Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
File: pB97t76hWBYk_LZQOrWnD0IMmz4.mft (raw, json)
Hash identifier: a5wCaUwPNMhkmYWw+TXZgQFR8vTYJ/QTDGl7vHd9Sbc=
Subject key identifier: 93:BA:41:EA:90:EE:AB:E9:7E:98:6F:0A:CF:C2:F4:FB:99:F6:EA:A2
Authority key identifier: A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E
Certificate issuer: /CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
Certificate serial: 0197B7B34E8160744BDB3AE7F7F9DCB5CB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
Manifest number: 68
Signing time: Sat 28 Jun 2025 18:01:10 +0000
Manifest this update: Sat 28 Jun 2025 18:01:10 +0000
Manifest next update: Sun 29 Jun 2025 18:01:10 +0000
Files and hashes: 1: TOnoVfX8Ap4KHroZhyTiZTPqFbo.roa (hash: h8XoURF67JqruQUoq14dZxGEi4Cnu4hmR974XbY5rg8=)
2: bktyDBqNSVITQAf_MKFUeQ2s_nU.roa (hash: q/tuR42MGkp/VtZe/IwxRfy5LTdFIBVwnpSc5i4a68A=)
3: pB97t76hWBYk_LZQOrWnD0IMmz4.crl (hash: +L01bp6rHZqZo16JrKhEYlS32ro6b/ojd4kWfLDLxnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4e:81:60:74:4b:db:3a:e7:f7:f9:dc:b5:cb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
Validity
Not Before: Jun 28 18:01:10 2025 GMT
Not After : Jun 29 18:01:10 2025 GMT
Subject: CN=93ba41ea90eeabe97e986f0acfc2f4fb99f6eaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:47:5a:2e:94:22:da:0a:ec:a8:c6:b1:91:
ae:d7:69:f3:38:3c:fe:e9:3d:7f:10:a1:bb:f6:ae:
81:f2:37:52:d8:22:a9:04:f5:49:c2:6c:fb:46:4f:
2b:d4:9e:8b:f6:09:84:07:15:16:71:a0:32:04:1e:
96:9e:97:ca:04:00:01:41:f8:45:17:c6:cf:b9:4c:
cc:53:5f:86:d8:be:db:93:2f:9e:46:a4:8a:1d:66:
e8:f7:b6:d1:d0:73:f0:81:20:f6:ab:2e:2f:88:6e:
8e:f9:e6:9e:9d:54:2f:76:4a:06:13:8e:65:1f:e9:
9d:da:e8:0d:1f:35:56:a3:bf:38:60:32:92:16:c9:
c1:25:89:29:48:13:89:2c:0f:92:50:02:eb:c4:04:
a4:f8:0a:32:35:82:f6:4c:58:01:20:a0:17:33:9a:
bc:0a:48:4a:b7:cf:31:b7:c3:af:06:b7:65:0a:04:
66:3c:45:03:13:10:61:bc:d8:b9:b8:3d:17:bd:1f:
af:f1:b2:e4:c6:5d:1d:16:5a:06:c6:30:d6:2c:02:
dc:0c:39:80:b6:bc:c7:84:57:b0:b9:09:90:d5:81:
3c:d3:16:6d:e0:eb:9e:34:81:38:18:44:51:45:b4:
54:65:82:c6:ba:7d:d3:db:66:03:0d:6a:b1:34:74:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BA:41:EA:90:EE:AB:E9:7E:98:6F:0A:CF:C2:F4:FB:99:F6:EA:A2
X509v3 Authority Key Identifier:
keyid:A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1f:b1:64:7f:80:1e:8c:14:91:22:59:1f:f7:8d:bf:a3:a4:
c6:51:b7:e9:38:6b:0d:8e:0a:31:ee:1f:76:4b:ba:a1:39:ef:
df:2a:dd:d9:40:4f:c9:a3:f1:c4:f3:fa:27:ca:e5:dc:21:50:
4d:f9:13:39:90:6d:f0:4e:fb:21:37:52:c5:60:23:1d:5f:d7:
1c:bc:f5:9e:0f:90:ed:1c:16:e5:51:77:1e:d9:9a:5a:70:e0:
38:07:cb:ce:81:c3:e1:d3:48:68:82:3e:f3:0a:3a:07:53:40:
e5:eb:2c:79:49:0a:10:99:d7:70:1b:da:9e:bb:1f:62:ad:a7:
bb:e8:7f:2c:fe:ba:44:05:f7:ad:36:c4:c4:7e:94:10:c5:03:
d7:fb:1d:dd:92:3e:26:de:ce:79:8e:70:38:88:34:d2:c1:8d:
25:73:08:35:e3:46:e9:6d:21:88:e5:ef:08:48:5d:12:ea:64:
52:87:b8:1c:11:b6:88:81:5c:c9:15:0c:ec:e8:04:df:f8:6b:
d1:e9:65:73:18:67:4a:ef:48:67:94:16:d0:42:88:7c:40:1a:
b2:ce:87:62:aa:6c:bb:2a:03:f2:51:0c:36:54:30:ce:21:69:
9b:7b:43:1c:62:7b:09:15:89:25:8a:93:39:7b:63:2d:7a:ea:
05:da:d0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:39 2025 by rpki-client