Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: JbIAwxQNLcP/3LTjbiguJdyjw5ACYDgIBnN8Me+/25c=
Subject key identifier: 92:25:36:72:6B:31:B8:59:90:A3:78:E2:80:EC:A5:91:C0:B0:EC:C7
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 0197B6A1F70E65460AE4CFDC82FE4246CD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 055D
Signing time: Sat 28 Jun 2025 13:02:37 +0000
Manifest this update: Sat 28 Jun 2025 13:02:37 +0000
Manifest next update: Sun 29 Jun 2025 13:02:37 +0000
Files and hashes: 1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: rIwspwkW0Mz+bXGnSFREiPuEUN93S9FMsxQPe2hevrY=)
2: ro12KKiX-LBkOFDMXKVrhIyQ9tA.roa (hash: 3rfI99WFfWKHo+rtyifcnFcBumsIBP/guPHdSOGN9zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f7:0e:65:46:0a:e4:cf:dc:82:fe:42:46:cd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Jun 28 13:02:37 2025 GMT
Not After : Jun 29 13:02:37 2025 GMT
Subject: CN=922536726b31b85990a378e280eca591c0b0ecc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:ea:0d:82:93:7a:e4:36:25:cb:54:54:c5:
75:73:30:1d:a7:a9:2f:af:3a:37:9a:68:2f:7e:1f:
37:e0:b8:6c:ce:12:a9:9b:30:fe:6d:db:b8:3a:e9:
e4:95:90:8b:cf:45:54:47:54:04:43:c8:d1:68:c7:
31:c9:2d:2e:dd:93:43:c7:e0:16:20:3d:f0:fa:80:
6d:d5:0d:75:50:18:0d:c0:c4:a9:29:70:47:1e:f5:
a0:d5:b9:10:ff:a3:d7:48:ad:7b:8f:2b:ae:11:cc:
89:fe:b4:46:79:f0:f6:68:6b:8b:6b:0c:69:fe:42:
bf:e8:6b:e1:ab:19:b2:e9:18:a2:e0:95:57:d1:43:
21:15:a5:00:f4:b1:b2:92:23:09:78:32:d5:42:88:
4c:a9:25:a5:19:fd:fc:ac:37:e6:41:73:a0:ec:c9:
ba:2d:07:46:31:e9:fd:a9:9b:0e:8e:2f:a3:16:da:
4f:ba:8e:35:87:a1:2f:fe:1d:40:f5:ee:19:75:75:
0b:91:26:86:4d:c8:a7:bd:74:3b:ac:ab:87:c7:e3:
30:29:f8:eb:81:0d:46:54:ce:e8:50:e8:7f:15:22:
f7:f6:6f:b0:85:f7:e6:34:5e:66:29:c9:eb:f5:54:
83:2d:53:fa:1f:50:45:95:89:ff:93:b5:f2:a3:37:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:36:72:6B:31:B8:59:90:A3:78:E2:80:EC:A5:91:C0:B0:EC:C7
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:96:aa:1e:d2:eb:d3:fe:f3:62:15:a8:ef:bc:be:73:a6:f0:
b4:42:b4:9b:cb:66:1e:51:85:83:f6:af:52:23:b7:b2:da:cc:
79:54:ae:ee:11:1d:cd:03:51:a6:54:2e:18:eb:d2:dd:43:9f:
92:93:3b:83:69:f4:d4:c9:4f:bd:4e:37:97:67:bd:be:83:f5:
9c:f6:ba:ec:72:95:2c:39:9a:24:aa:ca:0f:87:16:45:4c:e8:
88:58:92:f6:67:47:30:6c:4e:cb:f8:5f:4b:ce:2f:32:dd:6f:
af:61:53:68:94:bb:7d:84:15:42:89:21:f9:da:4a:1b:bb:22:
10:f8:32:3c:5f:5f:6a:dc:b6:0d:d0:7f:ce:c3:e4:83:c4:29:
08:f4:54:12:d9:b9:90:f3:43:6e:c2:f4:a1:95:3b:6a:b0:e4:
f7:1d:eb:ed:7e:29:f1:b7:55:72:8b:ea:27:bb:7e:f8:75:35:
99:df:37:e3:60:c1:70:2b:db:60:ca:f3:3f:77:4d:3f:c0:ee:
45:43:f4:7d:a2:a5:b4:e7:ba:2f:18:92:30:24:0d:08:c4:54:
9a:f6:19:01:33:d1:d7:37:95:54:f2:4f:8f:09:de:6d:fa:30:
b3:c6:e0:dd:95:40:9d:c7:d4:30:05:3f:80:83:2e:3d:ab:69:
ff:94:dc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:16 2025 by rpki-client