Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: U7lxX7DQQWcg8Us/qM/AYiKtjeXlooQ4VjQMJzxXYB8=
Subject key identifier: AD:59:05:6C:33:43:09:C3:7C:CD:1E:89:B2:8A:F7:5F:7A:0D:E8:1E
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 0197BD10A01E9D44F8FA989E96C6B6D8FFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 19:01:12 +0000
Manifest this update: Sun 29 Jun 2025 19:01:12 +0000
Manifest next update: Mon 30 Jun 2025 19:01:12 +0000
Files and hashes: 1: 5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (hash: SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=)
2: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (hash: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=)
3: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: 3KBKS6vjXf1yJk160mADMmHDOPa4zfLvtdNGtXPoI3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bd:10:a0:1e:9d:44:f8:fa:98:9e:96:c6:b6:d8:ff:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Jun 29 19:01:12 2025 GMT
Not After : Jun 30 19:01:12 2025 GMT
Subject: CN=ad59056c334309c37ccd1e89b28af75f7a0de81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:c2:1e:76:d1:6f:5e:df:20:23:10:e8:b0:
1b:07:26:3f:c5:1b:8d:d1:75:27:b9:b8:21:43:30:
63:23:96:8b:fe:c4:11:39:5c:ba:c1:d1:a9:7c:56:
92:f1:75:be:6c:34:87:63:16:30:04:c7:0b:ad:c6:
9b:93:35:82:98:bd:97:89:81:1c:eb:f0:cf:84:cb:
a7:5a:ea:1f:f8:88:0a:d0:d8:d2:ad:86:b6:68:bc:
d7:25:4c:73:62:1e:8f:68:db:a2:0e:dc:d0:6f:66:
53:eb:53:5b:0e:f7:82:79:58:e9:cf:49:33:32:20:
b8:1e:f7:59:f5:8c:82:20:ec:cc:53:68:37:53:2b:
3e:d9:4a:b0:ba:60:01:3b:c7:45:a3:c9:7f:d4:7b:
3a:72:6a:43:26:97:36:9d:4a:b1:c6:d2:64:53:4f:
a4:12:d8:68:d9:50:7f:8a:b4:40:6c:33:3d:de:a6:
50:d8:dc:35:cc:07:bb:55:2f:93:05:ca:58:8f:6a:
01:08:aa:09:db:34:9b:1e:c6:cd:b9:ca:81:17:9b:
2a:39:f4:bc:4f:23:25:d9:f0:16:71:22:7d:f6:aa:
c8:55:fb:26:46:af:f4:b9:ee:20:89:f7:7d:a2:76:
74:c0:62:37:a6:2f:f2:a2:c4:da:f0:8a:1d:fb:5d:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:59:05:6C:33:43:09:C3:7C:CD:1E:89:B2:8A:F7:5F:7A:0D:E8:1E
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d9:de:16:ed:60:f1:ff:bf:6e:c9:5a:eb:80:03:cc:15:5c:
14:9d:66:7c:e4:bd:1d:cb:85:52:0e:41:68:79:19:e2:27:77:
62:f6:8d:ec:cc:ff:a7:bd:94:99:ce:8d:7b:28:f9:86:8b:af:
db:b8:b8:60:54:6b:a8:b1:f4:ef:f4:14:ae:56:af:3a:ad:89:
e1:c1:ee:23:da:e1:33:ce:e4:99:92:3f:1f:71:fb:2b:69:34:
84:fa:e1:dd:cc:e2:af:be:81:ff:cb:db:f0:5b:6d:07:72:68:
a9:d3:d3:49:16:87:90:95:4e:68:b0:f4:de:77:0c:b5:3c:d8:
de:e9:26:81:ea:4d:b8:11:3f:2d:7b:8d:6e:5c:c6:00:49:f9:
f4:79:10:79:00:5e:a5:36:2a:53:2a:13:27:6d:a1:e4:57:f3:
bd:cc:a5:9b:97:68:67:bb:ad:0c:c6:20:45:35:df:96:32:0a:
56:16:37:56:a4:37:a6:34:80:d0:04:34:00:09:dd:4c:4a:28:
ac:a7:44:3d:bc:40:aa:b5:ba:3a:16:e5:1f:ce:6a:a6:cb:9a:
d3:da:79:d8:82:f4:c2:21:71:5a:28:c2:6e:ec:39:92:21:bd:
66:75:26:e7:ae:54:21:89:ea:e9:24:0e:0e:8e:a6:51:17:95:
24:64:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:53:14 2025 by rpki-client