Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
File: PidqxRoTJAHbTNdB2GalRiKg0Vw.mft (raw, json)
Hash identifier: +OZEnjoIqY2kdovKikGJp5aGsXgSKnlumk/x8IBCa/Q=
Subject key identifier: 4B:F6:4B:8B:36:55:56:42:AD:40:2E:77:2D:B7:27:AE:65:86:33:9A
Authority key identifier: 3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
Certificate issuer: /CN=3e276ac51a132401db4cd741d866a54622a0d15c
Certificate serial: 0197B74535FC0D2A1B2EB6C7B8E768DABAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
Manifest number: 12D8
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: PidqxRoTJAHbTNdB2GalRiKg0Vw.crl (hash: gQ0lRrA1DgRpeCw9cJbHZVNRGNnruq9sPlxRuDjXrNc=)
2: mmsyAnMHt_dbYyNaAmRzOf1ER00.roa (hash: Z0B0gLnq6WYbQAuekKr8EymO3fzsvhfiIyL1pWQiz74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:35:fc:0d:2a:1b:2e:b6:c7:b8:e7:68:da:ba:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e276ac51a132401db4cd741d866a54622a0d15c
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=4bf64b8b36555642ad402e772db727ae6586339a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:45:c5:f1:c6:1b:ce:c3:28:e3:c6:ce:65:
91:aa:9f:26:6d:03:74:47:05:1b:de:22:56:49:aa:
e5:c0:c5:ac:2a:fa:21:e1:43:74:c8:47:6c:1e:28:
31:36:37:ef:f1:fa:2c:20:6f:45:f8:fa:07:54:8c:
e9:85:ff:d2:66:fe:ab:41:01:02:2e:cc:7f:94:b9:
c2:48:e6:5e:af:8d:1e:e1:1e:fe:f6:3b:c9:cb:a9:
9a:16:35:ad:44:c4:1b:7a:49:70:ef:fe:5c:8b:f3:
1f:3e:8b:5a:1c:95:98:37:d5:d8:a0:08:6e:20:55:
4b:19:6c:0e:db:99:b9:32:bc:47:d7:fa:53:33:d9:
5f:05:3a:ec:be:12:10:8b:d7:a1:dc:19:57:11:6c:
59:21:a7:7d:13:ca:61:e1:88:b0:b0:4c:0a:14:53:
13:a7:d7:fc:28:e2:c0:49:fb:eb:3b:25:85:25:34:
fe:f3:c7:37:e7:07:69:5f:c8:0b:82:d2:19:9b:07:
df:c2:4c:b9:50:4b:4c:cf:aa:e0:4b:ce:99:5d:e0:
3f:95:1e:cf:36:3a:71:3a:eb:63:0f:51:e4:0d:c1:
8d:ab:e5:82:24:0e:9a:0e:f8:44:ca:6e:c7:b2:70:
cb:05:f1:b6:02:6f:6c:ff:b8:60:52:33:00:86:d8:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F6:4B:8B:36:55:56:42:AD:40:2E:77:2D:B7:27:AE:65:86:33:9A
X509v3 Authority Key Identifier:
keyid:3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:82:ab:23:dc:0c:0e:fb:2b:d9:6a:a3:b4:3b:da:01:2e:07:
b4:2a:62:bc:a1:f8:dc:cb:da:eb:ff:47:f4:e9:f9:55:94:76:
11:02:16:62:c4:eb:0e:9b:af:4a:21:f3:a8:d7:9c:d2:fc:98:
45:b7:10:ce:b5:e3:ae:39:a2:ee:ac:d7:db:4e:0a:d1:f9:13:
b1:05:75:b8:1d:40:40:ab:40:b3:50:27:7d:8e:c2:2e:6f:77:
75:53:cf:b4:e0:79:f7:9b:63:0c:14:4c:ef:fd:70:70:b4:1d:
85:61:4d:23:eb:05:37:22:02:cd:ce:5b:f8:c6:34:00:00:8c:
d5:58:f3:30:fc:84:1f:dd:13:82:a3:f0:87:32:87:82:02:cd:
4b:ae:8d:b2:df:c8:e1:e7:db:e3:4f:89:c2:3d:65:d1:7f:6f:
d3:d8:c2:22:c7:b5:ba:ec:6a:4d:23:bf:49:32:35:87:a9:a3:
8e:e8:67:c7:97:14:6e:b0:de:31:02:b0:4f:69:2c:f5:b0:9f:
80:4e:cd:29:17:38:13:2d:f9:64:50:b7:0a:f6:2b:70:17:5b:
11:17:b8:92:63:46:5a:76:a6:da:1c:25:38:0a:a8:10:67:b3:
15:fe:e9:f4:aa:29:12:c3:66:f7:11:60:b2:21:49:84:83:50:
6c:ff:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:54 2025 by rpki-client