Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: FZQqlSh4acUxpKc9BP8cMug2CbJhcXu3GC2U6fULBOA=
Subject key identifier: 35:35:5D:D0:11:5F:E7:2A:C7:D5:6F:45:18:72:6B:69:02:7B:C0:AC
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 0197B89002B1395453BD2527675C24C4A45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0C41
Signing time: Sat 28 Jun 2025 22:02:14 +0000
Manifest this update: Sat 28 Jun 2025 22:02:14 +0000
Manifest next update: Sun 29 Jun 2025 22:02:14 +0000
Files and hashes: 1: RuFROxCqzeIbzpx-h2zhu4XG73k.roa (hash: mYt7O5vyisef0XC7lwr4ZHkct165sZT5ZjyUS4XqL/8=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: VnDKiTOqdIj9IjUgWxVrLOnmVXZFBh0jlZCUhbdq0n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:02:b1:39:54:53:bd:25:27:67:5c:24:c4:a4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Jun 28 22:02:14 2025 GMT
Not After : Jun 29 22:02:14 2025 GMT
Subject: CN=35355dd0115fe72ac7d56f4518726b69027bc0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:57:a4:00:13:fb:25:8e:09:40:07:91:2c:
0f:15:3f:0e:de:e4:2b:d9:07:74:b7:5e:d6:4d:d7:
a2:cc:1b:41:0f:b6:4a:02:f5:04:d8:c3:b1:f7:84:
03:12:71:e5:f3:ea:e6:dd:99:39:e4:86:e9:b3:cd:
54:4c:89:ec:c3:fa:d3:5d:a9:21:54:d3:fe:81:28:
5b:4e:74:ac:cd:9b:d3:0d:80:e6:1d:4c:8e:5d:fa:
42:46:d7:61:d2:81:f6:b3:77:f6:a7:c6:7b:ec:2b:
2c:f9:2a:e7:bc:99:52:63:20:6a:bf:1c:cb:7d:ac:
b0:3c:92:d2:8e:9d:7e:c1:b1:08:bd:d0:f6:1c:3c:
6f:42:3e:b0:b9:93:2c:c5:6f:40:0a:6d:c1:07:99:
2c:40:c4:80:61:cf:89:58:98:99:a9:ae:39:60:a9:
b0:21:fc:3a:95:6b:a4:db:ea:aa:78:7c:e7:7a:58:
cc:82:32:b2:3b:37:a0:8b:0b:d8:86:5f:b2:d5:83:
35:36:7d:34:5e:48:45:5c:4c:c0:fc:6c:f1:2b:24:
fa:5a:3f:00:fb:6f:d5:46:c0:2b:d9:b3:27:de:0b:
d9:bc:c1:fc:1c:3b:11:73:0b:eb:7f:88:54:50:0a:
8c:16:2e:b7:b9:44:b7:ec:71:1c:63:11:10:21:24:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:5D:D0:11:5F:E7:2A:C7:D5:6F:45:18:72:6B:69:02:7B:C0:AC
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3c:5b:d3:43:27:e1:6a:72:a2:77:26:66:5c:23:fe:4b:40:
03:e4:d2:cc:e5:66:e1:e6:1c:c5:b0:18:a1:f1:07:16:69:be:
ae:29:0d:d2:23:e1:d9:9d:24:22:f4:c8:17:86:15:41:fc:c4:
d0:cf:e3:39:c8:6b:7a:51:ac:c1:1c:2a:bb:c8:08:8b:a6:67:
a2:2a:2e:35:7b:01:b4:d4:01:cf:1f:db:7f:b5:65:55:e2:3b:
8b:66:84:63:d7:77:2f:4e:ec:42:bc:bf:f1:25:28:6e:f5:86:
02:2b:73:d5:c2:3e:00:35:6c:3c:c7:0a:dd:5c:6c:d8:31:25:
15:b9:a0:30:47:8f:f3:6e:c2:e5:f0:65:47:ba:d6:4e:ac:39:
20:8a:9c:11:bc:05:92:6f:40:59:ed:3b:88:57:83:cf:bd:6b:
cb:d7:1f:49:b4:a7:ff:a0:1c:c1:b4:01:9d:a1:2e:0a:4a:e6:
cc:82:de:ff:e9:b2:bd:88:90:c7:79:51:6a:d1:ff:d8:bd:22:
d9:55:01:53:f5:2d:a9:14:0e:66:7a:df:e9:c8:d7:ab:a0:d9:
3b:c0:c2:51:11:95:f5:5f:e9:94:12:ca:2f:02:cf:ff:8a:4c:
aa:02:9c:2f:d0:9f:29:a1:38:a7:b0:0f:eb:3b:93:26:28:d1:
60:71:29:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:09 2025 by rpki-client