Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
File: pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json)
Hash identifier: xxqiDq9hLM04+27HK4gtrjSlQqL0HdoUNXLeTyFFGmw=
Subject key identifier: B7:6F:6E:97:09:3B:34:0E:2F:BB:07:A3:21:1D:63:40:15:89:27:19
Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
Certificate issuer: /CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Certificate serial: 0197B7EA7D44D71DF7234420E048F99830B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
Manifest number: 0FB1
Signing time: Sat 28 Jun 2025 19:01:27 +0000
Manifest this update: Sat 28 Jun 2025 19:01:27 +0000
Manifest next update: Sun 29 Jun 2025 19:01:27 +0000
Files and hashes: 1: mxHqegiIzk-5yKnAa0W9InQ8xh8.roa (hash: 1T8S7F5C1unZ11xq+jwLnSOyvWawPuJqcLvoyNmvP44=)
2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: 8GrqB9XV4D6Aeiin3B5pFj2PGcjZQaPfW/cuZOtoY9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7d:44:d7:1d:f7:23:44:20:e0:48:f9:98:30:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Validity
Not Before: Jun 28 19:01:27 2025 GMT
Not After : Jun 29 19:01:27 2025 GMT
Subject: CN=b76f6e97093b340e2fbb07a3211d634015892719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:f1:9d:bc:8c:4b:3d:c1:26:dd:39:a3:39:
35:5f:d8:6d:b2:a0:9d:c2:2f:10:0a:5e:3f:0a:9d:
10:0c:d2:0f:a9:dc:65:d4:da:1c:cf:c9:7d:68:b9:
90:a6:0a:48:4f:f1:5b:9e:f1:3a:52:b0:86:5b:8e:
1f:58:b5:fb:65:67:ab:34:1b:49:fd:a0:19:3b:ac:
ed:83:36:69:37:4b:ea:cb:d8:37:2e:9b:a8:dc:e9:
b1:ae:b7:2e:cd:dc:ce:3a:b0:ac:53:17:c2:ad:f0:
e2:42:ae:aa:1f:e8:95:4f:ac:9a:94:d3:e4:da:e7:
e1:c1:99:46:c1:38:3f:c9:aa:30:90:df:88:4a:e0:
f4:df:53:08:d2:7b:5c:6a:a0:d0:8a:88:8a:bd:85:
22:db:ec:32:d3:a3:44:b9:2c:f5:51:a5:3d:71:43:
8d:75:f4:16:84:37:d2:30:07:1e:8a:63:9a:fe:b6:
4f:01:57:7a:52:f2:87:31:d4:b7:b5:d1:d4:12:a8:
75:23:bc:b2:97:bd:43:de:cd:11:ee:bc:d8:b4:c3:
99:b8:8b:ed:d9:cb:cc:9b:58:39:8d:1f:71:ca:7c:
d4:06:4a:90:ae:8a:e3:e7:45:44:bc:a1:3b:73:c7:
9d:88:24:cf:98:55:bb:72:ce:30:f8:b0:13:d9:a4:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:6E:97:09:3B:34:0E:2F:BB:07:A3:21:1D:63:40:15:89:27:19
X509v3 Authority Key Identifier:
keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b0:b4:80:ec:ff:eb:d8:5b:b8:8a:b9:f2:08:59:8f:b1:56:
b9:35:0b:d1:33:9f:cd:e4:fb:af:55:c6:8e:f6:54:a9:ac:9f:
c5:f4:02:b1:94:e5:9f:ee:ab:e1:69:c9:49:50:51:35:c1:32:
cb:76:85:fa:dd:ef:47:50:fa:eb:5f:13:48:04:c5:b4:56:38:
e8:67:50:a5:51:4d:87:d0:e2:de:ae:6d:f2:48:58:8b:c9:b6:
d6:a5:7f:98:a2:1d:7d:8b:3a:7a:91:5d:ad:b4:72:b4:ae:51:
cb:93:8b:23:20:8b:4e:e5:9e:fb:03:31:89:90:64:e1:2f:a5:
62:4b:32:16:48:d6:90:1c:fc:61:bb:46:b6:1e:39:0c:4b:e4:
1e:7f:60:76:25:cc:47:3a:2b:e1:f1:39:98:fc:2c:8a:72:a7:
9c:ff:bb:fe:0f:4d:73:2b:38:d7:bc:6f:1a:87:a9:e6:a2:8e:
5d:83:1a:86:b1:47:e9:e4:13:24:9f:b8:4a:b6:e8:00:ea:33:
ed:52:20:fa:01:35:1a:a9:d7:d9:9b:c6:0c:f9:8e:f3:b3:5e:
42:00:22:1a:59:c8:03:4a:57:5f:54:d4:16:8f:15:f6:37:53:
38:6c:3b:ba:21:f1:a3:d1:a3:fe:0e:6c:da:c8:98:30:b1:a1:
91:f8:7c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:21 2025 by rpki-client