Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: N4/0YfPO1Rufoq3S2bKNbl5o79C6XMsHjA7HftIGIM4=
Subject key identifier: 79:79:CE:84:CD:20:16:06:05:62:25:45:24:92:C8:7C:AD:13:D1:55
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 0197B77CB2CB056E0AF8D23E04366A29CE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:32 +0000
Manifest this update: Sat 28 Jun 2025 17:01:32 +0000
Manifest next update: Sun 29 Jun 2025 17:01:32 +0000
Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: dlTPB82BMCSlypldkx3lc8wy7pW0FYPoqBftxDnv2Mc=)
2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b2:cb:05:6e:0a:f8:d2:3e:04:36:6a:29:ce:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Jun 28 17:01:32 2025 GMT
Not After : Jun 29 17:01:32 2025 GMT
Subject: CN=7979ce84cd201606056225452492c87cad13d155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:d6:e9:77:23:5e:a6:2e:20:76:c1:24:9d:
89:39:70:55:d7:d0:b7:a5:5f:5a:83:9b:5f:0c:b9:
39:18:41:21:a3:c0:56:e2:a7:02:33:c1:5b:64:90:
ac:b3:6b:56:19:38:74:f6:bc:75:f8:00:85:2f:19:
39:40:20:b6:53:b6:00:4f:f3:be:0a:a8:09:bc:a7:
0e:e5:9c:fa:97:6d:3b:1d:4e:ac:78:29:c0:1e:01:
78:c1:92:4b:7d:d1:88:b3:e0:a9:6c:d8:64:b9:d1:
00:c3:85:6c:78:d6:ee:c0:95:b0:7a:c3:c1:f5:8f:
6a:ae:b4:07:e4:1b:3b:48:b5:af:df:a3:93:5d:47:
78:7a:a6:07:85:da:9b:48:4d:da:ca:96:fe:3e:10:
f5:fc:88:76:fc:de:77:ff:a4:ba:e2:18:d1:d8:fa:
73:e0:78:8e:1e:34:4e:25:23:45:ca:e3:a6:2c:bc:
3a:34:e1:b2:12:30:6e:ab:44:ed:e4:2f:c1:54:bc:
fd:80:92:6f:ff:44:5c:ad:bf:6a:81:38:1d:d1:5b:
ee:52:c0:26:14:41:d2:16:0a:11:de:e0:0d:42:7f:
29:cf:ab:a6:af:f2:83:eb:51:5e:42:48:91:ac:66:
83:9c:0c:25:4f:6a:82:13:a8:91:8b:3b:71:48:e2:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:79:CE:84:CD:20:16:06:05:62:25:45:24:92:C8:7C:AD:13:D1:55
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:09:a2:73:b8:66:0c:df:d5:82:0d:cc:d5:d9:27:23:88:33:
dc:d0:c4:16:d3:ab:63:70:b0:fe:b0:7e:99:d5:34:cf:30:a4:
fc:f7:fd:ff:1e:05:5c:ec:fa:e4:f1:4e:da:03:86:10:ac:7d:
fc:5d:4d:e3:0c:2a:2a:70:d9:98:0b:63:7a:e2:2d:75:95:61:
5d:f1:8a:ce:88:1f:b0:16:2b:5d:60:ae:d0:6f:05:f0:20:48:
95:3b:cd:d7:8b:b5:f2:3c:ea:5c:33:c8:bd:6a:5b:dc:62:47:
3b:f5:6d:82:41:18:a1:b8:cb:54:f9:76:c5:ff:52:06:e4:1c:
dd:31:d8:db:ca:af:02:dd:78:b7:99:6c:f4:27:5b:70:8c:d8:
ba:9b:17:16:27:5b:38:97:0c:3a:10:51:d3:be:f4:97:05:a6:
d7:76:2b:02:32:d8:56:3b:1c:8c:15:b9:8f:ac:e8:84:2d:88:
e9:ba:20:4f:6f:c4:ef:b1:15:2f:d0:41:79:12:8a:6b:56:a1:
66:b9:fc:74:59:f8:43:5d:42:65:c0:2f:17:0e:72:7f:fd:7d:
4a:ff:22:ca:69:23:8f:a3:2c:87:43:c7:13:b1:06:59:69:bd:
74:6c:68:a3:8d:ee:99:00:05:1a:01:08:53:f8:4f:95:8e:f1:
b8:a0:03:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:17 2025 by rpki-client