Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json)
Hash identifier: nECHjJUsR6h4c3qeIBlwWe3ROz+KMEJU1OnkSIN0pkI=
Subject key identifier: 15:5E:64:1E:84:14:EA:26:EE:45:1F:B2:84:BD:A3:29:6E:40:BA:A6
Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Certificate serial: 0197B745A0235C4512D23CC65A33DD98E7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:22 +0000
Manifest this update: Sat 28 Jun 2025 16:01:22 +0000
Manifest next update: Sun 29 Jun 2025 16:01:22 +0000
Files and hashes: 1: D5U1j0YPEDas8bxMtDOehRJb48U.roa (hash: AkMtfy33YmmtJG2wcdM/0Qvh01UPoaXKoDXm68LNuus=)
2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: /kvLSzRonlZu8Ad9IQ9Z5FW2mYNoCFLp8BB5TRK9QAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a0:23:5c:45:12:d2:3c:c6:5a:33:dd:98:e7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Validity
Not Before: Jun 28 16:01:22 2025 GMT
Not After : Jun 29 16:01:22 2025 GMT
Subject: CN=155e641e8414ea26ee451fb284bda3296e40baa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3d:a8:fb:2b:59:de:cd:89:6c:da:a6:1f:16:
fa:c1:09:86:c3:b0:b1:85:94:92:46:06:5a:e4:2d:
81:02:03:d9:b2:87:d9:1e:7c:90:91:03:f4:07:aa:
cd:66:87:b8:af:b2:c0:28:78:df:fa:ee:6f:d0:c1:
5b:c4:57:14:df:22:b9:fe:4d:a8:f5:82:b4:af:73:
7f:33:be:4d:eb:92:42:e2:dc:b9:50:7d:3e:7b:d5:
18:96:5f:26:a2:27:30:a6:87:95:04:0b:44:46:38:
39:88:84:3b:aa:1e:26:3c:cd:c1:20:f9:ef:0a:d4:
3b:f4:cd:f3:e5:af:d7:36:a7:5d:2f:0d:53:a8:27:
92:44:f7:28:72:92:1f:76:1a:1f:d7:f3:ca:8d:e7:
22:63:49:c6:71:ad:6e:35:b0:fa:67:09:3f:6b:c1:
96:2f:02:0c:62:d5:e8:b4:12:73:1e:23:2e:54:98:
eb:26:02:b5:59:f8:7d:09:3b:d5:6f:ff:d4:f6:de:
f7:97:0d:20:a0:c6:20:68:6f:7e:ce:b1:d0:df:28:
2e:61:b3:f1:eb:23:e9:33:c0:21:ab:f7:07:71:02:
32:3a:6a:49:b1:68:89:4a:3f:5d:67:e7:f4:59:a4:
a0:83:ea:a4:8a:36:7e:ab:0a:4d:69:e7:ff:75:ac:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5E:64:1E:84:14:EA:26:EE:45:1F:B2:84:BD:A3:29:6E:40:BA:A6
X509v3 Authority Key Identifier:
keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a9:02:2a:a0:1e:bf:23:09:a5:1c:31:37:a5:3d:c3:d8:51:
e0:a3:a7:99:84:62:15:3b:b8:8d:85:8c:18:86:86:86:9b:88:
30:9e:7f:38:a3:bb:fb:87:b8:54:43:62:fe:c7:92:2f:1c:2b:
c4:48:29:39:f2:73:d9:fe:1d:fc:4c:fb:c4:83:35:36:51:ad:
d5:cc:bc:ed:e6:54:b1:06:76:05:cd:31:76:bc:0a:b8:3d:92:
7f:45:93:ab:49:4e:d1:1d:cd:2e:4b:52:93:fc:07:2e:d3:0d:
a1:7c:d3:75:04:ee:e1:86:87:f8:62:19:0c:be:96:b3:6c:7c:
98:73:a0:09:ed:e6:eb:9f:92:3d:56:51:40:75:ab:7f:3a:08:
7a:99:57:82:d7:74:03:83:d3:bc:a0:99:95:b9:15:2b:0d:7b:
91:5c:76:8b:72:80:f6:69:a1:ad:eb:42:34:f5:19:e2:e3:76:
8e:2c:b6:82:9c:fc:ed:7f:b3:74:2c:d1:d5:02:02:34:bf:b8:
5e:f6:e8:70:56:22:75:cb:e2:26:f5:4b:f4:77:da:a4:30:7c:
92:6d:76:85:e4:63:4e:5a:c7:aa:99:fb:15:80:0a:6e:80:ed:
36:50:f0:8f:cc:ff:fe:cc:42:83:ef:01:01:08:91:7a:56:77:
42:60:a9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:30 2025 by rpki-client