Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
File: pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft (raw, json)
Hash identifier: WZg1OkZosyuGjD7/LXRqdJ32Man6mHgVuXvUytIeVWk=
Subject key identifier: 09:C3:66:98:A5:1D:BF:B5:34:D1:63:F1:92:11:E7:F3:A1:AF:18:11
Authority key identifier: A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41
Certificate issuer: /CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
Certificate serial: 0197B8FCE333B1EA85332946B3FFD6CC6F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
Manifest number: 13EA
Signing time: Sun 29 Jun 2025 00:01:10 +0000
Manifest this update: Sun 29 Jun 2025 00:01:10 +0000
Manifest next update: Mon 30 Jun 2025 00:01:10 +0000
Files and hashes: 1: pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl (hash: oArqK4Y5aA9vqMJFIm3MbLxBGdYKp0fy7usgoA6A2Ws=)
2: vzmyNrlx12Of6nkhjpCUrNuMnE0.roa (hash: GZnGfQJ22BwvGawBRyPMAw4FcsQFgdQkm7oclrkMSK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:e3:33:b1:ea:85:33:29:46:b3:ff:d6:cc:6f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
Validity
Not Before: Jun 29 00:01:10 2025 GMT
Not After : Jun 30 00:01:10 2025 GMT
Subject: CN=09c36698a51dbfb534d163f19211e7f3a1af1811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:9b:3e:78:a9:f1:e8:2c:60:ed:cc:bd:43:
8c:ef:a7:9d:78:a3:6d:8e:38:93:f7:4b:55:ce:84:
53:45:bc:b7:76:94:7f:a3:49:7c:e2:7f:9b:8e:ef:
68:51:90:39:7b:c3:aa:f7:e4:52:91:1f:6f:66:a7:
ae:34:30:27:55:9d:b8:78:cf:6b:08:44:2a:31:d8:
7d:ef:e5:a1:76:5d:74:fe:6e:ba:96:c0:18:43:2d:
91:17:26:3c:07:e2:b9:0e:28:a6:39:8d:fe:53:42:
29:84:43:4c:ba:96:79:97:24:9f:e4:e8:d2:44:99:
e1:e2:60:81:2a:d2:bd:0b:44:c2:70:30:34:91:4e:
ea:76:52:5f:7e:0e:ef:66:4c:60:d3:45:e9:6d:e6:
2f:af:a2:6e:26:33:8c:9d:8b:8f:9f:79:47:c8:41:
69:6c:ec:6e:a0:c3:88:3d:99:25:a7:7a:ea:b9:58:
64:4e:a9:26:7b:1c:a3:92:c9:60:6d:d3:04:3b:a2:
36:aa:f2:c9:24:af:fa:3b:8f:ff:c8:ce:04:b4:1a:
36:19:1e:56:8d:5f:3c:cf:14:7f:7c:c3:2e:27:f3:
37:7d:70:33:fc:0f:4a:81:c0:b3:2e:59:45:5f:38:
0c:3e:c8:14:11:6e:aa:17:38:64:a7:68:7f:0d:ae:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:66:98:A5:1D:BF:B5:34:D1:63:F1:92:11:E7:F3:A1:AF:18:11
X509v3 Authority Key Identifier:
keyid:A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c9:33:c1:40:1c:75:f5:ae:7f:7a:b8:f9:4b:ea:64:b7:a4:
67:17:4b:8b:af:bb:86:32:85:cd:e4:fc:e1:b1:e1:ee:3f:87:
48:14:c5:77:d8:aa:8f:33:55:a9:1d:b4:3d:c5:c6:0e:0c:94:
d2:f0:26:04:40:e9:1c:4a:83:36:34:18:11:41:5c:6b:b4:5b:
5e:ef:d7:92:8d:f2:f9:2b:99:7c:6f:db:a3:e0:16:b4:49:a0:
54:74:14:fd:2b:52:7b:ac:63:c0:95:b1:49:3f:55:ad:49:02:
f7:cf:5a:2d:21:45:c9:ce:d6:a8:3b:97:88:c8:19:8f:97:eb:
37:f0:22:c2:57:1a:6b:53:cf:74:b1:49:0f:01:71:33:47:05:
d4:26:06:2d:a4:6f:bb:bc:bb:a8:c7:19:93:06:f0:4a:28:ef:
51:8b:78:ed:8e:42:00:01:73:3f:03:54:46:69:7f:7e:d5:8c:
a1:54:71:90:fe:ae:98:8d:ea:db:6e:30:f3:5c:ef:25:cd:37:
b6:cf:d8:cb:c3:c6:4b:6d:1d:54:c9:ba:35:94:33:9e:b4:26:
9f:84:b0:e9:d3:34:23:db:83:af:7b:2b:82:51:70:1f:9c:60:
f9:49:54:a9:36:f0:23:bd:06:b3:a1:41:d7:0d:4e:cd:f8:ba:
b0:47:57:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:22:47 2025 by rpki-client