Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: fNCrwoQuIkLCZTrgyUKVy5ytDAEh1JkMVzE4+Qf5mWs=
Subject key identifier: 1B:B2:32:F3:DD:60:E1:EF:5D:43:1F:78:5F:36:19:24:15:82:A0:44
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 0197B7EA18CDE4CB90E0021597B948CCB68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:01 +0000
Manifest this update: Sat 28 Jun 2025 19:01:01 +0000
Manifest next update: Sun 29 Jun 2025 19:01:01 +0000
Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=)
2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: Cg0M3LmmH2JBEvryEivy68QYWGk3WfN/lgIL79IDM4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:18:cd:e4:cb:90:e0:02:15:97:b9:48:cc:b6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Jun 28 19:01:01 2025 GMT
Not After : Jun 29 19:01:01 2025 GMT
Subject: CN=1bb232f3dd60e1ef5d431f785f3619241582a044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:8b:ff:ac:1c:d8:8f:4c:78:1a:b0:2b:96:
26:5c:12:36:d2:b0:f8:76:2a:26:60:99:b1:63:c8:
2f:cb:23:21:60:b4:c3:b1:f5:e6:39:27:90:f0:20:
b4:f6:2c:f0:57:92:39:90:68:e9:89:62:74:c0:c4:
b6:83:b2:0a:60:3b:1b:8c:b4:23:fe:d0:da:e7:49:
7a:df:d6:75:89:fb:5e:9d:67:e8:c4:b1:ab:bf:07:
99:46:cc:6c:bb:b9:13:6b:87:46:e6:32:61:c1:a4:
2e:8f:a2:59:3b:31:51:5f:6c:9e:07:f5:b7:cc:e2:
84:c6:1f:d2:da:41:34:6f:7a:52:64:43:6e:6c:a3:
82:49:2d:21:4b:df:a9:ff:77:25:d7:3c:c6:28:57:
f1:ad:19:49:3b:29:ec:d3:1d:c4:68:57:f7:34:36:
52:7a:e9:09:df:5f:02:a1:0a:1e:3d:bf:5e:35:79:
b3:30:9b:b3:16:c5:2d:fb:3f:11:00:11:6b:22:b8:
80:9f:f2:42:a9:81:c2:7a:cd:9f:c0:4c:cb:0a:32:
1c:32:f3:b8:36:db:3e:5b:dd:fe:12:3d:b4:f3:3e:
f1:7d:99:a8:13:5d:a8:0a:b7:ef:4b:c9:96:66:97:
13:7f:2d:bf:65:e6:2a:84:27:bc:b7:9d:a2:de:bd:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B2:32:F3:DD:60:E1:EF:5D:43:1F:78:5F:36:19:24:15:82:A0:44
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a4:25:dd:8b:f3:2c:bf:24:73:bd:ba:19:e1:c6:3e:9b:80:
4d:e3:15:17:a3:86:4f:e2:cd:f6:fa:12:49:0e:de:5e:83:67:
88:e6:7c:2a:bc:60:ab:e5:dd:eb:e7:94:1c:28:91:9f:ac:66:
f0:8e:76:ff:66:de:b0:3e:65:51:d8:db:58:3c:15:b3:fe:eb:
b3:df:46:51:2f:1d:64:e7:49:c7:a1:14:bf:aa:e4:39:58:b2:
90:41:01:21:3e:3c:ea:3b:72:e1:ae:24:b4:00:67:1f:1b:08:
a3:33:42:f8:b9:5e:23:e3:46:7d:44:78:bd:a2:97:85:bc:58:
d1:1a:2f:23:70:09:93:9c:f5:5b:08:34:93:60:5d:f9:ed:99:
1d:55:eb:23:de:e7:d6:b3:49:90:1b:d4:8f:0c:1c:ed:81:b9:
8c:86:26:2a:f5:73:05:35:ab:ab:44:a8:07:bf:0d:39:39:a0:
54:8b:f4:10:54:b7:9c:0c:6c:1b:da:cd:4d:53:7d:05:4c:11:
4f:8e:77:35:06:93:fe:8d:53:83:f1:3d:e6:db:52:9c:b4:79:
34:9e:e2:e6:f9:73:85:ed:8f:66:ae:25:ab:4e:8b:37:5c:a9:
a1:34:b2:03:4b:15:e1:b0:89:d6:9e:2b:31:4c:71:bb:5e:8d:
32:26:b0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:16 2025 by rpki-client