Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: Ntcl3Cnv/cEO8pjmn5to2vYmu+r59Y+6bVYUninxrxg=
Subject key identifier: 2D:F5:D7:88:16:CE:A7:01:D4:51:77:7F:89:89:0E:05:4C:35:63:EF
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 0197BA7DEDE44B28CA9AB38D3A83F6820982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 15BE
Signing time: Sun 29 Jun 2025 07:01:44 +0000
Manifest this update: Sun 29 Jun 2025 07:01:44 +0000
Manifest next update: Mon 30 Jun 2025 07:01:44 +0000
Files and hashes: 1: iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa (hash: gM1ZjnX5a45F3g+DHFf4ROLZzbrv4Z9zB/pBieJvcD0=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: kfHwMcGwTCztWxu+eZg4z8WKA/uF4eR49JNZDoIjjVI=)
3: uSjPkHVrQGEYzySpy8LO3vhOhQk.roa (hash: 7CsfbkRbBqND0q0gdzh2M/F8+y9Oj0uA6RZKZkPuiPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:ed:e4:4b:28:ca:9a:b3:8d:3a:83:f6:82:09:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Jun 29 07:01:44 2025 GMT
Not After : Jun 30 07:01:44 2025 GMT
Subject: CN=2df5d78816cea701d451777f89890e054c3563ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:14:dc:39:a4:ba:a8:fb:a8:16:21:9c:74:05:
87:5b:2e:bd:16:9b:36:3e:4d:1c:35:bb:8e:0d:2f:
21:31:b2:a3:34:a7:e2:00:32:5a:ba:c8:e6:b6:cb:
9c:41:11:9d:37:a7:b6:93:0b:f2:3f:09:41:6f:ee:
23:3b:ef:b2:91:75:cd:ea:be:5a:77:a6:2f:9a:02:
c8:0a:7e:4d:cf:44:94:9e:0c:c6:d0:71:10:5d:5f:
9d:67:4a:d8:96:90:38:94:cd:93:fe:eb:54:ef:7e:
40:07:38:74:93:2f:6f:c3:8d:34:bd:db:17:7a:52:
91:56:87:99:c3:d4:ca:35:f6:68:91:47:ca:61:0b:
2d:78:22:e3:94:0f:4c:cf:9e:d4:56:3e:b7:d0:bd:
00:b0:c4:31:46:24:c7:4c:36:00:80:68:ec:c8:14:
f3:85:a0:c5:a3:b5:6f:e5:46:fc:86:07:fc:4f:9c:
31:5d:f4:35:f0:98:ce:10:07:1c:0c:2f:1d:ae:b5:
3d:0a:cc:f7:e9:68:b9:5f:1b:cd:b0:bb:a7:87:d2:
1a:1f:fd:51:71:ab:08:5f:82:fb:0b:3d:c3:95:3e:
17:e8:92:09:9e:b1:4b:82:c3:d3:dd:d5:39:ef:de:
14:c5:0b:64:42:92:ba:46:34:34:c5:fa:f9:22:41:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:D7:88:16:CE:A7:01:D4:51:77:7F:89:89:0E:05:4C:35:63:EF
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fc:fd:b8:0e:38:41:41:a7:db:54:96:90:93:6f:0a:5a:dc:
dd:83:d4:02:71:2a:29:d5:49:ad:63:20:2c:bc:c5:f5:5d:f3:
10:40:f8:e3:dd:87:47:3b:b7:84:97:04:32:64:6c:27:69:eb:
05:df:36:3a:74:9b:25:89:79:39:3a:01:6b:10:38:3d:cb:4a:
e6:7e:8a:4d:cf:e6:b1:db:70:4f:d7:bb:80:8f:8e:71:26:29:
67:5d:d0:f1:72:22:4b:2d:c3:90:55:bc:fe:84:0e:2e:99:7c:
25:0e:6d:49:58:e7:cb:76:21:57:5c:70:46:d8:39:83:fb:b3:
59:eb:ca:16:0f:98:62:75:74:9d:a6:a9:e4:5c:0c:81:3e:72:
b5:9c:97:75:d8:40:8f:8b:8d:44:a4:9a:f0:dd:fd:cc:73:ce:
a4:3a:1e:bf:14:a6:8a:9a:1a:c5:0a:bb:6b:9d:44:1d:75:51:
9c:08:48:3f:a2:3e:39:e0:60:24:3c:07:8c:19:6a:9e:30:24:
a7:b5:38:ec:e6:19:f8:ee:16:8d:88:3e:f3:56:2f:b6:3e:76:
c1:4b:4e:b0:67:fc:79:39:05:4a:7d:9d:cd:e9:23:ca:fa:d7:
c1:23:ac:07:0a:2a:f5:54:fa:ad:b3:09:23:0a:94:23:fe:c7:
69:62:3a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:20:11 2025 by rpki-client