Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
File: pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft (raw, json)
Hash identifier: 1oKsJLDWaV/SYBHMbCaWrMVuH5X1rpr7B/fRKlMNpXg=
Subject key identifier: E8:73:46:C8:4A:CB:C1:4F:67:7F:15:DA:71:96:F7:62:BA:CC:0F:36
Authority key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
Certificate issuer: /CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Certificate serial: 0197B820D92D2EEC6B6BE12717CD56330C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
Manifest number: 03E2
Signing time: Sat 28 Jun 2025 20:00:49 +0000
Manifest this update: Sat 28 Jun 2025 20:00:49 +0000
Manifest next update: Sun 29 Jun 2025 20:00:49 +0000
Files and hashes: 1: pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl (hash: /CMEQ7SBPktQEReGFVIe9qTXZCRxPuIa3LemfWYUhlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d9:2d:2e:ec:6b:6b:e1:27:17:cd:56:33:0c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Validity
Not Before: Jun 28 20:00:49 2025 GMT
Not After : Jun 29 20:00:49 2025 GMT
Subject: CN=e87346c84acbc14f677f15da7196f762bacc0f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:d2:36:a8:d5:70:1b:73:bf:b8:2d:d0:7f:
5c:e9:61:7c:f6:14:f8:3b:f8:a1:be:42:c9:27:e1:
4d:62:dd:ec:7b:95:93:8f:78:c8:8f:ad:a3:b3:8a:
02:17:cc:4b:b6:88:0d:75:af:88:75:90:3e:6a:ea:
2e:d8:47:2a:48:b4:0b:07:bd:15:5f:02:1b:51:da:
1f:b4:16:c5:03:6e:5d:cc:e8:44:4f:30:12:b0:f4:
cc:b9:4e:4d:09:4c:4e:4a:64:44:0a:25:24:8d:5a:
30:4d:39:a2:b6:c5:b4:58:5b:ba:37:5a:c9:a3:55:
21:19:4e:cb:01:03:f0:2a:07:45:e6:52:47:ac:f4:
2d:ee:c0:7c:86:2f:f7:1a:d0:66:90:8d:7b:d0:1a:
70:ba:8b:ae:35:21:91:bb:3a:9f:1c:3e:51:7d:79:
ed:be:a1:99:11:e0:af:3c:5c:64:69:2f:00:b1:4c:
b0:b1:08:50:b8:ae:0e:c0:c2:db:ea:b4:a6:fc:d5:
c5:26:dd:19:27:19:62:54:3e:13:24:1b:eb:67:a4:
cb:22:72:79:92:28:81:54:8f:8d:e4:4d:60:dd:d6:
e6:3d:0f:05:46:f7:c6:9c:33:88:9a:0a:88:6d:85:
ee:38:61:67:c0:15:80:79:d8:3a:96:3c:9c:59:9c:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:73:46:C8:4A:CB:C1:4F:67:7F:15:DA:71:96:F7:62:BA:CC:0F:36
X509v3 Authority Key Identifier:
keyid:A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c6:ad:91:43:60:a8:d5:c7:74:45:96:83:a6:45:5f:de:e0:
4d:7e:46:d8:04:12:82:9a:1e:20:d5:38:c9:b1:fc:a8:a3:d0:
d9:05:a3:ab:b3:ef:4b:92:7a:76:c7:cf:5c:7b:e3:59:87:cd:
06:28:72:b5:06:03:83:38:e1:04:d1:c8:34:bd:78:61:f2:92:
3e:e4:78:be:27:e9:30:19:b8:e4:7c:1d:d0:8f:19:4e:53:7c:
cd:a1:19:2c:21:5d:c1:32:92:83:e6:b2:ce:62:a2:26:44:19:
08:57:62:c9:f7:e5:2c:82:6e:cd:0a:ee:e4:8b:28:8a:f7:60:
e9:f1:8d:06:47:01:04:a8:b8:af:65:76:47:77:4f:ce:3d:89:
1a:25:c3:53:10:2d:43:17:40:05:41:5a:a2:0e:08:2a:5f:7c:
02:14:61:59:86:2a:5c:ec:d5:3c:18:2e:7c:fd:16:64:ce:40:
2b:a7:e6:ac:9e:b9:87:bd:42:83:e8:c6:1a:8d:c0:63:66:d9:
72:82:45:23:06:5e:30:01:11:0a:c8:65:cb:4b:d4:f3:7a:bc:
e2:7b:76:26:98:37:b5:e3:78:db:71:e7:0b:bc:2c:69:b9:23:
b8:26:24:fe:88:5c:b7:02:5c:78:b3:5c:2c:f6:e6:9d:4e:a2:
a6:11:73:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:04 2025 by rpki-client