tEP6pfOTPeicajt7bpyIpZajQ=)
2: hw5zWhZ37cy3fl-F4c6L7KinXWA.roa (hash: JVVK2E4Q0U9kLmKrr7lDfe4ry5wJQg7f4zL2c9LIRlo=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: wccWAp78IfmXiuzhulV7VzQd//UQkoJ+B8AJ7NvLGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ff:49:dc:ef:b2:e3:07:a3:78:c5:a3:4d:1a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=4786c9af7648f7fe4e404c6b30578f390cfc41c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:ca:df:18:b9:18:27:c3:30:90:21:ab:7a:
88:49:99:34:c0:7d:dc:32:f8:3f:8d:16:7c:17:51:
99:46:b8:e9:82:21:d1:d8:f2:1e:38:e9:41:f0:5f:
7d:ff:c8:a6:2d:53:48:a9:7d:bd:e7:e5:aa:41:1c:
94:22:46:d1:e3:8d:ed:b0:3f:5a:9c:cb:46:48:55:
86:eb:e2:fe:bf:1f:a5:12:c4:fa:04:0d:32:39:9a:
e6:98:4a:f4:e6:05:33:ce:5a:52:8f:d5:14:9e:66:
dc:30:0b:81:89:5b:fc:43:1e:73:34:f0:28:be:21:
a8:56:28:de:3c:b3:b8:ad:a0:fd:c8:98:fe:24:c3:
e2:14:10:54:be:62:1f:ca:d4:22:09:3d:54:4e:ce:
20:d5:b6:7b:fa:fd:7e:59:85:bc:82:e5:c3:bc:2d:
7c:d4:94:78:6f:28:d7:ae:67:bd:c0:d2:fa:7a:b4:
08:98:7c:9d:83:0f:c1:20:2f:9a:0b:3c:40:3e:c7:
2b:f8:30:2f:77:bc:b9:8b:7b:37:90:83:c9:23:29:
d8:88:5f:6e:b0:c9:3c:a9:09:ab:d7:3d:1c:d0:14:
92:25:3e:e9:7c:8c:0a:82:db:16:3e:23:ad:59:67:
ba:a0:14:28:46:17:19:3f:27:57:0d:cb:14:0e:cb:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:86:C9:AF:76:48:F7:FE:4E:40:4C:6B:30:57:8F:39:0C:FC:41:C6
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e1:f0:aa:e5:f6:f5:31:7d:87:3e:d7:36:74:12:ed:2d:dc:
43:46:3e:3f:69:48:f3:fc:86:c1:06:b2:13:9d:1a:b8:30:ba:
dc:3c:db:dc:89:f6:a7:96:12:9a:24:e7:09:f5:e8:47:28:f3:
a9:4a:c9:14:2f:41:85:ff:f3:65:73:6c:d3:c0:97:a7:6a:8c:
a8:b9:da:18:b2:f8:eb:bb:17:d4:06:cc:80:76:aa:de:88:e2:
d6:c3:6e:65:a6:2a:f5:6a:60:ab:a7:03:8d:0e:6f:e1:68:4c:
92:26:c5:e0:b7:7d:ce:8e:04:b0:51:38:29:5c:f5:85:6d:fb:
f3:dc:af:02:e8:5a:15:cd:a8:26:79:48:45:d2:76:8f:8f:a6:
3e:2d:4d:03:da:05:ac:a1:4b:66:5c:54:6d:9e:90:bd:ca:d7:
4a:bc:a5:32:7b:94:c7:a7:be:57:cb:b4:71:bc:8a:76:6d:29:
5f:4b:a0:39:fc:e1:1f:95:b0:48:f3:cd:0f:56:d4:18:dc:a5:
c0:12:12:93:ae:89:30:4a:fe:20:84:98:9c:2c:89:b5:17:88:
6d:dc:85:10:29:95:ac:a3:b5:b3:c1:99:6f:f4:e5:a9:15:ea:
d7:41:a1:71:46:36:48:0f:43:db:2a:b6:ff:c5:c4:cb:5e:74:
f8:bb:ea:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:27 2025 by rpki-client