Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: 2pXwEspflcGO+6r2EHI4lFvuAIl0gpsUnuXfFCUr9Pc=
Subject key identifier: DC:F0:B9:9A:65:44:AA:74:27:A3:C7:EC:D1:3D:63:97:16:87:C8:DE
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 0197B77CDB813E21677A1851E7A5AF1F1D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 0320
Signing time: Sat 28 Jun 2025 17:01:42 +0000
Manifest this update: Sat 28 Jun 2025 17:01:42 +0000
Manifest next update: Sun 29 Jun 2025 17:01:42 +0000
Files and hashes: 1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: xk9YFFipAoE0SxWnGKOOho26pe4KJED3I1YWBlikbK0=)
2: tHHfiSksDZsfZV-Vj9_kGC4h-Ro.roa (hash: EIcBQ1/xG4TmRqAx5pqcLS0viz8fwAhZIDtmSkzjKwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:db:81:3e:21:67:7a:18:51:e7:a5:af:1f:1d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Jun 28 17:01:42 2025 GMT
Not After : Jun 29 17:01:42 2025 GMT
Subject: CN=dcf0b99a6544aa7427a3c7ecd13d63971687c8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:4f:44:80:af:6f:00:a4:ae:fd:95:05:2d:
2a:72:b5:95:81:a1:fb:52:df:64:c1:24:34:da:4d:
98:35:6a:65:9e:07:06:fe:e6:83:2b:53:05:d8:16:
c5:2f:12:0a:5d:51:44:31:a2:5f:c3:11:88:e5:3d:
99:57:2f:03:eb:0c:be:ee:13:3d:5e:5e:9c:d2:0f:
05:f2:44:c2:74:42:0d:82:64:f2:ec:32:bf:45:40:
ba:8c:09:09:59:dd:bf:9f:c7:cb:c3:86:b6:6b:e5:
95:4c:3a:de:a7:12:df:ba:7d:47:e2:8b:99:ad:0a:
6e:3d:99:d9:7e:ea:08:f3:90:d8:71:31:e9:69:34:
d8:9f:ff:ac:d3:a3:8d:28:0f:f4:e4:04:1d:c2:85:
5b:a4:f5:b0:1f:e2:3c:f3:2d:53:bb:28:21:ba:26:
0d:f9:f5:f0:80:6d:0d:6b:1f:88:f8:07:00:65:63:
9d:03:c0:e0:57:97:c3:bd:eb:3d:9d:de:5e:ed:a7:
d8:58:75:02:df:5e:d9:a8:4d:cc:7e:c8:0d:53:e6:
01:ef:b5:c4:0e:08:eb:85:09:4a:07:7d:55:14:92:
d4:b9:53:30:d0:ff:f1:b0:1a:1f:42:19:48:a5:e4:
9d:d3:e6:92:9c:78:6e:7e:23:5f:d4:be:ca:b5:dc:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F0:B9:9A:65:44:AA:74:27:A3:C7:EC:D1:3D:63:97:16:87:C8:DE
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8e:9e:c8:e1:7c:6b:a7:1d:36:3c:00:55:79:00:0c:36:38:
bd:db:98:a7:ff:cc:f9:7d:b8:92:2b:30:42:99:94:bb:72:a4:
53:82:59:47:32:83:6a:cc:92:80:56:d3:8f:7d:9f:8f:ee:94:
a6:a1:fd:06:96:a6:17:df:f8:92:6c:f1:15:7d:ad:a8:ff:95:
54:20:65:13:61:c5:ab:1f:37:87:f4:c2:fa:b7:e9:60:92:b2:
30:03:1c:b4:89:4b:c5:b2:34:21:11:b0:a3:70:df:22:7f:a2:
e0:4c:fb:05:44:89:1b:c6:dc:20:04:73:32:2e:f4:5e:94:07:
8a:3a:b3:65:3e:b8:e3:fb:4e:6f:e5:49:c9:36:fb:2f:83:86:
2c:f9:0b:a8:72:99:9c:23:d1:8d:e5:32:a8:0c:f9:9c:5a:5a:
35:10:89:bd:59:73:5b:9b:79:09:e6:16:9f:0f:d2:d1:87:37:
35:22:8f:64:8a:42:86:37:75:2d:fd:8b:9a:d5:2c:f5:8b:ef:
cc:08:df:c8:d7:78:32:e5:4d:25:db:db:ff:6c:56:2e:fd:bb:
f7:60:12:82:d0:fa:e2:f6:eb:c0:82:d4:4f:31:2e:20:73:b3:
8d:e7:70:e2:e6:77:1d:7c:26:0c:e1:ec:1e:a1:40:25:f8:93:
4d:29:ed:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:09 2025 by rpki-client