Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier: /xZltlzqQjlcjYK3uWtc8SvQuQ3/wq/Xz8F4GPEp81A=
Subject key identifier: 2C:F9:AB:7E:63:CC:34:B3:50:29:9D:02:60:E1:D6:00:67:BC:4B:12
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 0197BB223648188808D50DB92B32EC97B40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number: 0B51
Signing time: Sun 29 Jun 2025 10:01:10 +0000
Manifest this update: Sun 29 Jun 2025 10:01:10 +0000
Manifest next update: Mon 30 Jun 2025 10:01:10 +0000
Files and hashes: 1: 6y2PxXoNf17k752-h-Vh6181ybg.roa (hash: /D4LWQIJRMeiTsLLzqJFb6QygqeaBkt1FMx26cAAcmk=)
2: Uxq2zaQ3C0F2KaVo_-rxCUMMpzU.roa (hash: VbEHRBQ6CnI3V57/ypd9YP2tAsM8cgW+F1+a7XG3s5Q=)
3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: 4iCdwbKvmXHkFH/ru3NcrXTsSL6IEDoQ419pbJ7/8is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:22:36:48:18:88:08:d5:0d:b9:2b:32:ec:97:b4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: Jun 29 10:01:10 2025 GMT
Not After : Jun 30 10:01:10 2025 GMT
Subject: CN=2cf9ab7e63cc34b350299d0260e1d60067bc4b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:6d:ed:20:da:7c:c2:d4:1e:42:25:7e:66:
16:67:11:59:f9:2e:af:d9:58:46:73:8e:4a:59:bd:
ce:5e:9e:3c:79:c5:fd:3b:02:85:00:c6:2b:5a:15:
4b:a3:68:31:d2:ef:76:f8:50:3b:f6:be:4d:8d:25:
04:8c:7a:14:b5:47:c2:57:a8:d3:31:32:7a:46:e8:
7f:48:d8:39:4d:49:13:3d:df:67:4c:5e:b4:5e:03:
0a:ad:01:2b:85:f4:92:52:40:8f:33:c4:32:2e:d5:
aa:7e:64:05:fa:d7:2d:8a:58:8a:36:5c:2b:77:aa:
4a:5d:2e:37:d7:56:c1:fe:5d:34:76:af:4f:ca:46:
0e:25:d3:fd:ae:6d:0a:1f:00:0f:e7:5f:fc:1c:b6:
e1:eb:36:2d:91:27:57:a7:6c:50:a1:33:f3:a3:fc:
a9:6b:15:9b:dd:cb:94:bd:90:ba:a9:8d:ce:6a:fc:
2e:a6:93:40:56:88:7e:7d:f0:bf:78:28:e8:37:dd:
e9:ba:d2:b1:33:38:9d:e8:6e:23:79:ae:96:87:66:
02:84:05:0b:e9:63:9d:51:84:bf:77:6f:61:ed:63:
1d:2a:3f:aa:85:d8:c7:ba:21:68:d3:40:a1:b3:30:
d0:df:73:78:55:6e:d3:26:58:0d:09:48:39:10:a7:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F9:AB:7E:63:CC:34:B3:50:29:9D:02:60:E1:D6:00:67:BC:4B:12
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ca:fc:f3:1e:e1:74:51:37:79:47:0f:fa:a1:1c:da:0d:9c:
31:68:b0:40:0b:3f:c5:f5:59:70:08:ba:12:8e:3d:23:10:4b:
28:55:9e:53:12:43:ea:cd:45:a4:8e:9f:f4:bf:a8:e0:86:ab:
e7:01:da:b7:1c:79:92:57:eb:5a:bf:ee:14:ad:6f:5a:f8:b9:
8c:d6:a9:22:ff:b7:d6:d3:6e:d4:3a:b0:14:6a:b4:45:1e:30:
61:24:f9:42:01:02:3d:27:f9:a1:5f:85:c8:c5:33:fe:c1:9d:
68:6f:88:63:aa:12:19:75:0f:dc:df:34:02:86:f3:85:f4:1f:
eb:89:d3:01:93:98:d6:11:24:62:cd:f1:ef:1b:3d:ef:1f:67:
43:5d:b6:fa:c9:21:31:6f:97:9f:9d:ba:c4:64:0d:de:2d:0d:
46:0e:77:11:fd:19:5b:2f:18:a1:04:56:1b:08:6e:bf:ce:9b:
e8:4a:11:7b:7a:b1:ed:d7:5b:92:63:18:d0:a6:11:ec:14:54:
8f:22:e8:61:35:f1:40:08:9a:8e:a4:28:f5:06:90:17:07:13:
e3:02:de:8e:2f:21:b5:8c:a1:25:68:f5:ea:ae:20:e3:28:77:
e5:be:06:4d:39:d4:a4:2e:db:8d:75:a3:5a:c6:7d:7a:bb:2c:
d8:0c:fe:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:40:19 2025 by rpki-client