Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: UKjiWbOPNJSliUezaRziEU4aQT/I/hZ/cWPUFx99Pko=
Subject key identifier: 0F:CE:C1:9D:4B:DF:7E:1E:1A:E4:0C:6E:98:15:DF:AE:55:4B:A6:AC
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 0197BA0FBD4546FB881829568BAF7D986D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 0B13
Signing time: Sun 29 Jun 2025 05:01:22 +0000
Manifest this update: Sun 29 Jun 2025 05:01:22 +0000
Manifest next update: Mon 30 Jun 2025 05:01:22 +0000
Files and hashes: 1: YA2knZBu4eCfckA4blXB6sNuHgY.roa (hash: shDh2slGwfDF1H72vnxsQTQ+XE9meHhIbU3+zi7hhrg=)
2: da6BAAfAoBTasYkztEyeFbO3dYM.roa (hash: svpwmdWuctN25b8D5PcCmhJa0TO40FFmvswQDucJFfQ=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: hCS/CUhGJPsSIkqHS0NC/msaLliuxVLXVsrp055GvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:bd:45:46:fb:88:18:29:56:8b:af:7d:98:6d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Jun 29 05:01:22 2025 GMT
Not After : Jun 30 05:01:22 2025 GMT
Subject: CN=0fcec19d4bdf7e1e1ae40c6e9815dfae554ba6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:31:39:de:69:f4:ab:c9:66:3f:72:3e:b5:d3:
6a:c8:c5:01:70:bf:06:67:b8:ec:e5:9b:8c:cb:b7:
77:2c:96:83:5f:6d:3f:43:9a:c9:3e:fb:f5:94:af:
e2:9b:37:53:f7:1b:24:8f:be:0c:0b:9e:9d:8f:28:
ac:37:d2:b0:0a:73:6c:a7:0d:d5:4c:3c:bd:8c:7a:
fc:97:2c:2c:e2:43:8d:ce:d0:8e:b3:83:a8:77:bd:
71:c6:29:b6:22:dd:72:5e:df:27:62:9a:26:b9:56:
5d:06:ef:57:3a:46:17:48:84:1c:dc:eb:07:de:f8:
cf:9e:e2:39:f3:5c:45:ad:29:48:30:c2:dc:74:d5:
6d:ab:35:9f:35:c3:38:b5:5a:61:f7:28:21:45:d8:
a6:7f:f1:75:d7:2d:ef:43:65:9d:10:3b:c2:38:f6:
55:c2:19:eb:36:e1:48:8c:32:cc:e3:3e:b2:40:c5:
12:d9:2f:cf:99:87:d7:43:4e:1e:8e:69:f0:fc:f8:
c3:dd:53:e3:c4:c4:9e:43:63:af:b8:39:0c:eb:c8:
b7:0f:e0:1e:d8:d2:4c:a6:39:e8:ba:aa:82:cf:11:
cf:8f:e1:a6:7c:f2:61:29:87:07:47:e0:a7:27:16:
de:2d:ba:8f:92:9c:25:3d:e2:be:08:7d:dc:63:50:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CE:C1:9D:4B:DF:7E:1E:1A:E4:0C:6E:98:15:DF:AE:55:4B:A6:AC
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:18:45:ea:31:19:4a:fb:8b:cf:d1:ca:19:32:a3:ef:3a:c9:
5a:0a:61:83:e6:3c:5c:22:06:51:81:dc:c0:11:df:e0:8d:d8:
7f:d6:f8:ec:cc:04:31:54:b4:88:08:fb:f2:31:96:48:49:c2:
4a:11:1b:05:d7:58:8b:41:49:1e:c3:e5:ad:9c:02:6b:38:06:
53:a2:e6:24:0f:5f:5e:38:25:da:85:7b:ae:b6:22:c7:ee:10:
fa:1f:b4:e5:dd:1a:2b:e9:df:75:83:cd:6a:ec:6b:d8:0e:ec:
fe:17:37:f4:23:42:a8:f9:7d:55:ba:e9:08:b6:16:69:2b:94:
d1:22:1e:f2:d8:cd:bc:e1:c9:64:18:23:a9:3d:cd:50:1a:01:
39:77:6c:e4:30:94:00:10:fb:a0:3e:31:c8:97:75:1e:c3:60:
5b:40:58:7e:21:41:31:da:af:e7:8a:54:36:51:87:46:75:43:
71:a7:9a:d0:c7:c7:68:53:2e:28:6c:72:81:aa:eb:28:4f:5d:
56:ed:7a:6d:00:32:0e:3d:b6:a3:ef:fb:e8:e5:8a:d6:02:77:
d6:ca:99:c4:af:b0:54:9e:6c:db:69:47:e7:e4:46:7b:d9:23:
a0:40:ec:b4:21:66:8a:05:65:95:a3:a9:13:56:c8:c4:51:a0:
e6:20:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:42:29 2025 by rpki-client