Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: hHJj/GzkHgmM5gY5cIb7ZAvdKQa7wh5x6jnsCDZksD0=
Subject key identifier: 1F:20:2E:3B:3D:59:32:97:0C:67:6F:97:68:10:4E:8A:8E:5E:93:59
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 0197B6A03B3B71CF79193665E763577D48DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:00:43 +0000
Manifest this update: Sat 28 Jun 2025 13:00:43 +0000
Manifest next update: Sun 29 Jun 2025 13:00:43 +0000
Files and hashes: 1: CqoX7DJIz6T-m3NHJ01LCtyGJFE.roa (hash: 32gG2ZUMfd1jjxqZY90ktdKNZmqWxjZXungJm+FeL3s=)
2: ZCRNSq91ZKzRcSK6x3pKdZV_4Rw.roa (hash: SLb/dN4BABY7//UWc03uIXxQcoqVDd7HnpJMkhWH2bA=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: e6zrZzoSW3yme7lhU7l+RjLk3u3tztiQXhVytYFG+TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3b:3b:71:cf:79:19:36:65:e7:63:57:7d:48:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Jun 28 13:00:43 2025 GMT
Not After : Jun 29 13:00:43 2025 GMT
Subject: CN=1f202e3b3d5932970c676f9768104e8a8e5e9359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:20:01:a3:75:b8:f2:69:5b:33:ac:21:cf:
10:c6:10:b6:ec:dc:b7:d9:99:e5:07:b4:54:f1:2a:
05:37:99:0d:49:e8:21:a5:4e:06:f1:64:a9:a5:08:
b5:d7:c3:d4:56:71:56:fd:20:07:60:bf:80:c4:9a:
65:3c:49:a5:f7:97:62:db:61:ad:37:26:22:49:b2:
e0:35:c0:9e:cb:11:9b:30:6d:e3:56:9b:aa:66:6a:
9e:d0:dd:c9:c0:29:57:30:84:fe:fb:c9:6a:be:b0:
e3:bb:bc:07:4e:c7:10:32:3c:ec:56:fe:0a:a2:54:
6e:b7:5c:12:38:d5:ef:c6:f3:61:d4:8d:0e:a8:2f:
66:9a:fe:06:10:03:9a:5b:f4:81:a2:d4:ba:f6:8b:
d3:e8:fa:cf:53:1c:f3:60:fd:c1:27:bd:db:60:ee:
af:89:98:22:b2:26:b1:87:d8:23:e0:df:63:e6:3a:
a7:b5:1c:3d:2c:e4:6f:44:23:21:e5:2e:fd:ee:15:
d8:ac:89:d0:f4:8d:5c:e9:a5:55:24:b6:6b:52:06:
da:db:eb:d5:a0:61:a4:01:94:0b:3e:8a:d8:60:6d:
7b:f8:55:ca:42:15:12:3a:83:c1:b2:3a:7c:5f:67:
77:ad:75:40:d4:c9:2c:87:88:f4:6e:d4:ab:93:8f:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:2E:3B:3D:59:32:97:0C:67:6F:97:68:10:4E:8A:8E:5E:93:59
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:da:c6:20:c2:ea:a4:72:f1:3f:ae:1e:9d:a7:34:81:fb:cf:
15:ca:ab:95:a5:a0:df:0c:6b:da:33:b3:a0:08:6a:30:17:e6:
45:80:15:52:4c:e3:81:a4:08:42:65:55:b8:4c:7f:06:74:c8:
08:2d:df:37:ec:6c:ff:0b:e1:61:a7:8b:68:63:6e:0e:84:1a:
5e:a6:e8:17:a6:74:98:78:19:9c:07:3f:6d:c5:cc:e8:76:0a:
5c:46:b1:db:69:05:fa:86:5f:23:35:f7:6d:4a:4d:94:53:8b:
c4:c7:cd:e5:fc:64:7e:0d:56:e2:47:59:63:56:d7:a6:ce:65:
f4:40:02:8b:0c:32:22:09:a7:6a:b3:7c:f0:11:89:bd:ee:ea:
14:37:e5:98:5a:21:25:9b:dc:36:d9:25:7c:2a:7a:1f:75:44:
b1:20:80:10:2b:57:dd:65:94:98:c4:47:b6:58:42:16:04:41:
d4:51:8a:fe:f6:0d:cc:b7:72:0b:98:0c:0c:09:80:1e:a2:e9:
65:e4:14:d0:67:06:cd:dd:27:49:54:9e:4e:3c:b7:66:64:88:
a3:6d:76:94:de:e8:1a:36:db:8a:78:70:ab:09:e9:ac:5b:38:
7f:2f:df:5a:e4:22:05:9f:85:33:4f:b8:ac:ae:37:fd:f8:66:
52:e8:ea:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:09 2025 by rpki-client