Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
File: p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json)
Hash identifier: K9MmoVGbrs2cOy5kQwpitgUCov/tuuLgh8Wc/3wF+ZA=
Subject key identifier: A7:17:26:CB:80:E0:C7:6F:51:03:C3:91:7C:51:F6:E5:C0:0E:A5:FC
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Certificate issuer: /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial: 0197B6A0D8959523F8F8831D68038CB1DE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:01:23 +0000
Manifest this update: Sat 28 Jun 2025 13:01:23 +0000
Manifest next update: Sun 29 Jun 2025 13:01:23 +0000
Files and hashes: 1: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: i2feaCFODwHF+A6PAAdbB1WT/PX5GfdB6ZKwdd7BETM=)
2: zPOGOjbboaQbMeAXK6bmSX50QU0.roa (hash: OFCJwWf3DDsRtbtAfKkoaMdc4vMktJu9Jl985uyVWSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d8:95:95:23:f8:f8:83:1d:68:03:8c:b1:de:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Validity
Not Before: Jun 28 13:01:23 2025 GMT
Not After : Jun 29 13:01:23 2025 GMT
Subject: CN=a71726cb80e0c76f5103c3917c51f6e5c00ea5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:f1:7c:f4:a8:03:a3:04:9e:b3:a6:0d:f9:
6d:32:f5:21:44:74:69:51:6a:dd:27:41:e8:7b:f3:
39:fc:98:0a:d8:ec:c8:ef:f3:cb:f9:3f:7d:5f:4e:
48:1d:8f:60:da:62:88:ac:fb:74:60:db:25:71:b6:
4a:01:84:83:19:2d:f0:6e:7c:8d:56:97:da:78:e9:
b4:25:48:d6:0d:9e:32:fb:7b:80:42:a6:5c:cc:d7:
cf:78:94:8a:cf:ae:df:07:ab:95:15:d7:b5:7b:d7:
b6:2f:56:eb:fd:71:53:7e:8f:83:a8:14:7b:77:33:
fd:47:e4:b3:22:d2:af:65:40:2a:b5:c6:f6:3e:e1:
de:aa:19:e3:7b:05:cc:9c:12:5c:02:eb:6f:88:c3:
c3:9f:fe:13:1e:2e:4c:7a:1c:28:b4:b3:5a:14:82:
99:04:78:01:c6:e2:3a:19:aa:cc:10:42:ac:83:4b:
6a:d5:1d:94:a6:77:a0:25:07:c9:e4:d2:8f:f1:19:
e3:87:a5:37:f6:0b:e4:7a:67:91:0b:d5:5f:67:1a:
b5:51:87:13:d0:4d:10:45:3e:ee:68:77:a7:39:76:
c7:a7:9e:a9:3e:31:52:77:9c:70:8f:8d:1e:d1:0f:
5f:17:7d:40:d5:74:8c:bb:7d:74:24:78:cd:f6:8e:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:17:26:CB:80:E0:C7:6F:51:03:C3:91:7C:51:F6:E5:C0:0E:A5:FC
X509v3 Authority Key Identifier:
keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ce:53:98:38:e7:a8:df:b3:4a:24:dc:a0:d6:1e:51:97:70:
c5:7c:1e:5b:66:87:65:1c:f7:64:83:4e:63:b2:96:85:41:5a:
a2:87:51:0d:ea:e4:57:17:ba:55:d7:64:50:bd:2c:25:38:94:
39:1a:79:34:0d:d0:a9:cd:80:ae:1a:e8:64:48:7b:23:e2:95:
c0:64:7f:f2:c9:36:72:6e:e2:e0:16:92:2f:0d:41:78:9a:8a:
78:56:4c:b2:c2:f5:19:89:ee:20:a0:1c:02:da:7e:ba:92:0f:
ba:f3:ef:08:ff:17:a3:15:9f:fc:6d:47:3b:36:03:43:dc:88:
70:03:77:a6:9b:38:9b:fa:15:cd:25:7f:4b:43:4a:bb:c4:8b:
04:75:72:fb:7c:10:51:ff:6e:74:e1:27:58:d0:f8:2a:1c:8e:
9b:bf:59:d9:e5:0d:4a:cd:60:3c:35:06:86:b9:9c:e3:49:16:
21:05:90:ee:1d:d4:0c:39:5e:54:82:ce:21:d0:0f:dd:5d:0b:
a9:45:ef:57:43:36:7b:6a:0d:28:65:fd:5a:3b:f6:47:12:71:
91:05:9a:df:1d:cc:64:8e:8c:46:f8:25:06:a1:19:c3:32:56:
e5:32:47:39:4c:c6:f2:e2:49:64:81:f6:b6:67:88:4b:8c:ea:
be:0f:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:03 2025 by rpki-client