Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File: piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier: MvfKKv9aLJoSrA5keR1GE11cpPEW+pk+jt0aEMXkH6g=
Subject key identifier: CF:2F:B3:6E:59:7A:14:A6:66:CA:BA:4F:0E:7F:E8:35:62:CD:3E:9A
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 0197BA7D45D57648C5EB76C67908D2ACEF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number: 09FA
Signing time: Sun 29 Jun 2025 07:01:01 +0000
Manifest this update: Sun 29 Jun 2025 07:01:01 +0000
Manifest next update: Mon 30 Jun 2025 07:01:01 +0000
Files and hashes: 1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=)
2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=)
3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: c1lg0qbeqDw1xElyG/tX1lfpb5m6ArpDnNdScezsQFM=)
4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:45:d5:76:48:c5:eb:76:c6:79:08:d2:ac:ef:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Jun 29 07:01:01 2025 GMT
Not After : Jun 30 07:01:01 2025 GMT
Subject: CN=cf2fb36e597a14a666caba4f0e7fe83562cd3e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:57:c3:41:25:49:80:31:a8:ee:84:b8:f8:
3e:77:bf:07:48:d0:6b:8a:db:cb:73:8b:a6:3a:91:
fd:9b:3d:a3:50:00:fa:74:75:2d:89:84:87:dd:f1:
1b:61:8b:09:f9:58:0f:38:06:7d:8b:e7:61:13:d1:
7c:2d:e9:f7:26:9b:18:8d:1c:68:09:7e:b9:0e:1b:
4d:07:e2:fa:20:57:04:cf:cc:dd:b5:35:de:50:a8:
88:f7:3c:70:62:44:c8:aa:a6:91:b3:a5:bc:f8:37:
ff:77:3d:33:d1:2f:b9:19:8c:1e:52:c3:2b:56:94:
74:c0:bc:60:fa:dd:2e:e0:f3:c3:7f:83:84:fc:d0:
ce:fb:82:2b:a7:f9:17:4c:0d:38:4b:5a:08:98:b9:
12:54:d3:c0:a4:c8:ff:62:94:2f:1a:29:ef:bf:8e:
1a:a7:6f:9c:0c:02:1f:99:5d:8e:7b:f5:c6:46:e4:
a7:00:64:f9:e3:0d:2b:2b:2d:56:0b:a7:e9:dd:c9:
f2:54:d3:8e:03:77:bc:1c:d9:0d:a1:5d:66:84:e9:
5c:fd:b0:4e:73:69:a3:61:22:45:34:8b:d4:27:a9:
64:99:4d:69:d4:b3:ad:a9:c9:95:41:96:20:34:fe:
aa:4a:41:bd:95:f4:90:1d:d2:83:21:27:21:ef:8f:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2F:B3:6E:59:7A:14:A6:66:CA:BA:4F:0E:7F:E8:35:62:CD:3E:9A
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c1:83:11:63:ee:0e:b5:21:57:58:13:65:14:a1:3a:2a:d5:
6b:2f:08:7a:f2:06:9d:af:ba:fd:da:63:fb:29:c5:11:e7:c8:
e7:36:93:f8:d9:26:b9:49:5c:46:a0:bb:97:87:87:59:8f:d9:
68:f5:08:30:87:43:14:ad:74:2f:dc:29:bc:8b:71:bd:60:af:
40:90:18:11:c7:14:f8:97:7c:6f:c5:42:a6:17:78:79:ef:75:
35:df:7e:ac:85:21:52:41:fd:23:a1:1e:e2:75:a8:09:4f:1c:
54:80:98:82:41:78:ee:54:01:3a:c8:2d:91:ff:48:79:33:98:
34:35:ea:2a:47:a7:18:12:f1:51:da:d8:19:21:6b:6b:d7:7b:
0c:10:9f:c5:3b:9c:37:41:87:9b:e3:91:12:5e:a3:26:9f:a9:
f2:a5:15:ce:91:21:c7:8d:11:ae:37:15:92:ca:7c:e0:f3:53:
24:d6:44:9c:07:79:ef:ec:92:b6:c3:2a:d8:52:19:cf:e1:a8:
cc:6a:5f:78:fe:ae:8d:d1:de:79:ef:5c:3e:96:3c:9a:f7:1d:
76:9e:ec:f5:ed:07:16:23:11:31:f6:e6:63:33:ce:e8:9c:bb:
ea:3d:bb:36:97:d4:bf:1f:24:0c:06:52:4d:52:1b:a6:24:46:
71:08:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:02:29 2025 by rpki-client