Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
File: pCNxKB3-GQctEzndBIKyqvrVQs4.mft (raw, json)
Hash identifier: NySfeK8CBto3Sdj2dXVcABeU2hmlkbFYuBJ1xO0xum8=
Subject key identifier: 4B:1A:97:6A:C2:52:24:60:A8:EB:88:A4:5E:30:77:EF:A7:2B:B0:CC
Authority key identifier: A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
Certificate issuer: /CN=a42371281dfe19072d1339dd0482b2aafad542ce
Certificate serial: 0197C426377F7909D19EC45916FBF7FACD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
Manifest number: 0896
Signing time: Tue 01 Jul 2025 04:02:08 +0000
Manifest this update: Tue 01 Jul 2025 04:02:08 +0000
Manifest next update: Wed 02 Jul 2025 04:02:08 +0000
Files and hashes: 1: pCNxKB3-GQctEzndBIKyqvrVQs4.crl (hash: BfiLaoF9UvB+L5YXoK3YmCaJrggzxBZ2asjDads0jsk=)
2: rWk5sIUEQt5GM5tD9jvlVGxlmoc.roa (hash: bdSHmybqlxfqe2LDlmT/vhR2hatifsBsFgj+STLVUXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:37:7f:79:09:d1:9e:c4:59:16:fb:f7:fa:cd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42371281dfe19072d1339dd0482b2aafad542ce
Validity
Not Before: Jul 1 04:02:08 2025 GMT
Not After : Jul 2 04:02:08 2025 GMT
Subject: CN=4b1a976ac2522460a8eb88a45e3077efa72bb0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:fe:08:fc:43:3c:f1:80:4e:84:59:f7:46:
9f:f9:82:cb:ff:cf:4e:07:7e:8f:88:80:cf:b8:17:
e7:ca:00:84:72:fd:36:2c:63:34:c9:f0:01:41:84:
50:00:9c:7a:d3:71:40:63:4d:41:86:23:2e:d8:a4:
8b:40:29:4c:82:1b:f6:af:53:f3:6e:87:ff:33:22:
2e:4a:83:d0:3e:01:3f:8a:d5:39:95:82:25:e1:f8:
d3:2a:f1:3d:4a:ae:e1:49:28:f7:b9:4b:e5:4f:16:
63:b7:3a:57:16:d5:9a:0f:11:d9:37:31:99:a6:ee:
30:ed:17:76:82:46:76:79:43:9d:02:65:12:01:2d:
00:7e:38:53:02:e2:21:b1:c2:ab:1c:36:63:37:9f:
04:2d:db:0d:5f:66:9c:f4:8d:bc:97:c1:4d:68:e9:
ee:09:b5:c2:f9:ea:e7:22:89:17:e4:84:9f:74:ec:
b6:eb:2e:55:f7:11:f2:98:fa:9a:7c:4f:ff:0b:d6:
d1:87:e7:16:dd:1c:7d:ce:99:55:41:97:60:f4:85:
81:4b:a9:7e:48:9e:05:80:c8:d3:eb:97:9c:22:78:
98:f3:22:12:e0:1e:6d:ee:42:de:54:6a:c1:c4:4a:
3d:cc:ed:c0:b5:41:b2:43:4f:f2:88:51:cb:9f:d9:
b1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1A:97:6A:C2:52:24:60:A8:EB:88:A4:5E:30:77:EF:A7:2B:B0:CC
X509v3 Authority Key Identifier:
keyid:A4:23:71:28:1D:FE:19:07:2D:13:39:DD:04:82:B2:AA:FA:D5:42:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCNxKB3-GQctEzndBIKyqvrVQs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a43a05-603f-4607-bc68-99060e2458ec/1/pCNxKB3-GQctEzndBIKyqvrVQs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:fe:f9:3b:26:9b:a6:ef:77:3a:1d:75:ae:41:62:12:1b:a8:
f0:ee:36:54:57:23:5c:5c:f5:33:9c:ce:0a:97:47:85:16:02:
c0:9a:73:6a:28:70:d2:a3:ab:49:cb:0a:c5:d3:81:ff:11:37:
5d:af:e1:c9:8d:8b:ae:b4:88:e6:2d:6b:fc:12:6e:02:17:2a:
73:f4:18:82:17:86:bc:e9:15:1b:e6:30:80:d2:de:bb:00:3f:
c4:98:b9:3d:0c:9a:20:c2:d1:97:3c:0c:f9:29:27:02:90:09:
58:07:b2:4d:57:40:44:37:70:e5:4f:28:05:4a:30:41:f6:e6:
de:a2:94:ee:d5:59:60:a4:c8:61:62:18:c2:f4:9a:d1:9d:05:
2a:8d:c4:cb:82:74:d3:ac:4d:a3:68:ef:01:e1:27:0e:29:0c:
0f:72:d0:5f:29:91:bb:61:dd:cc:80:17:04:ee:6c:9f:46:bc:
33:22:b1:bf:33:ab:d1:0d:83:ed:39:ab:e4:97:b4:c6:03:c7:
90:68:9e:32:28:28:4e:df:8e:8c:a8:51:2b:db:ff:d8:36:56:
77:29:b8:47:50:78:8b:e8:5f:39:52:08:b8:4c:95:82:a5:c9:
78:57:88:76:90:88:77:13:27:0e:6f:47:73:cb:7a:cf:8b:3f:
e1:d4:07:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:07:46 2025 by rpki-client