Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
File: pPAKrld-dFH4jqYEv2ozc0zQMAk.mft (raw, json)
Hash identifier: DIojHSd8jT3XUT72T1T2fXGdSCcv8l0GgPI21ZTQnv0=
Subject key identifier: 5D:7F:C9:B6:9B:95:6D:72:93:64:EE:59:DD:E6:4F:30:34:FA:1A:BA
Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
Certificate issuer: /CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Certificate serial: 0197B77CA009AD7BD7592F38E9E2EDD6D7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
Manifest number: 0E14
Signing time: Sat 28 Jun 2025 17:01:27 +0000
Manifest this update: Sat 28 Jun 2025 17:01:27 +0000
Manifest next update: Sun 29 Jun 2025 17:01:27 +0000
Files and hashes: 1: XRYyvh6J7DkVdKbz1yypWyD6-m0.roa (hash: 6+dNcwPteiKzyDYvKh6xy6mmMEyhqVqNL5Sm9+oU6rA=)
2: pPAKrld-dFH4jqYEv2ozc0zQMAk.crl (hash: UAmWiOA/jQM/rBRxfW9cR2f+a92G0hBwuuJkTkfRQ9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a0:09:ad:7b:d7:59:2f:38:e9:e2:ed:d6:d7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Validity
Not Before: Jun 28 17:01:27 2025 GMT
Not After : Jun 29 17:01:27 2025 GMT
Subject: CN=5d7fc9b69b956d729364ee59dde64f3034fa1aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:13:e5:38:a6:20:16:51:53:9b:d2:f2:6f:
ae:8f:7e:72:a8:cb:e6:12:ad:ea:72:ec:98:d9:d4:
5b:62:7d:30:f0:09:bd:d4:34:07:91:48:40:60:5b:
97:b0:54:5a:8a:e9:e6:1d:33:4b:f5:41:3f:61:ff:
7c:c5:f3:96:17:e0:ac:09:2a:1d:b6:e4:4a:fc:fb:
d8:be:e2:93:fa:b0:ea:55:40:ae:8f:34:aa:ee:1a:
37:7d:c3:20:6d:31:fe:94:e4:63:98:1b:c2:cb:4d:
9d:f1:91:3a:bf:55:ee:8e:45:f8:c2:b1:1c:84:b2:
33:26:f7:e7:de:7c:0e:16:55:8c:fa:f9:b6:8f:6e:
51:41:20:0c:dc:4a:ce:94:a9:6d:d4:c1:ed:41:97:
f9:4a:66:98:4f:ca:28:c0:9d:4d:43:37:f0:bc:05:
6d:ac:97:fc:3e:dc:4f:9f:74:43:f3:2c:5c:09:6b:
c4:05:7e:bb:c2:a5:88:7a:c5:c8:66:de:eb:73:cd:
dc:ed:da:67:01:d3:77:e2:9d:e9:46:f4:ee:14:1d:
41:44:69:71:be:26:48:90:47:0a:01:91:71:ef:76:
e9:25:b7:3a:a0:0e:23:b6:fd:9f:2f:9b:43:cc:01:
d9:e4:26:17:15:a1:2f:4a:89:94:ec:79:3b:74:48:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:C9:B6:9B:95:6D:72:93:64:EE:59:DD:E6:4F:30:34:FA:1A:BA
X509v3 Authority Key Identifier:
keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:28:40:12:10:c4:b8:23:6c:36:af:82:0d:5f:4b:91:df:64:
66:f5:55:e0:b5:97:8c:de:b9:f7:df:2b:db:da:93:3e:33:5b:
07:c0:46:d9:02:ff:e4:16:70:52:ed:5c:1b:91:3c:2e:28:ca:
a2:7b:93:e3:4f:3b:c1:19:e5:6b:c9:fc:b7:53:8d:02:d9:73:
2a:43:5a:ba:a1:cb:d7:26:86:05:86:99:8c:94:bd:56:83:9a:
b8:f6:79:71:b4:6d:2f:38:1d:31:c9:b8:cc:97:d6:2d:8e:12:
f9:47:ee:d3:a2:44:21:82:cc:2a:ad:5e:26:94:a9:22:63:2d:
0d:fa:e8:f7:c9:46:78:c8:38:b6:d6:99:c6:26:1b:3f:8a:c7:
b2:d4:33:d9:a6:3a:d4:c2:8d:00:3f:23:73:0d:53:fe:e6:02:
95:13:10:b0:6d:9f:dc:c4:df:13:eb:28:f0:49:c0:8e:84:60:
2f:ae:0a:fe:4f:73:18:3c:e9:d8:06:f2:fb:86:1d:6f:9e:66:
fe:20:8f:29:4e:50:33:c2:79:c0:02:5a:cc:52:e0:1f:53:53:
ea:5e:ab:5d:35:31:71:b4:54:6c:4f:c5:ac:8f:9c:2d:7c:48:
b2:75:14:2f:2f:99:a4:01:e9:5e:79:d5:c4:3e:37:60:91:bd:
f5:32:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:24 2025 by rpki-client