Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
File: pRA1bcClIYlc5h-FSV4G2vehKzs.mft (raw, json)
Hash identifier: yrMlCqq7lZEjqm6itrgjo8byR747aPZJMpAQpX4Mp30=
Subject key identifier: F8:84:4F:9F:D7:ED:D5:5E:57:11:E4:A0:06:34:69:23:16:B7:F4:E0
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial: 0197B77C5B0C91D4B57DCC992B8A0ADC58CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:09 +0000
Manifest this update: Sat 28 Jun 2025 17:01:09 +0000
Manifest next update: Sun 29 Jun 2025 17:01:09 +0000
Files and hashes: 1: DZzf4gixVG1v_XBOTEdiJTCnpgc.roa (hash: EKgVMjgzgQW/dE4uPulEkrnDhBOvFfmwxhJ1zs6dJk4=)
2: PyDzr8WmYcRo05FGb5UzcWZdKls.roa (hash: IYIt11a1r2unTfjZQuVOMhykI3XsxsOfurke5JUMHZc=)
3: pRA1bcClIYlc5h-FSV4G2vehKzs.crl (hash: z2B3Tot6YQCHIiuboMzMt+XgcF/9RXR3d9WVOX8Cpwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5b:0c:91:d4:b5:7d:cc:99:2b:8a:0a:dc:58:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Validity
Not Before: Jun 28 17:01:09 2025 GMT
Not After : Jun 29 17:01:09 2025 GMT
Subject: CN=f8844f9fd7edd55e5711e4a00634692316b7f4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:84:93:e8:c0:df:71:f1:3c:4f:ac:72:66:
b5:6f:6f:c1:3a:0e:d3:a6:31:e9:ee:02:b8:05:43:
5a:3e:15:a9:45:2a:e5:4c:b5:88:11:52:33:ac:2d:
7e:d2:35:65:46:2a:7a:be:cf:f8:d0:40:9a:53:50:
b4:b5:a9:21:00:34:40:29:c6:f0:e9:d1:5e:bc:e4:
97:60:cd:f5:95:a1:38:0d:56:02:a9:e3:a2:f8:53:
20:69:e4:6d:ff:91:40:2e:15:4c:03:10:a5:ed:4a:
94:da:d3:48:6a:31:13:86:e1:23:44:67:e8:c1:ba:
96:e8:3a:7a:b4:f5:f3:38:c6:d0:8a:84:4d:dc:5d:
4d:94:cb:82:e5:38:ff:95:e3:8b:02:fa:c1:7d:7e:
17:d0:fb:73:9a:1a:ca:a2:6d:5d:f3:90:d5:f2:4f:
96:90:af:b7:46:b8:22:f7:96:12:2b:54:eb:52:0f:
68:9b:8d:29:dc:17:1b:1a:c4:e0:ec:8a:f4:f5:7e:
e2:7b:96:9e:33:aa:9b:28:28:9b:77:f1:ca:db:de:
64:7c:05:d5:68:75:37:49:0e:f2:4a:11:ef:50:fb:
f6:1f:9b:23:07:c9:08:2f:14:a9:1e:bb:59:ec:ee:
89:66:f1:98:3f:c7:40:1b:28:d9:a3:e8:32:56:3c:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:84:4F:9F:D7:ED:D5:5E:57:11:E4:A0:06:34:69:23:16:B7:F4:E0
X509v3 Authority Key Identifier:
keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:64:54:24:e9:b1:2e:99:fa:f3:27:9c:bf:b1:c0:f7:84:c4:
02:ed:d0:d2:b8:7a:f1:6a:c5:10:ab:ec:3e:09:80:44:71:b2:
f9:75:86:02:cd:7c:ad:f6:03:30:90:be:d9:2a:81:25:20:5e:
08:e2:03:2e:8d:c0:b1:92:ab:9f:d3:c0:51:d0:06:46:37:71:
db:2c:dd:01:45:7a:8a:27:2e:37:77:a1:c6:af:f1:2d:58:11:
24:10:b3:7f:03:53:ff:94:c0:6b:53:68:7e:c5:e5:da:6e:5a:
4c:a0:93:9c:75:8d:ee:c8:2f:ff:49:87:0c:a7:4b:84:57:14:
4c:bf:b4:06:63:92:67:66:42:99:b5:73:18:1e:6e:20:76:9c:
6a:86:b9:8f:42:a5:8c:83:1b:bb:3f:16:30:69:dc:f2:95:f6:
57:63:35:66:98:81:4f:7f:1f:6e:82:31:b6:c5:8a:db:50:5f:
55:a6:40:6e:f0:95:00:92:fa:47:fd:e3:83:cd:90:55:e7:6d:
c7:3b:7e:73:dc:fd:bb:32:b5:fd:e1:5f:24:bc:ac:7f:2b:28:
50:2a:2e:37:95:33:b7:1a:a6:38:00:bf:19:58:7b:b2:dd:32:
e2:0f:57:f1:46:32:3b:af:45:fe:8b:97:de:23:47:da:8d:14:
1c:a4:35:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:24 2025 by rpki-client