Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: 4rUlsVvUKCu5BIWLvZOC6mxB+KKKen9FWZOwXOAvzXk=
Subject key identifier: 77:A5:77:76:A5:53:4D:26:45:E1:E8:6C:CA:A3:93:35:53:42:87:75
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 0197CC15FD875C78E27B11AB8387F1E4544C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 104B
Signing time: Wed 02 Jul 2025 17:01:22 +0000
Manifest this update: Wed 02 Jul 2025 17:01:22 +0000
Manifest next update: Thu 03 Jul 2025 17:01:22 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: 1WF14/jVDcD+6llYonX95q8YDEfb8zxKAIGvvWjccGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:15:fd:87:5c:78:e2:7b:11:ab:83:87:f1:e4:54:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: Jul 2 17:01:22 2025 GMT
Not After : Jul 3 17:01:22 2025 GMT
Subject: CN=77a57776a5534d2645e1e86ccaa3933553428775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:7d:f4:ba:77:c3:bf:a0:fa:4f:19:ed:f2:
55:9a:f2:ba:aa:c8:2d:33:d0:2f:80:4d:5b:38:73:
65:00:c4:a1:e9:29:69:20:3e:e0:e5:8a:0f:b6:43:
f2:ba:fd:12:25:ae:75:4c:54:9c:61:81:98:36:46:
95:b2:c5:35:34:f6:e4:8c:24:2a:d9:7a:86:70:39:
2b:c0:d1:d0:79:22:ce:33:ae:0d:d9:47:44:78:e5:
01:1e:a8:45:c2:02:e8:ce:c6:9f:42:f3:f5:6f:c1:
2b:85:46:cf:77:77:5b:42:70:82:ca:7e:df:07:4f:
34:7e:5e:b9:90:25:aa:b2:f7:0f:cd:c4:b0:9d:0a:
2f:a1:4d:10:fa:ed:62:42:aa:fb:a3:38:19:f6:24:
bf:fc:9d:ee:d9:51:32:1c:bb:e6:e1:9f:37:6f:e8:
3b:dc:90:d5:81:f7:57:2b:c7:15:39:55:8a:ee:18:
07:f3:f6:0e:97:7f:70:4d:33:b4:79:32:9b:6e:df:
c7:cc:9b:71:5d:f3:e1:a9:94:62:00:a3:f2:6c:3e:
64:d6:44:f0:95:06:16:a8:f2:09:e9:07:62:91:b8:
17:db:99:a7:35:05:ef:c9:08:e7:35:71:07:cd:41:
a6:21:f0:c5:b5:f2:d6:8d:2b:23:e4:ee:3f:2e:d6:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A5:77:76:A5:53:4D:26:45:E1:E8:6C:CA:A3:93:35:53:42:87:75
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:52:f8:9a:cc:c7:f9:73:25:bc:1e:76:9c:14:13:3f:0d:56:
bf:95:68:be:35:3d:0b:37:86:7d:53:6c:a3:de:2e:2c:ae:2b:
a2:33:39:86:92:19:9e:fa:37:ef:90:11:8a:fc:d3:40:c2:0c:
e4:79:e5:f1:f6:9c:79:37:ff:b1:6a:85:64:97:eb:e7:b7:34:
a5:47:13:63:1e:3b:84:68:a1:01:59:9a:c8:0d:3a:f8:92:15:
51:e9:be:32:5d:3f:50:27:d2:54:fb:1a:bd:49:d9:65:9b:8b:
37:b6:0b:50:01:e6:40:11:89:cf:a6:2a:1c:00:7c:34:fc:7e:
8e:f6:00:7e:94:9e:62:b3:0c:ac:b5:9f:59:50:ab:58:be:4c:
bc:89:ce:29:f0:6b:dc:77:12:7d:c7:1c:d6:d4:fc:8d:d8:7f:
dd:d4:58:a9:b7:39:95:d5:70:ed:f1:4f:0b:b9:26:e0:9b:b4:
29:b5:2a:da:d3:ed:3e:b0:52:1b:cb:61:26:87:d1:d8:97:37:
e6:9f:4e:d7:8e:b2:ae:d8:77:f0:a5:7c:f0:20:02:2d:0a:aa:
9a:91:6d:5c:b3:96:fb:e7:6f:b6:8b:68:83:08:1f:ad:d1:ea:
9d:34:51:56:65:8b:52:d8:26:24:36:49:bd:45:d0:20:70:92:
22:bc:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:17:10 2025 by rpki-client