Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: 2j3kTYPYYuOzG4xDBYMwO8YO6SLux3bl1qXf+o3BfLc=
Subject key identifier: C5:4A:02:55:D4:28:93:84:23:C3:91:38:EE:F6:40:48:72:7F:8F:E1
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 0197B77C12448A9E58B3B38D957BA811B29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 0EF2
Signing time: Sat 28 Jun 2025 17:00:50 +0000
Manifest this update: Sat 28 Jun 2025 17:00:50 +0000
Manifest next update: Sun 29 Jun 2025 17:00:50 +0000
Files and hashes: 1: eoOnLGiO6CFkl49Rw92BKVWZ1YY.roa (hash: 5KK2WxAAZ4SHFL6JTNlCRgBRKCCitoVvyQFa3VeriMw=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: U7tL81ybfkFTvWXW2GobYq2pw0kjK1bIcpAqGifVccA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:12:44:8a:9e:58:b3:b3:8d:95:7b:a8:11:b2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Jun 28 17:00:50 2025 GMT
Not After : Jun 29 17:00:50 2025 GMT
Subject: CN=c54a0255d428938423c39138eef64048727f8fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:a4:7e:e6:f1:7d:dd:c2:d3:12:93:3f:a6:
a8:77:40:a2:0b:45:be:bf:41:d3:88:de:0a:a6:2d:
44:23:bd:b3:43:f9:85:0c:50:37:46:45:2b:f4:19:
4e:34:aa:82:87:cf:ce:90:4e:8f:39:e0:b9:03:21:
dd:ef:7e:ea:89:3d:49:48:fb:5a:3a:24:51:11:b5:
46:28:f3:9f:d8:ef:26:14:04:24:ce:21:0c:80:68:
68:e6:2c:39:47:d1:80:cf:3b:4b:ce:6e:0e:25:d7:
c0:59:35:31:26:9e:6a:64:f7:5e:5c:c5:b9:85:61:
86:21:d6:e9:cf:76:77:ba:62:5c:ce:e2:a7:55:1b:
da:21:4c:13:a6:29:70:03:5f:56:b6:2c:34:d1:c6:
34:e5:f5:d5:ff:90:f1:ed:50:a7:4b:7b:c8:c9:36:
20:5c:e9:a8:cd:e6:96:43:a0:4c:e5:1d:a9:f2:4e:
12:c3:a7:3e:67:55:1b:b1:91:86:dd:56:b4:11:e6:
41:ce:e9:d4:6e:31:27:18:5d:4a:b0:d3:a7:45:9b:
3f:17:4e:b9:94:58:08:45:d9:a6:96:28:29:87:f4:
d8:50:63:77:71:ae:69:7c:55:99:a1:4d:66:cc:49:
ad:48:87:ce:b8:15:1c:3c:c0:55:8b:dc:9c:f7:46:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4A:02:55:D4:28:93:84:23:C3:91:38:EE:F6:40:48:72:7F:8F:E1
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:88:5c:57:7f:d5:a7:81:de:25:e7:54:8d:90:ab:0a:8e:20:
f5:1f:a5:5b:4f:31:49:72:ca:9e:6f:74:66:32:cd:e1:f1:28:
c4:26:6c:34:6c:37:31:51:10:c2:af:61:b5:8d:f4:84:fb:d9:
48:4c:c0:d5:e1:f6:37:e0:be:ea:59:93:a9:c5:8d:e2:e7:34:
e8:d6:91:f0:08:f3:49:ad:b1:e1:a2:b0:cf:88:3c:3a:c4:21:
74:94:c2:28:ad:ea:63:c9:15:49:ae:ae:20:c2:d5:fc:3c:61:
f9:1d:b4:a7:ee:fd:f7:26:fe:18:1c:27:9e:20:b8:ef:da:d6:
a9:d4:da:e9:f1:43:25:44:e4:04:17:54:ee:a6:3c:e1:a4:14:
fc:a8:3f:a1:03:f9:25:1a:f4:17:0e:10:3f:d4:82:67:90:8b:
96:21:46:7d:bd:62:6e:92:27:3c:ae:4c:24:da:f7:e9:46:5a:
65:b9:1a:34:dc:67:f4:9c:31:32:f8:21:c8:9f:b4:64:19:08:
f3:fe:0a:df:cb:23:9a:9e:05:ee:66:d0:4a:ae:76:60:73:42:
0a:97:83:69:02:e6:9b:7a:bd:57:f1:92:63:46:30:99:51:4d:
24:b5:9e:75:99:f8:98:e8:d1:af:b8:1f:71:1a:48:86:c5:4f:
a8:a5:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:33 2025 by rpki-client