Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: t3ey5b/Oe18wmAqP8rDw0D8J51sUd8vjhXASfMZ3DH4=
Subject key identifier: 55:BA:02:40:13:7C:0D:4A:39:AC:89:08:FF:F0:E7:E5:B5:B3:59:C4
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 0197B70E904FD4ED789F31CDF88F06612F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0B28
Signing time: Sat 28 Jun 2025 15:01:14 +0000
Manifest this update: Sat 28 Jun 2025 15:01:14 +0000
Manifest next update: Sun 29 Jun 2025 15:01:14 +0000
Files and hashes: 1: kORzGbUwfQz_reUfKxE-VKML1Ko.roa (hash: LJNSK27C7NQtNI1BCy3DsB/OzJxofkAzOY3Bw0ai+Lk=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: jsVWXBexImmatFAcsqOnhSZeCP1caRLKrFgC9G+AMXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:90:4f:d4:ed:78:9f:31:cd:f8:8f:06:61:2f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Jun 28 15:01:14 2025 GMT
Not After : Jun 29 15:01:14 2025 GMT
Subject: CN=55ba0240137c0d4a39ac8908fff0e7e5b5b359c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:1e:ac:62:a6:4c:04:54:32:b7:0c:14:52:
cf:0f:e2:9d:5d:89:77:2c:d1:e1:33:8c:fa:78:1b:
36:35:4d:34:9e:5f:08:ef:19:29:13:c7:b4:06:57:
3a:eb:68:da:03:60:ef:6e:04:d4:2a:eb:63:aa:06:
6d:41:8d:b3:c6:0f:dd:d0:91:65:65:60:38:8d:4b:
2e:4e:f6:19:60:10:ff:66:7b:83:8e:a7:fe:c6:6d:
55:ba:6b:5a:d1:3d:59:84:c4:29:60:c3:8d:13:b0:
c1:48:0d:8d:b0:1b:7f:b7:bb:21:f0:3b:4b:79:c4:
84:1e:ea:0c:1f:d8:b2:db:94:0a:78:72:e2:c7:d5:
ae:c1:6e:1e:af:1c:fa:fd:e4:97:cd:a7:91:b6:dd:
61:7f:27:32:c9:61:39:20:df:6a:b5:4f:e0:ce:8d:
74:46:60:d6:b1:a8:8d:df:01:c8:24:47:b5:c5:86:
65:91:58:f2:87:6a:7b:fa:fd:a7:81:ab:cd:fe:e4:
63:5e:9b:61:a2:df:6c:56:7f:42:79:8d:c1:7e:0e:
20:10:ea:15:bb:d3:11:03:ef:f7:49:26:13:b2:e6:
0a:d6:a8:81:50:b1:89:de:31:43:9d:1a:63:be:51:
c1:0c:25:5c:e8:79:a3:86:e6:e9:9d:88:25:cc:9c:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BA:02:40:13:7C:0D:4A:39:AC:89:08:FF:F0:E7:E5:B5:B3:59:C4
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7c:3c:67:d7:58:fc:cb:1c:1c:db:5d:a4:1e:a0:97:b9:15:
90:18:0e:ba:a3:a1:14:5f:3e:1f:34:f8:b7:2b:e8:12:0e:05:
cc:32:f1:aa:37:a2:7f:54:6e:ba:4e:51:2d:2a:4c:e0:95:c2:
73:91:65:29:bf:88:69:73:4b:8a:fc:ab:c4:f5:50:ed:87:3f:
eb:d5:a9:b2:6d:a7:12:e2:60:e4:c3:6d:9b:45:84:87:ab:90:
31:a8:7d:87:1e:b8:ba:fd:93:b9:ef:f8:db:91:10:14:01:f4:
e0:58:4d:b7:56:7a:e3:30:36:4c:08:d8:9b:33:c2:0a:42:74:
51:0c:d7:51:0e:b5:9e:6f:4d:33:3d:bb:3b:17:6d:e2:41:42:
6e:ac:e7:62:64:73:e2:31:01:25:27:e7:5e:8c:7a:cb:57:ea:
51:f0:ad:02:81:72:56:54:6e:c4:2c:24:e0:43:79:6f:8d:5b:
39:13:ca:d6:aa:63:e7:9d:7c:92:fc:47:34:cb:1c:0c:a5:05:
58:29:b7:ee:45:a4:18:8e:73:05:68:84:40:f4:2a:83:87:96:
40:aa:8c:90:14:18:37:b2:72:6b:38:b7:2a:5d:76:52:a5:b7:
97:fb:52:f5:e1:ca:c0:cf:21:ce:c3:99:6b:85:b7:58:7f:87:
c4:6b:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:48 2025 by rpki-client