Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: WsHMRgrQWOT+xvOrfk2iJOGSJg2nf08+93cseGTXwqs=
Subject key identifier: 08:AB:8D:2C:89:0E:2E:F8:2C:8C:C0:B9:41:69:17:04:0F:E3:52:DC
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 0197B933C3632571AF4E1CBFC4EF9BE0463C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 048B
Signing time: Sun 29 Jun 2025 01:01:06 +0000
Manifest this update: Sun 29 Jun 2025 01:01:06 +0000
Manifest next update: Mon 30 Jun 2025 01:01:06 +0000
Files and hashes: 1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=)
2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: 9Wma31Gph6TSnT9ZzKe5K/BW3UgeeX/ALXsFa/XDkKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:c3:63:25:71:af:4e:1c:bf:c4:ef:9b:e0:46:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Jun 29 01:01:06 2025 GMT
Not After : Jun 30 01:01:06 2025 GMT
Subject: CN=08ab8d2c890e2ef82c8cc0b9416917040fe352dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:d3:10:69:95:e1:68:61:23:09:36:09:e1:
82:a7:e9:ed:8f:19:39:7c:d4:a6:15:32:5a:b5:43:
77:9a:1a:db:1d:ea:be:e0:f6:94:51:b9:d2:8c:2c:
f1:f2:38:63:dc:89:80:25:2b:ef:43:d6:9c:21:a0:
99:dd:e0:ea:54:65:86:62:81:98:a5:a8:e6:0f:fd:
86:14:54:21:ce:8d:8c:bf:fe:d2:45:fa:00:65:40:
bb:c0:55:95:26:9b:94:db:f2:56:75:a0:fe:2f:02:
c6:c5:b6:11:e9:23:2e:2b:f5:c0:09:35:7c:0e:69:
2c:22:db:26:30:ca:cc:0c:79:74:df:a6:1c:5b:cd:
47:2a:5d:31:40:e3:e8:e7:19:ad:9b:a0:3c:f8:98:
9f:13:f5:0c:3c:25:cc:96:d0:8f:71:e7:05:18:fd:
f4:de:8e:33:a6:65:a6:98:62:8b:38:3c:b3:54:b3:
5c:2e:38:6d:cb:c4:db:09:4b:58:e1:3c:b3:63:f2:
c9:f6:fd:02:aa:16:bc:a6:11:67:9f:6e:82:d8:22:
2d:cc:e4:e5:cf:4f:1e:ea:c7:68:61:3e:4e:a4:da:
57:17:2c:f4:0f:72:57:fc:c2:42:3d:4f:04:dc:26:
40:8b:00:f8:a8:d4:a6:12:6c:13:0e:01:c0:7c:12:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AB:8D:2C:89:0E:2E:F8:2C:8C:C0:B9:41:69:17:04:0F:E3:52:DC
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f5:ad:d4:62:fc:ba:90:27:03:25:50:87:29:d3:05:41:52:
07:7a:07:43:1c:36:7a:4d:35:8a:3c:b3:ba:94:cb:d3:b2:6f:
dd:81:64:f8:cd:bd:a9:85:49:89:4f:4d:24:16:c6:02:6c:46:
68:80:ab:ab:22:64:d1:1d:2f:47:ad:92:0c:d4:94:c2:76:f4:
80:6e:df:a9:6e:48:87:c8:90:20:76:b9:5f:66:8b:da:55:97:
62:de:df:53:64:3d:76:aa:16:ca:78:7b:53:a7:66:76:de:66:
1e:fa:84:22:4b:93:15:32:5a:8e:e6:2f:70:51:4e:68:2b:70:
e6:9c:b1:5a:ec:f3:49:78:bd:56:2b:07:36:53:aa:75:a7:dc:
1c:12:8d:b0:14:86:2e:49:b8:49:83:a6:e5:f4:8b:3e:d6:9d:
3b:ce:5e:07:15:5b:1d:29:2f:7e:e9:7f:2d:63:9e:44:77:65:
36:cf:a1:d5:1a:f6:3f:3c:da:c8:70:5e:4f:28:85:1f:d0:d4:
8c:e9:47:cf:87:4e:49:a1:c6:26:60:33:1c:bf:9d:e6:1a:ee:
32:3b:71:f6:b7:24:9d:16:68:c4:a8:c9:c4:4c:1c:c0:73:39:
4e:f8:6c:91:96:dd:66:49:29:33:2e:f2:22:98:b0:12:86:4b:
f3:2e:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:29:41 2025 by rpki-client