Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: V7fJOxHdvVWQEUfKT8wc1rjqaPRydUjnBhasBnCApME=
Subject key identifier: 0E:28:94:2C:F9:92:5E:AB:4E:ED:1B:E1:77:F6:61:3D:75:05:9B:8B
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 0198D583BB058EB369079B0D149BEF55BEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 06:00:36 +0000
Manifest this update: Sat 23 Aug 2025 06:00:36 +0000
Manifest next update: Sun 24 Aug 2025 06:00:36 +0000
Files and hashes: 1: afYIwWyHQiLcIQms6TYRdepOKaQ.roa (hash: lsNGKgQ/6XCDDm1UAjxRivXeZCbEHxdqSvl0LRt4pPk=)
2: lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa (hash: t/3zF86JRbmij67yXF/+H8nTDumbM7s5DdE5qv8C5Js=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: nU9MDhLkIYPJhSBsOXvR7qurDPkrxmBkooVfGg0Q0ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:bb:05:8e:b3:69:07:9b:0d:14:9b:ef:55:be:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Aug 23 06:00:36 2025 GMT
Not After : Aug 24 06:00:36 2025 GMT
Subject: CN=0e28942cf9925eab4eed1be177f6613d75059b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:6c:00:44:72:15:b4:fb:0a:76:85:a4:ba:
41:e5:14:96:a5:5f:ba:6a:49:dc:0b:dd:c0:b7:2b:
01:26:be:10:b3:1f:5d:79:4f:d0:24:27:99:3d:ee:
e2:22:44:7d:65:22:43:21:d0:42:0a:7d:b2:e1:dc:
2f:cf:69:d6:11:e1:db:76:28:c6:7c:76:90:19:a2:
ae:32:90:d4:2a:5f:58:ca:08:cb:6f:a2:6b:94:46:
5a:ad:7c:f9:0a:24:02:c7:cf:ed:5d:99:58:87:24:
41:53:ec:25:24:92:19:21:6d:af:59:a8:79:02:03:
4a:ab:23:8f:38:ff:07:ef:1f:c5:e2:21:75:5f:68:
98:5b:b8:65:5f:5d:ea:39:06:dd:23:a2:19:24:07:
d5:34:7c:dd:8d:d4:d0:28:d1:47:82:d7:29:df:08:
9d:57:38:ea:1a:63:ac:04:ad:97:3c:22:c5:44:7a:
3f:eb:d7:c9:e7:06:e8:b4:10:f4:76:5a:e0:21:b9:
52:93:ec:b1:0a:df:40:2a:01:a8:8f:c7:d5:b3:7b:
54:25:7a:00:b5:79:61:92:81:64:81:a0:67:3a:c4:
d8:85:b3:e1:a2:f1:c7:95:4a:b1:d8:1e:9a:31:16:
de:0b:00:8f:71:80:16:80:33:7c:83:53:1d:74:83:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:28:94:2C:F9:92:5E:AB:4E:ED:1B:E1:77:F6:61:3D:75:05:9B:8B
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1f:b7:d7:ad:1d:fa:e7:c9:4c:a2:9f:88:f0:7c:1d:1f:4d:
6a:42:28:b6:80:66:8c:db:75:5c:d7:e7:9e:6c:6f:a0:62:12:
5a:81:1f:b2:e9:c4:4d:13:13:2f:cb:02:cf:2b:70:a6:c1:eb:
3a:9d:90:74:5b:04:21:2a:d1:cb:ac:80:a9:7c:ae:a8:9b:bc:
0f:02:3f:fc:db:f5:88:f8:8e:96:35:1e:1c:c4:70:a5:11:54:
47:ba:69:ff:4a:6a:ef:8f:0d:36:33:a3:d3:77:db:14:c6:77:
45:9f:57:c5:27:d4:73:36:b4:b9:4e:1f:78:73:97:67:11:24:
bd:f9:18:e4:1a:4e:73:04:85:40:38:8a:56:79:e4:d1:47:cc:
ec:17:84:4c:16:b9:19:80:fb:d0:75:61:e8:d9:b1:18:1f:0d:
79:2b:97:04:14:11:99:d5:29:2a:88:2b:97:cc:ce:8f:9c:a5:
04:7e:6f:c0:ae:8b:ba:5b:99:ec:b3:62:83:c7:38:25:6a:7a:
0d:64:73:0a:b8:45:fa:f4:e2:43:be:76:c2:7f:8c:02:97:73:
38:f6:16:3e:e2:0d:e3:11:61:a7:cf:0c:e9:bf:e6:96:00:0b:
83:23:1d:1c:52:68:b5:da:33:23:58:a0:69:e3:4e:ab:f2:5e:
6a:d1:d9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:52 2025 by rpki-client