Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: 1sYNrEhcggwsGyPgvtNXtgtOm6+/ARrxHW+YXZAkLAY=
Subject key identifier: 44:2C:7D:A9:C9:A0:2A:42:21:E6:F5:39:08:78:64:09:4A:5A:15:D3
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 0197B7B36076DEE29D77AF0F6BD336D66706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 18:01:15 +0000
Manifest this update: Sat 28 Jun 2025 18:01:15 +0000
Manifest next update: Sun 29 Jun 2025 18:01:15 +0000
Files and hashes: 1: afYIwWyHQiLcIQms6TYRdepOKaQ.roa (hash: lsNGKgQ/6XCDDm1UAjxRivXeZCbEHxdqSvl0LRt4pPk=)
2: lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa (hash: t/3zF86JRbmij67yXF/+H8nTDumbM7s5DdE5qv8C5Js=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: ZKmyKNhNCDvxuL1/neSsP1zsepmrwV/JGzAdTA+iOR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:60:76:de:e2:9d:77:af:0f:6b:d3:36:d6:67:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Jun 28 18:01:15 2025 GMT
Not After : Jun 29 18:01:15 2025 GMT
Subject: CN=442c7da9c9a02a4221e6f539087864094a5a15d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:89:87:f0:fe:b6:ea:1b:69:db:2a:b4:23:
b7:62:91:d8:a9:5e:9a:b5:82:03:90:35:5a:ad:df:
91:4e:8e:57:85:81:60:7c:f1:75:74:6c:c3:f0:bb:
46:c3:f9:f1:0e:41:72:d3:f3:9b:63:4b:26:0c:9a:
6a:c9:cb:63:a4:27:c0:21:98:5c:7f:fe:d8:55:b8:
98:57:3d:32:35:50:74:f7:a6:93:43:0e:8c:d8:33:
b6:a3:23:32:f3:84:af:f9:86:d5:2f:1d:38:3c:89:
15:13:9f:6b:fd:65:72:55:5c:13:ea:4d:fb:7e:d7:
18:42:eb:04:c4:97:0a:70:78:fc:b3:8e:94:fa:e1:
b1:a2:c7:f4:95:6b:59:08:bd:0d:38:7a:d8:63:a9:
d1:c2:c1:5a:34:cb:30:93:31:a8:c6:05:89:94:7f:
ab:46:13:1f:d9:b4:ec:57:aa:cd:f3:ed:34:19:13:
56:6f:94:25:af:97:7c:fc:bf:85:35:2b:bb:e7:1f:
99:78:aa:0b:ae:e3:41:ef:96:d8:38:76:2d:a6:ba:
a9:07:4c:95:d8:a6:20:f9:6b:f1:99:ca:6a:2d:6d:
6f:83:bc:3b:df:d3:1e:5e:3c:35:ba:ee:8a:2c:e7:
7e:e5:c7:9a:76:63:82:94:e3:41:ff:97:31:78:6a:
69:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2C:7D:A9:C9:A0:2A:42:21:E6:F5:39:08:78:64:09:4A:5A:15:D3
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8a:ca:82:9e:f5:7d:bb:de:ce:0e:f3:ba:56:05:99:31:7a:
04:0b:e8:6b:67:45:38:4f:8d:0f:c8:ca:5f:5f:73:6b:b5:a5:
38:37:de:da:58:c9:83:c0:7a:04:cd:07:ea:c7:4c:28:db:7a:
9b:32:28:b0:5b:bb:16:ec:21:12:3a:17:9c:bc:fd:1e:e3:e0:
8d:e2:19:f7:4d:b6:d6:79:39:4c:f4:3c:4c:fe:98:bf:70:fb:
bf:45:f1:38:74:81:6c:c1:d3:4c:d5:86:53:ba:ca:d4:0e:d4:
4b:82:0c:69:f1:49:76:ab:67:4a:82:46:d0:8b:37:c8:27:4f:
16:58:15:66:42:ea:b9:de:cf:4b:fd:b6:21:58:a3:8f:6b:9f:
c6:eb:84:3a:7d:dc:ee:1e:d4:9e:41:14:f8:76:04:1b:e5:6c:
43:d7:70:8d:3d:ba:ca:b6:0a:eb:d1:92:32:ba:c6:99:08:cb:
57:79:be:a9:78:5a:90:93:84:3d:ea:81:75:e4:f8:9f:8d:76:
26:3e:70:a5:5b:fe:a8:4f:52:8a:04:af:86:dd:88:4c:48:93:
00:7b:22:b1:39:d4:ae:52:cd:c4:05:a7:49:eb:a3:5e:51:46:
fc:63:77:db:0d:4e:01:c4:e4:db:f7:1b:fd:d0:07:31:69:48:
92:23:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:21 2025 by rpki-client