Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: B1S3N4CrpGFietMtmMQ/X1kBLvZVQWVUGRnyBsRTlOw=
Subject key identifier: A5:D2:B1:E2:F0:50:BA:92:F4:56:64:10:EE:86:F1:F1:9A:2B:B6:8B
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 0197B6D7AEC1F18DBE7F06A1868BB0AF4F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0C4A
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: sM6Dg7RcIZcH1Me2YJqOPwo2qdehB3vMfvgcE3ne7Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ae:c1:f1:8d:be:7f:06:a1:86:8b:b0:af:4f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=a5d2b1e2f050ba92f4566410ee86f1f19a2bb68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:bb:08:1e:25:48:57:89:30:7e:29:2f:9e:
5e:93:b1:99:bc:43:c0:6f:f9:aa:b6:f2:84:d4:fd:
1d:5a:5b:ea:20:ce:dd:13:d8:50:61:68:c7:25:99:
ab:1c:b1:bb:27:1c:e1:d3:51:e7:4b:3e:6e:a0:20:
d2:ce:85:2e:08:6d:5c:75:75:71:a2:27:cc:c5:b6:
fe:e4:82:bf:ac:29:5b:de:10:58:76:84:61:c2:05:
15:e6:63:0a:af:9a:e1:db:f2:19:b0:47:5c:01:be:
d6:af:8d:40:cc:80:a2:d8:51:40:56:00:78:dc:5a:
a8:1d:c5:d8:49:f3:60:ad:ad:3f:08:eb:6c:f9:75:
ee:ed:bb:49:95:14:0f:5f:ee:64:c2:ed:38:fe:76:
9d:fa:37:99:47:e9:9b:70:45:ba:df:9d:20:b1:69:
6f:6d:a4:a8:9d:6e:de:61:12:e3:52:7c:45:f2:2e:
0a:74:e9:9b:68:57:31:b3:e9:a5:a0:f8:fb:f3:13:
8f:28:a1:31:ea:59:80:6d:7e:b6:f6:e5:71:6f:3a:
84:60:fd:21:44:bb:cd:9e:41:94:0b:a2:0b:6b:1d:
aa:c3:1e:ce:be:5e:7d:d2:87:52:85:da:48:af:e3:
2e:73:28:53:85:ae:12:ba:d5:32:6e:06:99:d7:12:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D2:B1:E2:F0:50:BA:92:F4:56:64:10:EE:86:F1:F1:9A:2B:B6:8B
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7a:94:fa:61:71:07:d9:e9:93:cf:7e:24:53:a6:b5:05:4e:
77:2a:08:14:48:b3:f2:0e:17:dc:a1:df:bb:ec:91:70:c0:19:
a5:59:a5:78:5b:8d:f9:4f:4d:dd:21:d8:7d:d7:71:80:32:54:
52:ac:28:c6:e1:e7:94:30:eb:6a:ed:74:3d:81:fa:63:ec:57:
2e:ce:84:85:90:9c:5b:d3:47:1c:82:54:a0:43:82:8b:91:f8:
97:50:7c:00:e4:66:08:0b:43:b8:51:51:cf:0d:42:99:fd:7b:
f4:8a:27:4f:1d:96:c1:5c:cc:1d:fc:54:53:79:50:b7:c8:41:
7f:ab:37:c6:ff:91:10:72:d9:44:58:d9:f7:2a:a0:b4:d0:8a:
24:e7:a7:52:3b:a7:f2:b0:8f:83:4e:0c:b8:d6:c1:a8:2b:2d:
18:55:ad:2a:a6:9b:94:f9:9f:ca:4c:99:5d:1d:9e:7a:ee:af:
18:2c:76:ee:3f:33:e2:7e:75:11:4c:38:87:fe:ba:dd:8d:e4:
de:e8:9b:c6:7b:d1:0b:7f:70:e5:cc:a6:e0:a5:a7:df:9f:69:
2e:e4:7a:9c:99:6d:cf:62:3b:eb:08:4e:73:54:a5:53:cd:55:
a2:ac:d4:e6:d3:a5:81:67:87:1b:43:a9:a0:d2:28:b8:5e:4a:
6a:1c:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:58 2025 by rpki-client