Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
File: _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json)
Hash identifier: fuJy5vYSpGBu3bA17Hriwaq4kLtMY0ZuAeoFP5hRtrU=
Subject key identifier: D6:4D:96:31:A4:A4:E1:AE:0D:2F:15:2C:2B:6A:6F:E6:05:EC:74:08
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial: 0197C613DC7566F4BAB7CFD611A144DCAF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
Manifest number: 0F28
Signing time: Tue 01 Jul 2025 13:01:19 +0000
Manifest this update: Tue 01 Jul 2025 13:01:19 +0000
Manifest next update: Wed 02 Jul 2025 13:01:19 +0000
Files and hashes: 1: FsJZX9GGj2A1me0tekd7HmtKIf4.roa (hash: wa9LmtrA5IFHkOGKHcF70x4E1HktC1RNDhObryrXOsE=)
2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: 8j7f5xomeKzp4yiCfgEe4+7c01Y1fkcdkLTHBL+j5Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:dc:75:66:f4:ba:b7:cf:d6:11:a1:44:dc:af:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Validity
Not Before: Jul 1 13:01:19 2025 GMT
Not After : Jul 2 13:01:19 2025 GMT
Subject: CN=d64d9631a4a4e1ae0d2f152c2b6a6fe605ec7408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:bf:d0:46:f7:73:5c:7f:b3:c8:c1:0c:6e:
81:14:90:76:77:d1:63:16:24:a3:3b:b3:91:c4:8c:
17:da:c8:42:dd:db:63:19:a7:b2:a8:cb:16:53:6c:
2b:21:30:56:37:39:31:de:82:ce:d4:8d:73:c6:b4:
89:e6:81:af:79:55:a3:3b:84:8f:65:5d:cd:b0:76:
04:6c:95:ce:d1:d7:41:0b:47:cc:16:3d:8f:fc:f7:
84:38:ef:f3:43:7c:09:45:6a:a1:07:d7:d7:1f:38:
b7:5b:7d:bd:17:82:5e:83:17:27:d0:1d:c2:0b:3c:
5f:70:c6:73:3d:29:95:9c:04:3d:87:83:f7:bd:c5:
1f:8f:53:40:41:7b:58:3c:13:82:05:7b:50:ab:5f:
8a:a1:2f:60:98:34:e3:9d:2f:66:ea:27:f8:85:f5:
78:b4:11:1c:07:d2:32:88:8a:13:0c:95:95:53:ae:
f6:6e:37:39:74:40:43:3a:f3:9e:60:b4:c1:3f:5b:
10:2a:c1:d9:c7:54:00:d7:28:f2:5d:df:94:78:05:
ab:5c:66:ca:0a:20:25:1c:67:b3:15:06:10:bf:b9:
30:29:54:16:ef:8a:5c:f5:87:03:63:a5:b5:a0:b6:
43:a9:cd:60:07:29:dd:13:f6:76:2c:37:90:b0:47:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4D:96:31:A4:A4:E1:AE:0D:2F:15:2C:2B:6A:6F:E6:05:EC:74:08
X509v3 Authority Key Identifier:
keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:91:d4:44:c7:42:41:ae:a0:85:d8:2b:b0:30:67:f3:c6:67:
a1:ba:fb:4a:58:73:98:3e:1b:e0:ee:7b:8a:98:58:aa:3b:94:
cf:94:12:bb:69:2c:6c:e9:c7:4a:52:42:cd:78:07:e8:d4:55:
dd:54:ad:a1:23:7a:b2:8a:01:2a:c9:bd:8d:37:c8:72:37:22:
9c:ab:84:6a:9b:da:17:87:35:f4:b3:26:36:92:b0:eb:19:86:
1f:af:8b:25:7a:f9:fd:75:1a:ee:79:5c:bd:52:f6:f6:4c:54:
f9:ee:59:88:fd:60:02:92:26:5c:33:af:c2:38:cd:4a:76:0f:
a2:79:a1:b9:59:6e:a0:36:43:5a:27:6a:7e:37:59:f7:4b:6a:
6a:83:86:55:e6:46:b7:7a:6a:87:b1:13:1b:ad:2c:75:f4:80:
ef:a7:96:c9:bf:5e:e0:ea:81:c3:5f:be:20:6d:86:b8:c0:3b:
59:2f:13:90:54:09:4f:f6:0f:f3:a1:e8:43:58:c6:15:f6:c5:
58:15:38:96:a6:da:cb:33:45:b4:87:27:59:31:94:8e:b4:1a:
82:e8:d9:31:15:f2:55:85:4a:73:c9:7d:19:23:8f:34:87:72:
18:a9:25:bf:31:17:4f:c5:9e:79:15:44:6f:f5:19:bc:d7:8f:
ed:42:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:01:48 2025 by rpki-client