Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: AMtPRDspOWWp8Whjot5IFpS1pgGhKk5sNhsvN704d2I=
Subject key identifier: 05:AC:8F:DE:A0:07:71:DD:4D:7C:26:CC:FD:3A:D7:8F:74:6A:74:E4
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 0197B70F4EE8608D186303D9205FA1989068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:02:03 +0000
Manifest this update: Sat 28 Jun 2025 15:02:03 +0000
Manifest next update: Sun 29 Jun 2025 15:02:03 +0000
Files and hashes: 1: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (hash: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=)
2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: w4prgTRcDbB3YbhB7bwA18InHVr8gEJzRXW6Acu1XNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:4e:e8:60:8d:18:63:03:d9:20:5f:a1:98:90:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Jun 28 15:02:03 2025 GMT
Not After : Jun 29 15:02:03 2025 GMT
Subject: CN=05ac8fdea00771dd4d7c26ccfd3ad78f746a74e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:36:75:6a:10:2e:4f:f8:39:37:a5:d6:76:
fd:c1:86:18:3e:62:78:bc:2d:e4:8a:15:65:26:b3:
61:07:2c:1f:b6:2a:96:d8:41:13:e3:ee:43:bd:5e:
e3:34:ef:ef:89:b3:56:b3:5d:89:e0:43:8b:0b:84:
12:e7:8a:98:f1:81:e0:e6:b3:c7:ca:63:e7:81:f1:
3f:f4:99:5b:f7:41:11:fb:1f:5d:e7:f7:69:60:7f:
49:9b:e4:86:3c:46:dd:98:98:bf:db:75:81:c8:79:
8e:2e:22:f9:9d:b8:d1:c7:ed:b3:79:b5:01:b7:75:
36:42:a0:70:93:3d:42:16:19:c4:83:06:14:91:6a:
9f:23:3a:93:01:b2:90:1c:75:0f:4a:fe:9d:42:67:
0c:b8:d4:7f:e9:8f:07:30:a1:b6:c8:96:41:17:57:
dd:fd:98:09:90:7c:b6:f9:97:84:1e:0a:77:88:89:
26:a1:ca:ac:ae:2a:54:40:a2:f2:3e:23:53:8d:15:
ca:a7:da:9e:97:00:5e:f3:99:59:a2:2d:50:86:4e:
ec:ad:be:48:ab:4c:21:3c:fc:e2:94:09:e9:18:2b:
8b:c1:87:ce:0e:9a:b6:73:1c:77:39:5e:e5:73:8d:
b7:02:5a:d3:c5:65:75:ce:97:ee:5c:88:ba:d2:32:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AC:8F:DE:A0:07:71:DD:4D:7C:26:CC:FD:3A:D7:8F:74:6A:74:E4
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:91:b9:d7:4d:47:53:47:e5:70:0c:68:fb:63:03:5a:b0:9e:
21:aa:2f:9b:df:af:34:81:4f:1f:3f:b1:cf:d5:aa:17:1f:3c:
f8:77:1d:ce:76:8f:83:3e:fd:8b:81:93:8c:65:ca:97:b6:ab:
c6:b2:0b:f3:ae:20:8f:d3:d0:af:3e:6e:41:e5:13:f1:56:fc:
08:e7:ca:7a:bf:88:7a:2f:fb:f1:b0:ba:c8:be:fc:93:84:80:
29:88:16:5b:b8:97:4b:97:f3:7b:4d:47:af:47:7f:4b:a4:9e:
47:6c:f1:35:7a:87:ff:bc:d9:1b:7a:0f:ff:e5:86:53:20:89:
af:16:91:5e:d0:25:88:04:2a:60:59:50:98:80:28:ad:a7:b7:
ba:6b:bf:36:8e:97:de:cd:8a:e2:6d:74:a2:28:5e:4e:27:09:
df:0f:7a:04:73:92:2c:29:ea:4d:04:2c:b2:a6:1e:04:18:75:
c1:fc:1c:6d:9d:dd:a2:5d:a8:d9:73:3b:3a:75:f5:ac:a6:71:
11:72:7c:a2:dc:a6:8d:4b:3d:85:ec:d0:01:9c:ec:39:ae:a1:
86:9f:cf:be:92:19:21:c4:bc:18:8a:3e:d2:ea:68:0c:ce:78:
82:46:e7:ba:2f:93:81:57:0e:6e:97:cc:bc:cc:0e:60:ff:e4:
00:08:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:24 2025 by rpki-client