Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: AubiQnIVDnV+2HzBIzB2PZIESLi1JJJxWz6ndVFQzsc=
Subject key identifier: 0D:41:6A:4A:F8:F0:DA:1F:0F:0E:6B:79:21:86:49:94:61:72:CE:A1
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 0197B7B312FFB1FC4F65BC38B6C498FAAD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:00:55 +0000
Manifest this update: Sat 28 Jun 2025 18:00:55 +0000
Manifest next update: Sun 29 Jun 2025 18:00:55 +0000
Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: Jzg/Doi7PiixtaMQlUt3K5+UMghq3cujqsRkbzfuYtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:12:ff:b1:fc:4f:65:bc:38:b6:c4:98:fa:ad:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jun 28 18:00:55 2025 GMT
Not After : Jun 29 18:00:55 2025 GMT
Subject: CN=0d416a4af8f0da1f0f0e6b79218649946172cea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:ea:82:3e:f2:13:f9:45:ee:67:8f:ae:fa:
99:fa:ca:a8:4a:81:a0:49:23:13:ba:6a:e3:5b:4d:
52:d4:3d:15:a0:b9:34:44:53:3b:25:c7:53:fe:93:
80:3a:c2:37:e3:dd:36:42:5e:b0:a0:e4:af:dc:aa:
4d:9f:23:ff:3d:f1:a5:a6:9e:0f:9d:bd:ae:30:a6:
61:d8:99:9c:41:bf:bc:7d:f2:8d:75:5e:9b:58:89:
f9:82:27:4d:be:2e:ac:d2:26:fd:b3:f8:0c:d6:6b:
14:c4:28:da:a5:df:3c:2d:69:9a:e5:12:eb:fd:60:
26:af:35:f7:74:5a:85:e6:a7:4c:ea:3b:c5:1a:bd:
8e:9c:8d:3a:58:7e:11:dd:86:83:c9:f3:0c:ea:06:
c5:2e:f5:e6:8e:94:b9:f6:4c:25:98:db:f2:83:b8:
a7:50:a2:f7:71:dd:0f:e6:6d:70:a7:80:41:8f:58:
2d:c0:38:2e:81:7e:16:dd:ea:10:07:38:39:d9:03:
7b:7b:ff:b1:a2:16:29:6d:e2:cb:5d:48:7e:43:dd:
59:08:ca:26:36:79:40:2e:da:f3:ec:5a:7f:53:f7:
4a:ff:50:b9:bf:38:8c:c7:41:15:5a:ab:04:ab:d4:
31:ed:48:97:54:51:44:6a:ac:3e:97:cf:eb:59:a4:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:41:6A:4A:F8:F0:DA:1F:0F:0E:6B:79:21:86:49:94:61:72:CE:A1
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2e:ff:6e:f4:f8:66:a9:43:7e:8d:af:e2:e4:e5:bf:f7:44:
2f:16:33:7c:00:e5:87:ac:c0:fa:2d:56:94:3f:21:de:da:9f:
39:14:4a:f5:88:19:5e:7f:10:3e:c2:e0:4c:87:41:d8:a9:63:
d0:ea:4c:27:38:1b:ad:a2:8e:cc:03:0b:8a:e6:29:0c:62:45:
25:cc:a1:f9:b8:69:3a:63:11:c3:45:ac:bb:c0:3b:f2:c7:a0:
6d:16:de:5d:1b:03:a3:1e:dc:30:8c:82:bf:9d:14:43:af:d4:
7f:49:30:bb:53:79:de:d7:be:a8:09:5f:34:fa:3e:cf:86:a9:
e5:4d:b7:5e:e5:fc:4d:c3:a7:50:06:8f:b1:34:f0:06:18:98:
15:cb:a6:48:5a:c8:35:19:02:64:65:63:36:02:63:3e:c3:7a:
dc:fb:4e:06:64:a2:8f:df:e4:95:65:8c:5a:00:07:f1:fd:a5:
66:dc:6b:4b:6e:c7:71:ac:2e:ae:a2:f1:61:31:fa:2c:38:b7:
88:3f:fb:da:88:ca:64:83:37:00:de:1c:21:38:f2:fc:62:2f:
d6:af:c7:70:3a:0f:68:84:a0:9f:bf:c8:31:d1:a9:1b:48:33:
75:26:00:4d:a8:e3:6c:88:38:37:ce:d6:9b:ed:e6:e1:8f:b7:
11:96:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:13 2025 by rpki-client