Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: l8jSM/E/4LIXkic+BgkoRw5ij/GYPABuQ+2Ikcw/0BY=
Subject key identifier: 7A:C3:97:5C:D8:7B:1D:57:81:4E:39:B0:4F:68:81:24:1E:3F:4A:3D
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 0197CA94F5DCA426C0A649E2E6ED9F9DC097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 0DED
Signing time: Wed 02 Jul 2025 10:00:49 +0000
Manifest this update: Wed 02 Jul 2025 10:00:49 +0000
Manifest next update: Thu 03 Jul 2025 10:00:49 +0000
Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=)
2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: wM6zp+JtEP54wTLBzqlZtHytN1w8hoFHUDonTnWRc9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:94:f5:dc:a4:26:c0:a6:49:e2:e6:ed:9f:9d:c0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Jul 2 10:00:49 2025 GMT
Not After : Jul 3 10:00:49 2025 GMT
Subject: CN=7ac3975cd87b1d57814e39b04f6881241e3f4a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:b8:d0:f8:56:50:85:00:e9:f3:56:03:89:
07:62:54:90:88:22:be:2a:b9:f9:64:33:8b:8f:91:
15:2c:fd:50:97:33:22:43:e6:e7:3c:34:97:f9:26:
20:c8:b8:79:f1:a4:3d:96:55:c3:8f:84:2e:a8:1a:
f2:f2:29:07:cf:eb:92:b6:6a:4f:01:86:0e:88:d5:
a3:90:dc:b2:04:d4:3a:1a:58:9b:09:72:28:b2:9d:
0a:6c:d3:36:f1:8f:3f:81:cf:0b:a5:bf:54:48:9b:
56:e3:07:3c:14:f4:0e:73:34:ce:35:2f:df:2a:95:
33:da:5a:b6:44:18:9c:c0:c5:30:d5:2c:d4:d0:ca:
8a:b2:3d:50:64:c7:64:cb:a8:27:d4:e6:89:29:80:
fc:9e:51:5f:d9:93:58:09:81:e6:92:85:fa:de:4a:
ff:f8:6b:44:d1:3a:9d:89:d2:1e:6e:2f:60:3b:db:
a9:56:cd:bc:2e:60:84:63:75:ee:4d:b2:5b:98:d6:
b2:5c:1b:22:10:33:d7:81:c5:52:14:41:e8:98:c4:
bc:89:89:a1:78:29:ff:f2:4b:40:4d:91:6d:c8:e4:
70:4f:c2:10:d5:5b:f1:8b:ee:58:66:13:17:74:1a:
03:e5:91:fd:84:e2:8a:3a:cf:d5:b6:a7:a2:79:89:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C3:97:5C:D8:7B:1D:57:81:4E:39:B0:4F:68:81:24:1E:3F:4A:3D
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ea:8c:43:8b:8a:7d:a2:b6:06:eb:5d:ef:4e:5b:ca:fb:f4:
99:d6:d7:f3:f4:7b:dd:cd:cb:0c:3f:fb:52:a5:a4:8b:7d:f1:
11:73:d7:52:7b:65:60:84:2f:09:17:26:bd:01:9c:e8:9e:bf:
bf:42:6e:ad:e9:5a:f9:81:dc:f7:7d:47:52:70:d9:20:e6:7b:
cc:e9:c9:be:8d:0a:20:3e:e0:c0:3a:ad:d4:15:cf:1d:7d:a3:
cb:89:b6:8f:d4:be:30:e1:91:4c:ae:6e:c4:68:d5:d1:6c:c6:
f0:71:c2:f7:95:85:b7:64:28:3f:a0:fd:3a:a0:c8:49:92:a5:
ce:df:c8:d7:4a:98:59:35:7e:6b:3f:2d:4b:e7:34:ed:78:ef:
33:59:0f:18:91:fe:88:d1:48:2e:72:2c:46:8f:d8:22:38:9b:
36:f9:fd:bc:d5:df:41:03:5c:ce:6d:95:6a:ad:e3:22:3f:ae:
d2:6c:1a:f0:3a:74:f8:8d:39:21:a5:29:cd:f8:bb:38:3e:ba:
a4:33:9e:b1:ad:91:64:ac:6c:2e:55:f9:e2:54:40:59:c4:ec:
5d:27:20:20:44:88:b1:d1:f3:6b:83:4d:2e:46:bb:97:ec:d3:
5b:2b:1f:70:61:f1:3f:5d:ea:94:52:76:d0:5f:d6:06:24:9f:
57:73:aa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:35:16 2025 by rpki-client