Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: WiYc0Ac2yJQQZgQledomk+acZvIdlNAQiCQ0kluLQPk=
Subject key identifier: A7:7F:ED:48:87:C8:4B:8B:67:35:40:87:09:77:FD:F8:5C:0C:67:B1
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 0197B88F0354D0BC64D5F699A61076FB560C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 09A9
Signing time: Sat 28 Jun 2025 22:01:09 +0000
Manifest this update: Sat 28 Jun 2025 22:01:09 +0000
Manifest next update: Sun 29 Jun 2025 22:01:09 +0000
Files and hashes: 1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: lCIM3nmcgRYfFh7a5wT4veV0zsUl4Nkv27KjJNBvyVU=)
2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:03:54:d0:bc:64:d5:f6:99:a6:10:76:fb:56:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Jun 28 22:01:09 2025 GMT
Not After : Jun 29 22:01:09 2025 GMT
Subject: CN=a77fed4887c84b8b673540870977fdf85c0c67b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:0d:45:41:e7:fe:93:fa:5d:c7:1b:91:d9:
ba:34:cd:01:16:4b:12:83:a0:6a:d4:ef:96:05:d5:
82:ce:af:f0:01:81:19:52:2d:84:db:83:45:48:58:
1e:5e:41:98:f7:fd:9c:c1:ad:e9:7b:aa:0f:eb:fc:
1e:9e:e2:3c:fa:06:f8:bd:95:d0:1c:30:14:3b:c9:
ae:23:c6:7d:6c:1a:54:d4:23:9d:16:f1:73:20:3e:
67:dc:e0:24:d8:4f:be:61:85:94:ba:59:dc:4f:3e:
2e:f8:63:f1:6a:1d:1f:b3:ba:0c:85:a9:fb:2d:3a:
c7:83:a4:52:27:65:51:f7:9f:15:3d:d2:8f:87:7d:
13:22:31:8d:e6:1d:8e:8b:65:2c:f3:c0:39:85:57:
cd:06:e2:62:91:42:7f:31:b4:24:fa:8a:d2:b2:19:
38:a0:64:c4:a1:27:4d:47:51:58:24:fe:95:24:c0:
b8:c0:dc:81:6f:e7:a6:aa:da:b7:5c:74:24:ad:2f:
14:25:a0:29:78:4e:2f:ec:0f:a9:f0:48:10:5c:e2:
32:28:2b:5f:df:71:a4:e1:be:98:04:8a:7c:e7:e1:
5f:ac:ce:e4:95:e5:b2:fe:26:e3:3e:32:3e:d6:0a:
03:09:53:d7:78:41:e1:3a:27:c6:22:89:c9:42:bd:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7F:ED:48:87:C8:4B:8B:67:35:40:87:09:77:FD:F8:5C:0C:67:B1
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b5:8d:83:13:5c:7d:d0:30:fd:7f:69:19:57:77:d8:7f:ad:
25:fe:c9:80:ec:3b:52:98:07:45:3c:a0:8a:2e:6c:45:d4:4a:
dc:8c:9e:40:5a:6d:5e:0e:b3:0a:71:b6:0b:c4:08:bd:6f:c6:
b6:b1:e4:6f:d2:a0:b7:d8:b5:37:25:d9:22:57:d7:c2:5b:d2:
0f:b0:91:e7:d5:32:2c:ff:f2:78:a5:01:e6:c5:4f:5f:39:5c:
84:ff:9a:cc:00:4f:38:e3:4f:5f:4c:b6:a8:ee:2e:03:d9:04:
47:69:14:42:d6:76:08:b3:ef:60:b6:4e:c7:57:51:18:68:01:
ba:96:29:e1:d2:0c:f4:86:ff:a1:0e:c8:18:c6:1e:1d:cb:2b:
c3:77:ff:fc:ef:72:8f:43:30:dd:2c:b5:de:11:36:1c:65:e6:
92:c0:12:fb:1f:0e:7c:64:18:3c:bd:c7:77:af:00:97:11:d7:
9c:39:50:13:92:92:31:4a:c1:26:8d:3f:68:19:32:4b:5c:a3:
5e:f0:9f:eb:68:64:f4:ad:73:ab:b7:03:75:60:65:5c:6e:a1:
00:74:01:a8:3c:f2:b8:c1:87:1e:25:7c:d3:ee:49:9e:a7:14:
76:3a:50:b6:b2:f7:12:33:e5:b4:21:37:fe:71:b5:c5:7b:b4:
4e:2b:40:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:36 2025 by rpki-client