Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: FrXLyr1Je3aJqkhqR1694CLwalFMg1ZYlpYM+MXCFQQ=
Subject key identifier: 8E:1A:A6:A7:2D:8D:28:4B:58:CF:06:05:98:93:55:62:BE:DD:0B:23
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 0197C0B6AEE45D5157537E1C83AA4E531C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 1489
Signing time: Mon 30 Jun 2025 12:01:27 +0000
Manifest this update: Mon 30 Jun 2025 12:01:27 +0000
Manifest next update: Tue 01 Jul 2025 12:01:27 +0000
Files and hashes: 1: BZzPZeF6nVBFp0ePkibSpSImMO4.roa (hash: CC6O/xKtKrtHkfClJGWdlIogukbhcIa4MJLuoLVEnNw=)
2: DUIJZvRDQ202HKrZ6QZsgh8Lpxg.roa (hash: WYZK5bFTDM+c1kX5q/i2Za+Wt5aspj2Z2UKRWytwMBA=)
3: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: 60Fji3dKdF7WqzE3qJyqY4HXOjXTgfTU/4nDdsKGFcM=)
4: qRD7ujzJORaie3rLE2YnokYZ17U.roa (hash: S1UJWxv+rwUU/ObCl8nZivjHpfQGYiacpAIE0ZGhjrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:ae:e4:5d:51:57:53:7e:1c:83:aa:4e:53:1c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Jun 30 12:01:27 2025 GMT
Not After : Jul 1 12:01:27 2025 GMT
Subject: CN=8e1aa6a72d8d284b58cf060598935562bedd0b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:80:d2:90:d5:da:5f:c6:6e:67:6b:08:dd:
55:9b:40:41:69:57:11:84:9a:90:86:0e:4b:40:b3:
b8:aa:34:17:a9:ad:ce:e6:b8:9d:68:d3:65:e6:4a:
8c:d8:92:60:85:fe:c7:c4:ed:6d:ba:f7:f6:62:97:
02:b6:fc:56:d2:44:8a:60:4f:16:5f:7e:02:b6:ec:
6d:0c:65:5d:fe:6b:74:8e:e8:98:d4:42:01:4b:62:
0c:e3:0a:a2:bf:f3:8c:07:3b:24:1d:7b:4d:17:90:
c2:fe:c3:3d:b4:b5:9a:09:48:b7:6f:12:8c:b6:c1:
5f:dd:c1:26:33:ac:d6:b9:01:db:62:c2:ea:38:70:
7d:6d:92:59:13:77:47:41:db:78:05:60:a0:c2:af:
cd:a9:27:34:d9:76:38:a6:13:25:1a:61:bd:e8:83:
67:c7:d4:29:37:62:59:f0:c1:ba:9a:53:5c:5d:12:
da:83:82:62:90:19:b0:90:c3:d3:e7:c8:cc:f5:0e:
86:19:12:57:0f:8d:8f:38:32:6f:4c:dd:59:cc:51:
bc:9a:db:c4:5d:50:e4:94:08:5f:f8:c0:1a:9b:c5:
4e:00:09:14:5e:1d:4e:0b:ce:5d:40:d9:f0:a6:90:
17:6c:00:13:42:bd:f6:83:89:50:13:09:d4:89:31:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1A:A6:A7:2D:8D:28:4B:58:CF:06:05:98:93:55:62:BE:DD:0B:23
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:99:d1:a2:21:32:d7:7e:47:3f:d7:b1:98:cf:ba:fd:61:16:
61:bc:f4:79:67:3c:7d:15:bf:28:92:a9:e1:fa:e2:9b:46:11:
ad:7a:64:30:30:45:6a:c1:fe:71:fa:10:29:94:b6:c1:d0:62:
85:cc:24:79:58:0f:e4:ca:25:c7:1d:67:d9:8e:3d:cb:02:30:
b6:92:c0:05:a3:b8:dd:4c:e0:ed:18:4b:cd:74:33:65:c0:54:
5f:b0:68:6c:84:d6:0a:99:3a:0f:e1:e6:f8:2e:a3:0c:d1:b4:
48:00:9d:9c:26:3f:6a:52:ce:38:b0:28:88:e3:5d:5d:65:17:
ad:e6:c7:69:bc:fb:28:5b:d6:2f:47:d4:e4:af:f9:e8:b7:c9:
6c:02:16:c9:86:46:e7:bf:02:50:87:89:48:cb:ab:8b:2e:06:
33:d6:1c:a2:c7:0e:a8:5f:bc:90:11:e2:f7:f4:e5:c8:5e:0f:
4f:0b:cf:28:24:d2:a9:55:9b:2e:a8:d6:3b:0e:2d:b1:1d:58:
d8:0a:0f:b7:3c:b8:20:89:cb:91:af:56:7e:f9:af:68:50:1c:
40:1f:b2:70:28:19:d1:c8:14:03:f5:44:61:60:d3:f4:52:fd:
c5:f6:6d:41:fa:a5:6e:74:77:06:89:1a:8a:d8:d4:22:80:fa:
d3:e2:dc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:02:16 2025 by rpki-client