Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
File: PqU6yajcRG-34BE7aLOOlwwZ98w.mft (raw, json)
Hash identifier: MVoSwKT39lEHhUGB0bcTbOmj3Oe3kjioHeSItw4gVLk=
Subject key identifier: A0:77:FD:D5:BD:8E:73:62:70:DF:B9:F5:F7:B7:01:95:FE:77:A8:02
Authority key identifier: 3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
Certificate issuer: /CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Certificate serial: 0197B7B337E84DD3D74292713ACFACFC3C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
Manifest number: 1543
Signing time: Sat 28 Jun 2025 18:01:05 +0000
Manifest this update: Sat 28 Jun 2025 18:01:05 +0000
Manifest next update: Sun 29 Jun 2025 18:01:05 +0000
Files and hashes: 1: PqU6yajcRG-34BE7aLOOlwwZ98w.crl (hash: d1krpAWb95Tfvvd+9T6UgpS2fGOf8UqKbCayCWGiMMA=)
2: ZFcvFlhDWryyoXWXMpIDlrIOANM.roa (hash: vf4LDljSHDeogKMO6SAS7Y9xTDtYGGINc31+p97CZuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:37:e8:4d:d3:d7:42:92:71:3a:cf:ac:fc:3c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Validity
Not Before: Jun 28 18:01:05 2025 GMT
Not After : Jun 29 18:01:05 2025 GMT
Subject: CN=a077fdd5bd8e736270dfb9f5f7b70195fe77a802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:c0:fc:e5:90:32:01:43:f4:41:2f:47:e5:
93:f7:59:69:ac:5c:27:4d:82:2e:f1:83:60:0c:9d:
4a:b2:50:7b:af:b5:2f:e9:43:c7:26:bc:46:4a:0c:
ef:9f:12:d8:3e:7b:0b:19:85:32:94:73:ee:5d:31:
e4:57:99:92:6e:40:64:44:f2:be:43:a6:0f:be:57:
53:ac:ca:2b:bf:5c:d7:6a:a8:90:b7:69:87:13:ee:
d2:00:56:bf:d5:19:e2:45:c6:0f:34:70:46:1a:38:
d9:4a:fd:8b:46:3a:0a:96:4d:02:11:bc:3f:6f:44:
0d:47:aa:39:2a:3c:07:ae:bf:5d:97:42:a0:e5:4e:
20:b2:7b:3b:4c:13:3a:25:98:7c:5e:1a:1f:1a:fa:
d0:cb:23:55:50:1b:4d:80:d0:9b:43:e6:83:73:a8:
70:a1:e6:f2:d6:d8:f7:dc:05:f4:02:0d:ea:6b:84:
4c:09:75:0a:42:2f:67:71:11:e5:bf:18:81:71:19:
03:e2:16:1c:e5:10:52:9e:52:c0:78:ea:31:ff:f3:
a3:74:bc:81:5a:e5:8a:a4:41:78:aa:79:9b:24:34:
9a:b9:0c:62:2f:9f:8e:77:18:cb:74:8a:b3:cc:d7:
d1:03:5e:9e:e5:9c:96:6e:a6:0c:18:b4:98:ae:fa:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:77:FD:D5:BD:8E:73:62:70:DF:B9:F5:F7:B7:01:95:FE:77:A8:02
X509v3 Authority Key Identifier:
keyid:3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9f:09:80:c7:14:e7:2a:5a:97:48:e6:9b:53:50:cc:1c:29:
46:5b:f1:97:93:53:f9:d7:f8:30:d2:2e:cd:02:5f:e2:f5:5e:
98:f7:cf:29:cf:10:2e:7d:ae:ad:5e:2c:5e:9d:6f:c4:8f:a3:
4d:ae:ab:b2:71:b9:05:c3:40:79:9b:33:91:65:ea:86:89:0e:
3c:00:89:52:ea:a7:f1:0f:46:a3:65:84:f3:8b:2b:52:45:f3:
06:a0:30:b4:c9:1e:d2:53:89:48:23:1b:7f:0d:a0:0e:b2:be:
9b:28:79:cf:08:64:02:3e:79:67:b1:e4:57:4f:7e:cc:85:25:
11:15:3e:ab:69:b5:b4:11:5a:ba:da:7b:72:c7:b5:13:e4:4e:
62:29:a7:21:f8:4c:75:08:ab:0a:f2:f9:1d:8c:26:b8:1e:8c:
d4:2f:2a:b6:e5:67:45:af:26:9b:ee:ea:5e:0c:2d:d0:4c:3c:
e6:cd:9c:bb:2d:79:92:da:a0:90:a2:00:1b:75:17:ab:01:56:
66:fb:31:02:01:da:16:f9:33:62:9f:a6:d8:10:e3:53:d1:76:
1b:3d:ab:7a:be:b1:fb:b5:d9:33:39:0a:9a:c6:26:bd:9d:99:
3c:3e:f8:15:1a:2f:95:83:a8:50:e2:ac:d5:ee:f0:fe:88:4b:
73:0b:ca:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:54:04 2025 by rpki-client