Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
File: PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft (raw, json)
Hash identifier: S0OL+RuamP6rFVup10hlU3vzk41CPeXooFkj2oV7sYg=
Subject key identifier: 55:38:0C:E1:19:D2:72:07:2F:F2:AC:D7:33:C2:EE:A3:7E:56:CD:E6
Authority key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Certificate issuer: /CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Certificate serial: 0197B6A1BE2029582523AAF7A59CFD405FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:22 +0000
Manifest this update: Sat 28 Jun 2025 13:02:22 +0000
Manifest next update: Sun 29 Jun 2025 13:02:22 +0000
Files and hashes: 1: PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl (hash: JkM2S8b7bKajQU/txTkjsQV5A2Fln7NzciSdDy+jRGc=)
2: baHbcRR9kf1ghjeGFAS82cVbM5E.roa (hash: ryV49aEsL3mdbzWN2VnZ4BiiOTM51N9BlYGHQV8L9fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:be:20:29:58:25:23:aa:f7:a5:9c:fd:40:5f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Validity
Not Before: Jun 28 13:02:22 2025 GMT
Not After : Jun 29 13:02:22 2025 GMT
Subject: CN=55380ce119d272072ff2acd733c2eea37e56cde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:0b:94:08:3b:99:e1:f6:6e:93:9d:99:a0:
56:ba:9e:33:79:30:00:48:b2:08:7f:54:8f:77:a2:
80:38:f7:6e:3a:98:02:26:25:fa:cc:a9:db:3d:ad:
54:9a:ec:fe:74:eb:32:fb:33:6a:f2:c7:ee:d1:9b:
d0:64:84:bb:65:1f:67:68:eb:c4:13:30:24:30:93:
2f:47:5c:07:0b:f7:6a:6a:d7:aa:0e:ba:38:6c:b0:
f6:5b:63:ee:27:97:43:5f:4d:63:39:33:84:c2:f5:
cd:af:15:5e:f3:57:40:c3:60:84:bd:43:44:7d:29:
bc:fd:3a:a8:e2:c9:da:5c:28:a5:ac:c6:29:ef:36:
d9:8a:95:e3:9f:98:b3:32:0d:7c:07:04:f1:a5:88:
b1:b7:d0:74:7d:7f:64:cb:a7:6e:a5:22:b3:11:7c:
b3:03:33:93:96:e7:54:23:93:fd:c6:69:29:26:40:
72:4c:17:8b:8a:2f:32:32:a7:d5:44:3d:e7:a9:a8:
ea:c1:a7:4c:93:3f:60:62:33:38:03:85:b2:38:3a:
32:a8:02:1b:b7:96:25:ab:50:15:47:5f:dc:b6:3d:
63:72:4b:48:be:a9:51:f9:b2:8f:85:c5:88:4b:cc:
7b:27:da:98:6f:21:88:39:03:b4:03:27:b4:d0:11:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:38:0C:E1:19:D2:72:07:2F:F2:AC:D7:33:C2:EE:A3:7E:56:CD:E6
X509v3 Authority Key Identifier:
keyid:3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:10:b5:3a:e1:f3:79:8c:17:bb:c4:e2:b5:82:4f:fc:b6:f4:
7f:3a:b2:e4:11:63:f0:07:f1:81:17:27:66:4f:02:82:1d:e0:
1a:ed:4d:8d:aa:70:3c:0d:ff:11:50:28:07:43:1b:2b:fc:54:
1f:20:71:fa:fd:53:60:dd:9c:e8:a3:0c:28:73:9c:76:3c:10:
1d:40:dd:0f:a0:b9:a9:89:bd:25:c1:ac:3a:14:7b:21:8b:d5:
64:5a:11:7e:19:cd:2f:a3:8a:c6:c9:9f:98:5e:21:29:6c:61:
b0:c0:5b:51:ef:e5:53:cb:0e:df:c9:e2:8c:ec:a0:e3:eb:3e:
02:ed:b3:f7:65:c9:9e:0a:8b:e4:8f:8c:ed:d3:67:d8:e1:ee:
e0:50:17:82:51:6f:36:c5:fa:77:5f:1e:8f:d4:47:5a:20:a0:
97:1d:ff:3d:3a:a0:14:4d:31:15:fc:ca:d4:25:51:55:54:68:
a6:3a:e3:3b:37:56:f8:40:2e:22:42:21:0f:ca:79:2b:bc:2a:
8a:f2:72:73:01:df:01:5b:05:4d:e3:8d:5d:2e:92:cb:9f:b6:
66:4f:1a:2f:4d:2a:41:d6:61:8c:54:7d:d5:f8:78:d2:f5:96:
aa:92:18:d2:e1:28:eb:19:d4:d4:22:97:2c:0b:57:de:44:65:
1e:ea:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:57 2025 by rpki-client