Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: 6J7QciZBv6OIs/JrmVAtCRtzhElYmYr0NQ4oy4QfEBQ=
Subject key identifier: CA:ED:50:F6:B0:E0:36:A2:D4:9B:17:2E:E8:98:52:81:6E:0F:1B:12
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 0197B7B34C7014B717BA5B901D03CAEE702C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 11A0
Signing time: Sat 28 Jun 2025 18:01:10 +0000
Manifest this update: Sat 28 Jun 2025 18:01:10 +0000
Manifest next update: Sun 29 Jun 2025 18:01:10 +0000
Files and hashes: 1: DSyQL16gVyPuINIFuwqbtqDaLcQ.roa (hash: 4sWGWWc2NQ2B2oMwbMVn1NZgZ93cb0NJnNIgTj1CBqg=)
2: ldlRi9PG7yaWe_OISm5PxetZ-fs.roa (hash: zAtX/bKzY97x7lzgIkaYD8HV9V6BCkypXN+jO7OstUg=)
3: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: l5zl3rJLW1+PtWpkRis9oKuAsplao48KIpycyaVMXSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4c:70:14:b7:17:ba:5b:90:1d:03:ca:ee:70:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Jun 28 18:01:10 2025 GMT
Not After : Jun 29 18:01:10 2025 GMT
Subject: CN=caed50f6b0e036a2d49b172ee89852816e0f1b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:b1:a8:2f:c4:d0:00:46:81:ae:07:86:c5:
53:95:a0:97:9b:a7:64:d3:db:8b:5e:5b:eb:e9:86:
d7:85:08:af:3c:cf:f5:19:a2:d4:67:1b:81:42:16:
70:b4:7b:e2:2a:40:37:cf:cd:f0:22:55:94:f9:8a:
3d:7f:12:09:12:bb:90:dc:5b:53:af:3f:b9:92:0f:
0b:e6:81:26:16:53:b5:40:61:b4:f2:e6:c8:db:6b:
c0:19:a4:ab:46:4b:76:95:0e:c6:76:15:e2:0c:f5:
80:96:df:a3:af:66:30:1a:6a:88:cc:3a:17:cd:9c:
de:62:bd:2c:45:1a:7e:0b:9f:ca:69:fd:a5:3e:7d:
08:23:c6:d4:c1:f2:36:0e:13:d3:27:91:ba:3d:bd:
b4:fc:0f:5f:00:57:03:9d:c5:50:98:43:74:4f:8f:
3d:2d:32:ec:2a:79:d6:a1:ce:9c:32:fd:23:3a:be:
a2:12:81:00:97:5c:2c:93:a6:41:cd:de:59:53:29:
f4:4a:3e:57:4d:97:8d:94:f0:f5:35:a0:27:8f:60:
f4:0c:f9:ea:fa:26:37:3c:08:e9:3b:03:b6:61:e6:
95:7e:64:2d:4a:80:72:e5:b3:48:00:17:31:37:b8:
20:9d:d2:ff:b5:41:a5:4e:75:ca:74:c3:51:a4:d2:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:ED:50:F6:B0:E0:36:A2:D4:9B:17:2E:E8:98:52:81:6E:0F:1B:12
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:61:43:96:1e:3d:64:55:84:71:9f:f4:c5:cd:87:22:47:05:
90:b7:65:68:16:21:e4:8a:ac:df:fd:9c:08:9d:be:12:72:2e:
50:19:fd:7f:8d:8f:90:3c:51:63:11:7e:ba:f5:07:98:ca:7b:
ff:b5:d7:71:87:e3:94:6d:2c:67:a0:cd:77:9d:6d:1d:ae:75:
25:14:1d:c2:f4:8e:2d:e7:32:ef:f3:27:39:49:2b:0e:56:a5:
d7:92:5a:e7:b6:c0:0b:93:45:e0:bd:e9:e1:80:a4:0c:c1:41:
de:17:79:0c:e3:b8:6e:69:f8:55:b6:f5:05:85:46:76:db:4c:
3e:ec:46:b8:a1:0e:6b:a4:46:fe:44:4b:b2:d5:d1:3d:8a:ac:
62:f4:2b:ab:b2:ce:95:20:97:ad:24:6a:3e:a2:91:06:19:11:
bb:b2:94:f1:13:b1:98:7f:ad:57:4b:29:50:06:68:3a:be:e3:
2d:cd:41:33:4d:ae:74:5f:ee:62:b9:b1:44:d8:ec:ed:99:10:
77:ec:44:7f:c6:31:ca:08:10:22:7d:78:e2:b0:87:6f:99:85:
82:d8:ea:99:46:8f:70:91:cc:9a:c7:84:6e:0f:ab:a6:d0:c3:
69:db:a1:e9:3c:05:d6:ac:2e:08:83:a4:61:10:3d:4d:66:72:
49:2b:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:11 2025 by rpki-client