Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: YrPwYnYRoWmfq7+WOja9MBaBQnBhJ5gTU/tgGymIE/g=
Subject key identifier: 20:39:ED:AC:9D:4F:07:2D:98:9B:57:89:A0:0E:33:FF:C2:83:51:60
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 0197C56EC6314FA0D5BAF78EB36A70AAD3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0A9E
Signing time: Tue 01 Jul 2025 10:01:00 +0000
Manifest this update: Tue 01 Jul 2025 10:01:00 +0000
Manifest next update: Wed 02 Jul 2025 10:01:00 +0000
Files and hashes: 1: XKCgbBOF2hVHKDo78niiU6jULHg.roa (hash: QEaRFAJhUUsQeo4vGH+Fx3VQmk/EsBaPpLYF/MqkgOs=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: RxyZcvZYyaizr+7tbM5b7rTAg9DZs/dx6I5gD4w0iTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:c6:31:4f:a0:d5:ba:f7:8e:b3:6a:70:aa:d3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Jul 1 10:01:00 2025 GMT
Not After : Jul 2 10:01:00 2025 GMT
Subject: CN=2039edac9d4f072d989b5789a00e33ffc2835160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:fa:45:30:59:27:13:f6:31:a2:2a:e0:67:
74:3b:c2:0f:ee:67:97:af:55:88:41:1d:4e:f7:23:
7a:6e:22:91:f3:1a:5b:48:ac:d7:bc:7d:c5:06:1d:
00:a2:7f:64:fe:94:c7:f9:ee:a3:eb:82:48:d1:93:
e1:f2:fe:96:56:6f:09:7b:f0:e7:5e:70:22:d2:a5:
3e:58:e6:ae:87:b2:10:d3:7e:a7:5c:dd:4d:39:dd:
f9:cd:56:0c:5f:72:07:1d:2e:25:56:bd:f2:13:63:
10:ca:8e:f8:60:ce:1b:ff:08:95:f4:37:cf:67:e5:
27:ef:ed:01:ec:6b:38:56:aa:cb:93:65:4d:1d:d8:
c0:12:eb:75:f6:f7:eb:85:0e:8e:9e:36:08:33:06:
77:61:36:d8:1f:c0:42:29:71:40:e2:3b:3f:8d:e8:
cb:1f:1f:80:fe:bd:64:26:6e:e0:ef:85:22:ab:a8:
b9:99:a4:f7:9f:09:ac:1b:f6:10:62:74:2b:fd:1f:
a9:58:77:37:b3:4c:c1:24:3d:a9:bd:71:6e:f8:29:
a1:85:fd:97:62:0e:ac:a9:e3:21:af:97:e8:84:02:
38:18:64:ee:b5:f0:e4:a0:1b:22:c3:b6:ea:ca:2b:
a6:e0:c0:6a:7b:68:89:b4:88:c0:a8:d0:10:05:45:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:39:ED:AC:9D:4F:07:2D:98:9B:57:89:A0:0E:33:FF:C2:83:51:60
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:75:f1:f5:22:9e:ea:c4:c5:7b:da:5f:3d:a9:79:b5:be:e0:
ad:84:8b:86:10:f5:52:96:fb:9d:21:fe:af:02:b3:bb:89:c9:
24:bc:01:77:e0:49:e8:66:5a:24:ad:86:ec:87:ff:5e:89:e9:
68:d4:a3:94:34:47:f4:83:bf:38:83:45:ae:58:d3:be:83:d9:
69:c9:be:55:28:56:25:30:d3:c8:eb:31:72:45:6a:c6:ae:5c:
cb:fe:5d:74:d9:aa:e9:63:ff:7f:87:f1:89:85:b0:aa:44:8e:
0a:60:97:e4:d3:ab:7f:1b:2a:b0:b8:3e:e5:39:95:bd:c8:1e:
cd:bc:2a:76:fa:97:c9:9d:83:6c:cb:23:7b:73:d8:fd:5b:eb:
a4:fd:6a:d0:28:12:c8:14:f6:97:88:e9:d0:3b:ed:2e:b2:b1:
5a:12:31:62:b5:65:b1:b9:4d:12:eb:eb:81:6c:68:b5:ba:bd:
fc:dc:59:04:c1:65:78:19:73:82:b5:ea:1b:00:cd:77:ea:96:
cb:55:dc:9f:87:bf:13:cd:dc:e2:67:34:3b:e0:1e:4d:fe:d3:
cc:7f:ae:51:38:0a:cb:88:55:fa:2d:14:79:22:be:e5:a4:5e:
d6:92:17:7d:ba:b9:24:01:42:2a:81:54:20:8f:60:32:65:8f:
74:7a:65:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:08:43 2025 by rpki-client