Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: qhsqDOh4CDf0Utg+u45GvXYfcGAg6PQdoo818lo/QZQ=
Subject key identifier: E1:0E:3F:13:EC:4A:D0:62:03:91:2A:38:36:3B:A1:37:5C:66:78:96
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 0197B821090316380A990FDD2E6C80DA1305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 01A0
Signing time: Sat 28 Jun 2025 20:01:01 +0000
Manifest this update: Sat 28 Jun 2025 20:01:01 +0000
Manifest next update: Sun 29 Jun 2025 20:01:01 +0000
Files and hashes: 1: cbfaYBjluJFGRHIZotfNKfL5QOM.roa (hash: hnnwP5hTMZNnGccOJwmbq229la5aF88t7OiSZXiU/mU=)
2: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: Tv6aLCHQMbnGluStBCNT8/QU+4IeD6mOYn9U2xM2ooc=)
3: zwNxRZCXOiLKuZa_7Wmh9NcuOqQ.roa (hash: 6xxBkLaHc1up/veCbZl0eXM5uTf3B1SDA3dM0Oft33U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:09:03:16:38:0a:99:0f:dd:2e:6c:80:da:13:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Jun 28 20:01:01 2025 GMT
Not After : Jun 29 20:01:01 2025 GMT
Subject: CN=e10e3f13ec4ad06203912a38363ba1375c667896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:44:da:91:93:75:af:cc:59:99:cc:fd:df:
b9:e1:98:84:90:6b:63:c7:fb:f7:b5:cb:00:36:82:
50:93:9c:aa:1b:c3:b2:bf:95:6e:05:f9:95:84:db:
91:06:be:a0:81:59:05:23:74:71:0f:8f:51:cc:e2:
92:62:39:09:13:3b:bc:83:16:1b:39:00:68:27:74:
30:5b:2f:e0:da:b2:42:c3:d0:52:98:b3:c2:0c:1a:
c2:40:2b:ca:23:c1:4a:58:4e:0c:b6:7e:65:2f:34:
a3:8d:82:61:8f:99:50:39:1d:05:91:74:27:58:99:
f0:a0:be:0a:a2:38:85:da:78:82:f5:cc:10:74:cb:
dc:98:23:9e:ca:bd:05:89:71:93:75:74:e1:e3:bc:
6a:48:ba:22:71:0d:29:b7:90:59:7b:46:2a:d6:d6:
54:ba:7d:88:c9:ff:4f:1f:06:12:22:67:19:15:ba:
1f:7c:48:95:a7:fa:c8:b3:c1:06:55:af:ea:b4:56:
6e:0d:28:a1:77:d3:ca:94:b8:93:19:cb:48:d8:69:
e0:e2:55:d7:1d:02:15:10:b4:9c:87:e4:2a:1e:69:
a2:78:6a:37:2c:d1:07:d4:76:14:c2:92:26:18:8f:
ce:3d:fc:16:54:54:fe:2a:9f:43:57:50:3e:5f:fc:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0E:3F:13:EC:4A:D0:62:03:91:2A:38:36:3B:A1:37:5C:66:78:96
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:47:c4:ec:df:4e:35:04:88:f4:a9:72:9d:a8:61:22:0e:52:
3d:f6:b5:5f:65:97:0b:98:83:3c:8e:45:d3:d8:1a:5e:79:ef:
1d:0b:03:07:55:91:62:c6:c0:83:8e:37:f1:f2:13:8b:01:86:
dd:49:3b:52:83:11:66:2c:46:f4:69:e8:36:4f:02:f2:09:66:
49:77:4e:21:19:ad:20:28:91:d4:17:82:5d:31:ca:51:b2:93:
31:12:dc:92:29:eb:56:f3:a7:4d:cc:99:d3:42:ef:e0:8c:14:
1c:15:f7:c3:50:cd:4e:9f:52:4d:c0:90:d4:5f:9e:2a:0d:d7:
62:b7:66:f8:14:81:da:ed:42:23:96:42:f3:4d:3b:64:1c:09:
8a:7f:42:67:03:85:3c:8d:db:5a:5f:d2:3d:bd:a6:04:85:3f:
cf:ba:be:31:04:2e:09:af:ce:1c:7e:c6:32:2a:cb:ac:3c:cd:
fc:5d:d6:ae:23:34:09:52:0f:30:3c:78:80:7d:78:3e:2d:7e:
ad:66:ec:c5:f9:d0:83:5f:78:30:32:97:11:d2:c5:e4:06:ff:
1c:77:0b:74:63:1f:1e:4f:02:00:56:63:5c:d0:c2:91:ba:dc:
e7:9c:85:39:ab:c2:2d:45:78:b6:10:e0:f5:05:15:a0:23:0b:
bd:19:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:28 2025 by rpki-client