Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: 9O13RrFFX3G3opeFyzLtVbNph/WmbWiFIki/c/HuHKI=
Subject key identifier: 06:EB:B1:44:8F:66:D8:40:63:B3:3A:8A:41:17:11:9E:53:B6:DF:27
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 0198D5159214DB4D0FE1F346EBA4BA331E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:17 +0000
Manifest this update: Sat 23 Aug 2025 04:00:17 +0000
Manifest next update: Sun 24 Aug 2025 04:00:17 +0000
Files and hashes: 1: V4fEP3mKAgRZldstTINNuk_J6BQ.roa (hash: 8GFsD/JurXta37HamqakliSVJtpBqW+/i/sWeLhcYfE=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: 9TWAF2SVf5eO85jOm/CnaqJDsqtqPb1vLkD67B4Iano=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:92:14:db:4d:0f:e1:f3:46:eb:a4:ba:33:1e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Aug 23 04:00:17 2025 GMT
Not After : Aug 24 04:00:17 2025 GMT
Subject: CN=06ebb1448f66d84063b33a8a4117119e53b6df27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a6:e1:4a:ab:c0:c0:1c:69:21:cf:8c:e1:31:
9e:a6:eb:9a:d0:3d:78:a9:57:6a:78:e0:62:7f:6e:
78:5f:e9:da:da:4a:13:b5:0e:fc:89:09:4c:30:f1:
7f:0b:cd:03:e9:e7:26:64:e4:13:cb:bb:bb:26:8d:
a2:02:24:0a:51:7b:e9:82:df:28:6c:3a:94:ac:21:
89:4c:ba:6e:1e:84:ad:05:a1:59:4e:ac:a7:e0:cc:
b4:61:2b:4b:2a:8f:1c:3e:72:98:2d:83:f2:67:af:
c2:17:f6:d7:49:9f:6f:b8:c1:4f:b2:ce:70:91:69:
fc:c7:ee:85:a9:14:04:c9:02:21:ea:38:75:76:6c:
98:90:f5:bc:1a:18:51:7d:75:3c:70:9b:a4:b2:c1:
c9:04:86:b7:e3:3a:01:28:08:50:21:fe:2e:99:8a:
39:2f:2a:d9:27:ba:e1:ca:c3:d4:52:7e:61:43:81:
2e:64:aa:4e:b8:f1:cc:a6:ae:9e:ea:04:1a:42:2b:
96:b4:bd:4d:01:0f:03:3b:64:6a:7a:36:07:98:fb:
89:4a:cb:46:de:66:98:64:e8:11:e3:98:e8:3f:95:
6d:4b:5d:ce:56:a3:cc:9e:97:12:0a:b6:ac:22:c7:
ee:c8:2d:59:3e:1e:9f:d2:32:49:fa:b9:92:a3:5a:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EB:B1:44:8F:66:D8:40:63:B3:3A:8A:41:17:11:9E:53:B6:DF:27
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ff:42:27:d9:9a:4b:60:61:95:03:35:f4:79:f9:f1:db:35:
00:7f:01:cc:a5:74:c3:6f:83:cd:c7:b8:69:9f:b2:70:c5:6d:
55:fc:ea:cb:00:19:28:ce:8a:37:4b:10:da:9b:b8:b1:be:11:
f3:49:2c:10:47:8b:27:92:ca:bd:e5:2b:e5:d3:6a:41:18:a5:
5f:75:90:78:6b:08:1c:92:0c:c2:50:ce:08:20:08:62:d3:f7:
a3:2a:25:96:df:53:e3:53:85:32:7c:65:9e:56:56:80:8a:ea:
86:6f:ba:9a:0d:12:a8:a0:78:f0:00:9e:5f:2e:ba:83:3b:b3:
e3:15:e6:8c:cb:7d:1b:44:76:7b:cf:87:db:57:f3:62:9e:50:
a1:71:f6:47:fe:6a:84:6a:c1:3b:41:e4:09:35:96:96:d7:70:
bc:f1:26:f8:c7:a5:d7:45:7b:23:a1:55:ba:92:9a:fb:9f:08:
0e:b4:62:74:bc:09:65:e3:7c:24:53:15:89:c6:23:9a:6f:13:
8e:08:ab:b5:60:13:f9:83:fe:6e:c8:69:dd:8c:0c:27:0b:08:
91:c0:cc:23:55:c9:5b:cb:0f:8f:d5:49:39:bc:15:6b:99:a5:
bc:32:fa:b6:0b:c2:ec:87:54:fa:5d:e0:13:b7:fa:d4:c2:d0:
e4:f4:d4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:15 2025 by rpki-client