Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier: /JvumgKiNykyh5Sj/bB9gVAK7f5XspHdzZFZh9cA3jg=
Subject key identifier: 8E:44:53:03:58:3B:E6:16:4E:46:C7:04:F0:21:55:94:43:F8:5A:50
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 0197B820F9C13C75F11F4F77FC791292AF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number: 0A36
Signing time: Sat 28 Jun 2025 20:00:58 +0000
Manifest this update: Sat 28 Jun 2025 20:00:58 +0000
Manifest next update: Sun 29 Jun 2025 20:00:58 +0000
Files and hashes: 1: AdJqJvlWVSQ_2sjUlxPnhKVvXgE.roa (hash: rvwXexvACQ2KWhkVUmfkFIN6qH1hFBVmtLOZa/tj5cA=)
2: LktV6JWikoIF232VjBQrp6HksI4.roa (hash: KgS7FsPzBvy4Emf2JVBB8x2vPupCGQ56pl16OI2UqbY=)
3: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: IdmB0cqNE2Th8471PGrfy6eGxbE+wrR4u4Hm6KfUIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f9:c1:3c:75:f1:1f:4f:77:fc:79:12:92:af:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: Jun 28 20:00:58 2025 GMT
Not After : Jun 29 20:00:58 2025 GMT
Subject: CN=8e445303583be6164e46c704f021559443f85a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7a:a9:6a:fb:92:73:0c:99:40:6c:e1:f6:b0:
97:42:fa:be:0a:8f:e7:33:13:f7:6d:20:58:00:8e:
59:50:a4:f5:55:96:27:17:4c:56:7d:ba:37:2d:00:
40:dc:2d:b0:3f:46:a9:bb:a3:45:64:4f:3f:98:9a:
54:a5:b4:05:00:38:e3:d3:76:3f:a5:65:36:09:38:
d6:3f:8e:32:ad:50:a6:52:d4:f8:c0:03:3c:0f:3a:
d8:ca:41:ae:b7:45:85:53:68:8d:8a:12:e0:84:9b:
4b:1a:dc:52:8d:d4:28:ca:44:39:2b:59:47:50:f0:
8a:eb:1a:a3:ec:3d:4b:b4:7b:26:64:3a:5b:1e:74:
ee:06:93:58:38:87:c0:03:5b:e6:e7:ea:f1:cc:a2:
f4:16:04:e3:5e:7a:90:ed:c2:44:8b:ac:8c:24:d4:
9d:00:07:bc:4a:24:ca:d8:07:a9:5b:3b:31:fb:33:
62:a0:66:27:fb:6f:ed:7d:58:97:5a:e7:ee:dc:de:
f5:2c:55:5b:97:0e:c2:db:63:54:d7:48:f4:17:ec:
a5:f2:79:4a:d2:1b:2d:09:84:0d:84:5c:9d:1f:89:
bf:f1:39:9c:fb:9e:61:1a:ef:1e:9b:41:c6:59:60:
63:49:fb:49:f7:4e:11:f3:56:46:b7:7d:d5:38:d4:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:53:03:58:3B:E6:16:4E:46:C7:04:F0:21:55:94:43:F8:5A:50
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:46:65:8a:b4:e0:c7:74:f6:6a:de:12:f1:3b:3a:c1:45:f0:
19:46:17:f6:42:e1:90:17:db:1a:90:7a:cb:62:4b:63:91:03:
ae:f1:09:ea:19:d9:dd:f5:9d:e2:67:d4:60:f4:93:16:ad:dc:
e7:15:53:b6:8d:a7:3a:60:87:37:1a:56:bf:6c:bc:65:66:b8:
74:29:fa:69:e8:09:6a:82:99:ff:f2:62:f1:9c:60:6e:84:99:
ef:a3:40:4d:e1:1f:0c:46:d9:5c:83:4f:45:d4:99:cb:b8:5e:
3d:e6:12:27:5e:e3:83:3d:c8:73:e4:53:99:a0:d0:92:06:37:
91:7c:5a:40:c6:06:b9:15:da:af:f7:8e:df:81:6a:92:97:b1:
6b:09:98:b8:6c:e1:6b:98:ec:03:20:e7:e8:d9:50:48:bc:9d:
a4:ab:3e:7e:57:44:2c:3c:d9:dc:ca:58:d9:38:a1:96:41:54:
17:c2:63:ae:0a:9e:a2:ad:16:c9:f0:e3:70:e3:74:9b:f5:60:
bd:82:56:c4:bd:da:7d:13:10:b2:8d:b8:6c:21:25:ed:66:28:
d9:aa:3d:7a:03:b5:39:9e:1e:83:07:62:ca:16:94:6a:69:6f:
27:42:85:20:d5:63:a5:6c:ee:56:21:32:ad:2b:f3:c3:18:97:
54:31:6f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:28 2025 by rpki-client