Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: uQmHp1kv/bOjqS2vnZ60cuWVxKzdRl/7C7eEHpVnUSw=
Subject key identifier: C8:9F:C3:E9:08:60:5E:82:96:59:AC:4C:DF:F6:18:4D:9F:61:0E:F2
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 0197B77C1596F35E93F2AB268AF4A41DF352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 17:00:51 +0000
Manifest this update: Sat 28 Jun 2025 17:00:51 +0000
Manifest next update: Sun 29 Jun 2025 17:00:51 +0000
Files and hashes: 1: o-nYlXPYTvbWycHnP4jG4hys78s.roa (hash: +9u5uc7wAwLvJQwWxklCfmQHya0NysgfSBmasNGP6Yk=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: mgOtEkX8AQmNQjCo41rF2V5qPE14hJQn5ugMijgZkG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:15:96:f3:5e:93:f2:ab:26:8a:f4:a4:1d:f3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Jun 28 17:00:51 2025 GMT
Not After : Jun 29 17:00:51 2025 GMT
Subject: CN=c89fc3e908605e829659ac4cdff6184d9f610ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:e5:e2:d2:b1:db:20:77:92:9a:a7:8e:cd:
fc:52:5b:c4:38:62:6f:90:c6:e9:b7:26:23:92:1a:
19:fc:60:3b:92:d4:8a:22:a8:7a:13:f7:27:6c:2e:
95:26:79:8e:02:15:28:da:7e:b8:50:57:a5:f2:21:
6b:2b:37:61:bc:f3:00:b9:2e:61:34:f1:58:e6:f6:
62:1a:d8:38:c7:90:e4:7f:b7:b3:11:96:5f:95:0a:
07:d7:cf:9c:67:ec:0c:a2:2b:ca:d4:8b:cf:9e:47:
c2:eb:13:09:be:43:ea:7a:b0:6c:cb:c1:f3:50:49:
81:5d:d3:dd:25:37:e4:98:95:cd:a7:25:05:ed:80:
62:e2:af:e8:16:b9:91:cc:26:01:ba:34:7d:28:94:
8b:5d:ff:cd:77:a6:8f:05:e9:59:87:f6:b2:0f:4e:
b6:7e:b7:2c:43:8b:77:ac:ec:ee:be:41:3a:95:bf:
98:33:9f:a5:f2:18:33:36:46:bd:92:b0:aa:4b:4b:
f3:40:6e:e1:d0:1c:68:92:51:0e:4a:39:6a:8f:b8:
06:41:37:0a:68:4c:16:e3:21:ba:b0:77:99:2a:a0:
d8:3e:7b:ef:a1:14:a7:57:85:28:67:11:94:e4:de:
8e:6a:51:34:f2:bd:ed:b3:b7:c2:06:d7:7d:e4:80:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9F:C3:E9:08:60:5E:82:96:59:AC:4C:DF:F6:18:4D:9F:61:0E:F2
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3f:07:db:90:01:28:bb:e7:57:6f:07:10:b8:e5:f9:f6:60:
51:05:6b:23:34:5a:ea:54:8d:35:10:be:5f:5f:23:45:5d:14:
8b:d7:df:50:1c:fd:a7:e1:14:7a:20:41:06:7a:47:c6:53:bf:
84:79:f4:6a:53:3a:8f:32:72:03:81:ef:7b:28:ee:76:14:82:
bc:ab:9f:5b:a6:d9:d3:29:6d:f0:00:ea:22:bf:3b:1c:88:59:
40:49:34:df:cf:d2:b9:98:75:ea:61:78:8c:5c:b0:27:8d:7e:
88:78:7f:ae:24:e4:f7:c7:68:f0:80:93:7c:a4:73:03:3e:97:
30:08:95:72:8f:96:ab:18:b1:b7:bb:7f:d3:2c:c6:11:27:0e:
0e:c9:fc:d6:eb:21:86:5b:13:4a:49:55:c7:08:b5:9a:31:f9:
33:7e:c9:fe:bb:a0:dd:b7:65:08:b8:ed:fd:ff:2d:56:eb:ad:
a9:8d:27:b7:01:7c:81:be:e1:17:47:a6:b5:22:9d:28:26:7a:
9e:40:e0:59:31:59:60:23:77:d1:55:a4:ca:fe:8f:27:c9:16:
9e:12:5c:25:99:a8:46:8c:96:73:25:33:c4:89:3a:d5:32:97:
e8:a6:23:50:e9:4e:ac:29:11:69:cf:bb:bb:6f:5b:1c:3b:8f:
2d:c0:80:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:28 2025 by rpki-client