Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
File: pFzsFmCtLf53GpoSNLHRKpxbghE.mft (raw, json)
Hash identifier: LuEiFrZK+hZZaI9zBg2Et7bLg3HlSADUrdQ133srkKU=
Subject key identifier: D1:1B:A5:C1:BA:23:05:00:CC:7F:6D:22:D3:AE:DC:76:75:EB:3C:97
Authority key identifier: A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
Certificate issuer: /CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
Certificate serial: 0197CC4CE616FF51D8AAAC45D9A1C7F8A35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
Manifest number: 12
Signing time: Wed 02 Jul 2025 18:01:21 +0000
Manifest this update: Wed 02 Jul 2025 18:01:21 +0000
Manifest next update: Thu 03 Jul 2025 18:01:21 +0000
Files and hashes: 1: BI83gyIjEGBOS7ZKdoDrSv8devY.roa (hash: jLwvUyWb11PVZ3r8d/OcSHQ4Hzj4d1bbdW3f/BH7o3c=)
2: pFzsFmCtLf53GpoSNLHRKpxbghE.crl (hash: dqXER7W2caeYoDO1URpWG2klnVt+jQRvqrKSjh50OOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:e6:16:ff:51:d8:aa:ac:45:d9:a1:c7:f8:a3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
Validity
Not Before: Jul 2 18:01:21 2025 GMT
Not After : Jul 3 18:01:21 2025 GMT
Subject: CN=d11ba5c1ba230500cc7f6d22d3aedc7675eb3c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:11:7a:f8:c3:ac:f2:31:83:c5:ce:59:24:
dd:48:39:16:c4:16:0a:3a:79:98:01:61:76:2d:b3:
40:16:8f:b2:7a:fb:d9:b5:c8:f1:4e:6f:1a:74:2c:
e2:00:0e:91:75:28:ec:38:ab:76:af:21:26:8d:94:
f9:70:be:69:44:89:f4:9a:af:e9:b2:3e:32:27:79:
f3:5d:6c:01:1c:80:5b:81:d5:cb:1a:77:2d:03:f6:
04:22:bd:95:23:14:1c:31:e2:8a:41:7c:99:24:36:
dd:ac:6d:69:e2:d1:0d:5a:70:03:b3:2a:b7:f2:55:
c1:44:dd:38:f0:d6:44:6b:a6:be:d7:fd:0d:ac:b6:
f8:53:48:01:76:00:21:4c:00:cb:16:02:af:7f:fb:
15:ee:8a:14:31:e3:9e:d8:98:f6:31:6d:11:e6:be:
d8:78:86:2a:11:7b:c5:68:c2:4c:53:36:26:b7:e0:
a0:49:24:62:f9:8c:34:1a:23:56:89:13:21:65:24:
79:4f:b6:50:28:a3:ce:b4:e0:ab:ad:6c:a1:be:50:
72:f5:a4:57:3a:a8:5e:b8:ef:c3:a9:ee:71:20:98:
20:c9:45:70:6b:9c:a0:71:bc:e7:2e:f7:74:28:8b:
61:1a:50:68:2f:6f:e8:96:aa:87:1d:b1:fb:05:17:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1B:A5:C1:BA:23:05:00:CC:7F:6D:22:D3:AE:DC:76:75:EB:3C:97
X509v3 Authority Key Identifier:
keyid:A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:47:be:de:cb:25:bc:09:66:c7:de:89:82:84:c9:b9:53:9e:
de:2c:81:e7:3b:c0:e0:81:51:a3:90:fb:91:be:a0:73:1c:20:
c6:56:67:2a:82:b5:99:ab:89:98:f1:b0:5b:d8:b9:88:0b:3a:
4e:9e:aa:cd:fd:f2:43:89:65:f1:34:2b:c2:1e:da:17:77:37:
c3:35:9c:aa:68:61:3c:66:68:a5:03:65:66:d4:41:75:4a:bb:
0e:29:0f:31:c7:df:22:4b:84:9d:06:83:2f:2f:5f:72:be:65:
0d:b1:4c:c7:26:e6:4e:e3:10:dc:a2:cd:b4:aa:37:54:27:3b:
6a:66:33:fd:74:41:8c:5c:1b:01:72:64:46:2b:8b:07:9c:43:
10:f2:21:ac:ef:6a:55:51:7a:3a:7f:dd:ef:12:f4:a0:d0:ab:
8f:bf:0a:76:c9:0d:4f:33:83:15:5e:95:a3:ff:9d:63:4f:f0:
f2:41:03:72:47:c4:c7:d6:a1:14:f2:7b:53:9d:9a:3d:ef:9c:
ce:e7:57:13:a2:12:19:8c:d8:c9:48:12:bf:3d:5a:09:62:f5:
a8:bc:c4:6b:26:ce:1f:6f:b3:35:28:b7:af:98:8a:d0:53:3e:
44:7d:1f:7a:47:10:97:85:86:69:11:98:51:a8:53:fd:1f:b6:
63:e6:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:15:27 2025 by rpki-client