Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier: e0WEBCBS5+SWlak4xg2Lbf0xrtFICTDIhEBvKNvat/k=
Subject key identifier: B3:78:9B:EA:ED:8D:09:63:E9:21:30:DA:79:1B:73:BC:3F:4A:F1:04
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 0197B7B2EB6CC5B493F15912BC434FE5F94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number: 58
Signing time: Sat 28 Jun 2025 18:00:45 +0000
Manifest this update: Sat 28 Jun 2025 18:00:45 +0000
Manifest next update: Sun 29 Jun 2025 18:00:45 +0000
Files and hashes: 1: KZpkhLSygow8v2JeRm5l6FtwdnM.roa (hash: kEG8Taeqqp1OFVs4WldwYvtT3+8GrXdXaDIEP4OfOTY=)
2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: SdjjF0TWkxZ8w4UkEDg8RKeD1R2lN0dVt9lbZlM6y94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:eb:6c:c5:b4:93:f1:59:12:bc:43:4f:e5:f9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: Jun 28 18:00:45 2025 GMT
Not After : Jun 29 18:00:45 2025 GMT
Subject: CN=b3789beaed8d0963e92130da791b73bc3f4af104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:7b:67:0f:4a:e8:9d:f9:ec:fc:cd:29:af:
99:10:73:e3:24:e8:b1:8b:92:7e:49:81:0e:46:44:
fe:a5:49:59:ab:00:cb:50:31:4b:2d:8b:12:9a:15:
39:ff:a2:25:2c:e7:6f:4b:a7:14:00:b4:4a:9a:4a:
65:1d:be:d2:6c:ac:6f:2a:92:0d:3e:a6:28:3c:23:
f5:a3:2e:8f:12:29:b2:d5:97:c7:75:18:1d:c4:b0:
1b:2e:fc:bf:19:8f:c4:f4:ef:fe:47:cd:1e:4d:be:
7d:f3:57:d7:c0:1c:02:f7:95:24:a2:e8:b9:d8:e2:
3c:f9:63:95:c4:13:bc:ce:e2:dc:5f:8a:db:f7:36:
f8:6b:49:af:32:4d:ce:91:c5:ab:0a:13:c9:7c:dd:
12:7e:01:35:4a:ed:91:00:da:8b:fd:95:64:f0:64:
d3:af:5d:e5:d6:66:1e:fa:02:1a:43:85:82:52:59:
cf:7c:23:91:20:8a:ac:de:6e:0f:e2:a9:73:71:43:
6d:0c:51:aa:1d:da:1f:47:26:4b:af:78:9e:cc:f4:
ae:29:58:0b:7b:73:2a:09:89:2b:1f:95:78:36:76:
66:4b:2e:9c:a5:51:1d:c3:82:b3:7d:09:e8:16:91:
27:fa:c7:77:cb:db:4f:86:de:75:21:90:fb:ac:d0:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:78:9B:EA:ED:8D:09:63:E9:21:30:DA:79:1B:73:BC:3F:4A:F1:04
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ae:c1:5b:8d:3c:b3:3d:aa:85:16:98:3b:f1:e7:63:94:1f:
92:97:86:9b:8d:a6:37:c6:7f:41:b7:a6:02:1e:3c:56:7e:b8:
ed:d5:9f:93:1c:56:11:83:aa:3c:5e:22:3f:e4:59:81:f2:7c:
20:e4:50:9f:50:bc:f9:3e:bf:86:e9:fc:6f:96:10:4a:9e:64:
d2:6f:a3:cf:cb:1e:9f:ca:aa:53:30:28:7d:2f:f9:b6:e9:21:
8a:d7:ae:18:7f:41:34:0a:a7:86:2a:6a:af:07:94:f5:5c:2c:
3e:7c:03:c2:42:4d:8c:38:c9:4d:25:1e:62:c8:8b:0e:4d:47:
5a:75:0c:a3:14:b8:1d:c5:b9:ab:23:ed:8a:5e:7b:7c:d1:17:
0b:1e:9a:ca:50:07:7b:65:46:c8:e7:90:ab:7c:dd:fd:38:79:
28:69:10:36:35:ac:a0:87:e1:24:0b:c8:68:c8:17:b1:f3:86:
92:7f:88:43:57:5c:4b:4d:83:9c:1e:23:a0:86:9a:07:a6:06:
46:f5:c6:a8:c0:4d:83:8c:62:79:3f:9c:5c:bd:40:6c:14:ef:
a1:a2:00:24:0a:56:84:25:59:85:5c:e1:11:fc:f7:48:63:22:
da:69:f8:ef:55:4f:79:bd:12:4b:c9:46:be:d9:d8:cb:bd:f3:
aa:d5:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:48 2025 by rpki-client