Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: GaqTYJYi9RontnfGOB1SEbo19nygrJU18tDn1obnmQg=
Subject key identifier: 4F:EF:92:46:70:E4:C4:F4:D0:F7:DC:0D:3F:45:83:37:A7:65:12:27
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 0197C538286711A8710EF5D14E84BE3EC127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 09:01:21 +0000
Manifest this update: Tue 01 Jul 2025 09:01:21 +0000
Manifest next update: Wed 02 Jul 2025 09:01:21 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: as4FLAixYJBt/Dja0EMMb66vvl13oy0+urueenHEGeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:38:28:67:11:a8:71:0e:f5:d1:4e:84:be:3e:c1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Jul 1 09:01:21 2025 GMT
Not After : Jul 2 09:01:21 2025 GMT
Subject: CN=4fef924670e4c4f4d0f7dc0d3f458337a7651227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:7a:80:c6:09:01:34:26:be:46:d4:a9:ac:
1b:b1:23:db:93:a8:b8:4c:65:a8:cc:25:c9:38:96:
b1:8a:19:a1:e0:49:f2:8b:31:bb:41:33:02:ee:3d:
a7:a0:9f:ea:49:d1:19:f4:ed:bd:f9:0d:af:cd:16:
04:02:22:34:50:1a:7c:e5:7b:d1:68:36:4c:f7:15:
3a:f6:de:17:a9:f1:97:d2:c0:e4:95:60:16:cd:f9:
8c:12:df:30:45:b6:aa:e8:64:44:8c:c0:2d:c6:2c:
8b:0e:11:69:55:01:78:56:26:ba:2b:ba:13:21:a6:
10:fc:92:ac:e2:ba:ba:6d:b6:98:53:58:94:c6:f5:
af:51:83:de:da:bd:f3:af:04:dc:22:a0:fa:5b:c5:
b0:45:c9:b1:4b:4f:e9:8a:94:59:8d:f4:66:c1:fa:
c3:2f:2e:f0:1a:9b:b4:18:27:4b:d0:09:a0:c1:94:
e5:c4:b4:29:78:33:f0:a0:50:e8:57:e8:4d:b1:95:
e6:98:69:77:5e:b1:fe:82:63:77:89:ea:1e:25:28:
dd:8f:90:40:54:80:1c:5a:e8:69:b3:2c:8e:3b:59:
57:6f:1f:cc:9a:22:be:c2:7b:20:70:73:1e:af:1b:
51:a6:a7:4b:19:aa:47:76:ed:16:e9:dc:37:7b:ee:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EF:92:46:70:E4:C4:F4:D0:F7:DC:0D:3F:45:83:37:A7:65:12:27
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:29:e8:e1:64:89:eb:b7:a7:96:a1:12:84:08:a8:c8:00:eb:
d2:07:91:ea:16:cf:b3:3b:1e:93:76:ed:dc:d0:09:9a:0e:44:
d8:d4:f8:d3:4a:1e:b7:17:71:7a:33:ea:03:49:17:31:dd:83:
46:ea:76:16:24:f1:4d:73:8f:55:55:da:ce:3f:f4:47:64:8d:
1d:c2:74:c6:a1:05:b3:f4:c1:91:4d:80:01:19:06:71:ae:e2:
d5:01:41:35:c4:33:e0:95:f7:ff:ca:55:93:88:71:68:2a:bb:
7c:99:80:b3:99:3b:a0:ca:45:93:c0:6f:df:0c:4d:1d:bb:5e:
c0:02:1f:64:89:79:4f:d6:77:05:d8:9d:9a:b5:7f:97:77:82:
b0:0e:ae:cf:ca:e6:07:9e:1f:6a:f7:44:f7:6d:fa:ff:ed:d3:
65:3a:4f:c7:7e:56:7f:0e:91:64:60:81:8b:30:59:9d:45:50:
bd:56:30:1d:3f:81:38:22:4f:0d:00:e0:94:c5:1d:cd:58:00:
09:48:bb:fb:fd:1e:09:5f:09:61:87:be:f4:f3:33:7b:9b:9a:
61:f5:81:b6:91:0f:d4:da:6a:98:ae:35:76:02:f0:69:fd:ac:
27:13:f0:e7:09:5e:ce:c6:8c:7c:f7:28:6f:03:f4:b4:4c:8b:
05:cd:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:20:18 2025 by rpki-client