Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
File: pSNBhTlzXL2bC6PCeew1V9cmJlo.mft (raw, json)
Hash identifier: duzfgfA7sGNKpKZNotrJycFvoP9bxQ0dc9RAWa0dpBE=
Subject key identifier: 57:98:03:E5:FA:5D:D8:05:2A:FE:9B:96:90:40:2C:73:D2:14:05:41
Authority key identifier: A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Certificate issuer: /CN=a523418539735cbd9b0ba3c279ec3557d726265a
Certificate serial: 0197B820DE9B6B6037A26893E144807FE8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
Manifest number: 136C
Signing time: Sat 28 Jun 2025 20:00:51 +0000
Manifest this update: Sat 28 Jun 2025 20:00:51 +0000
Manifest next update: Sun 29 Jun 2025 20:00:51 +0000
Files and hashes: 1: 8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa (hash: Ub5Ka+iibeNMtT5d651FP9y1wedTUH3xQXSWP3OHFL0=)
2: pSNBhTlzXL2bC6PCeew1V9cmJlo.crl (hash: 6T/SnF2oieCFaWBQWzJo8rHGBE+GnKX1tRgQXZkJrtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:de:9b:6b:60:37:a2:68:93:e1:44:80:7f:e8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a523418539735cbd9b0ba3c279ec3557d726265a
Validity
Not Before: Jun 28 20:00:51 2025 GMT
Not After : Jun 29 20:00:51 2025 GMT
Subject: CN=579803e5fa5dd8052afe9b9690402c73d2140541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:bd:7b:c3:85:1e:2f:ed:e1:db:e2:f1:6a:
e7:13:6b:d9:a4:32:8f:94:d5:1d:4e:5a:68:ca:5a:
5d:ad:a8:68:5b:b5:a4:0a:90:68:7b:9c:10:13:8f:
c3:f1:8a:85:7e:b2:fc:ee:74:60:6c:1f:4d:22:f5:
c1:9d:54:a3:4d:20:6d:49:26:4a:5e:7a:ff:7f:c4:
c5:55:dc:38:db:5a:5f:df:9a:f0:ec:d7:6e:9f:c0:
e1:a4:cc:f3:87:b4:fc:23:16:71:b1:6c:ec:42:3e:
67:63:7a:28:c7:2e:a1:bf:70:9a:b7:54:e5:07:29:
25:38:8d:a6:4a:05:38:1f:03:c4:fd:32:a7:a5:4b:
6d:cd:d1:35:3b:0d:f7:6e:c5:8e:03:42:e4:a2:cc:
61:d1:ce:33:c4:dc:8c:b0:d7:b1:7c:b8:45:52:89:
94:f4:72:90:5d:13:17:ff:bb:7c:bb:ae:e0:6c:90:
ba:a9:1a:19:c7:1a:f0:98:18:ac:eb:57:52:70:af:
fa:f7:5c:45:e7:16:11:70:16:e3:51:62:e7:1d:21:
13:4c:74:df:c4:a4:ef:d5:29:04:6a:91:e8:fb:cd:
17:7e:91:8a:56:55:63:fd:64:8c:15:f4:4a:a9:a2:
84:f3:8b:60:92:b2:d7:89:b3:bf:07:ea:be:23:33:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:98:03:E5:FA:5D:D8:05:2A:FE:9B:96:90:40:2C:73:D2:14:05:41
X509v3 Authority Key Identifier:
keyid:A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1e:cd:0c:a7:f2:1f:1d:d5:86:c6:b0:e8:89:67:76:0f:55:
53:89:2c:2d:b3:6b:e3:8d:a4:ad:ea:19:e1:bb:c3:13:56:d5:
12:aa:f2:02:57:b1:d0:b2:a4:8e:02:c9:57:88:92:bc:d8:15:
92:87:21:72:bb:86:fd:00:b0:60:d5:6b:26:42:6d:bc:04:c7:
6a:32:b9:77:c6:3c:5e:48:b5:2a:c8:7b:46:d9:6a:3b:7a:bc:
74:f7:ea:88:bc:21:2b:8f:4e:b5:cc:a4:23:02:12:fb:8b:c9:
80:bc:af:44:17:74:54:b8:fc:8b:11:3a:c7:55:4e:c6:40:1e:
63:ce:8b:bf:e3:f0:fe:26:a7:37:48:a0:d5:e6:57:e6:af:f0:
04:a5:56:14:53:fe:d2:08:d7:74:cc:4c:de:22:d1:fa:4c:5e:
40:7f:8c:b5:94:0f:e7:54:30:8d:c8:37:70:8e:62:a6:68:8d:
27:6b:0e:73:76:a3:62:18:a9:36:3d:42:82:79:25:4b:5f:93:
61:43:22:40:cc:d2:9a:04:93:b4:2a:14:eb:48:f7:07:66:d8:
fe:8c:38:8f:d0:ff:c5:f8:26:de:65:c3:7d:a0:84:dc:69:56:
91:e1:f1:5f:eb:38:5c:25:74:b5:69:fb:39:0d:ff:a3:82:ea:
87:be:e8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:39 2025 by rpki-client