Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier: UQwkZE9W1mYwWTgNUaE3dOSuF0386FJXiG3ODMRQAm8=
Subject key identifier: 61:D9:F6:CB:77:F7:8D:5E:91:88:82:4C:3B:D7:E6:4C:2B:BB:D0:78
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 0197B70EA5E1A475BE6099E6F6956B3A611B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number: 0609
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: G5Dr2RNwPGFwAwTeNB-9AS_pm0Q.roa (hash: 0MjYAJyBV4+bo72HSaSmqLthye1AQFWyhQOJxf+19uc=)
2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: 9UeiqnMrUG6sxJKX5x1LmplTbOTg43BsCrwUNx2AhWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a5:e1:a4:75:be:60:99:e6:f6:95:6b:3a:61:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=61d9f6cb77f78d5e9188824c3bd7e64c2bbbd078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a6:09:24:03:4f:f2:13:c6:59:9e:61:8b:77:
68:dd:6b:62:8e:23:13:52:57:b5:10:aa:13:62:f2:
29:65:1b:03:5e:b9:eb:9d:4a:dc:fe:6f:06:0d:c5:
05:f8:2a:b3:75:e1:f5:f7:ec:ed:73:c2:6c:e4:f6:
2e:3b:4b:34:76:4c:7e:9f:1e:f2:83:ce:a0:52:0b:
ee:86:d7:bf:6b:20:98:f9:ae:1d:26:d4:ca:47:3c:
93:f2:1b:1d:b1:04:7a:2b:dd:f6:21:a8:82:d6:0c:
40:10:2d:d6:ba:75:97:8f:4e:a3:a5:2b:cc:ec:78:
84:5b:30:56:24:59:72:03:a8:86:20:62:9a:df:42:
bb:5b:82:8f:2b:d9:2a:a9:54:f8:f0:25:f4:85:31:
63:f9:da:f4:02:d6:05:87:dc:c5:c9:00:30:9e:4e:
cf:5c:ad:b5:ad:f3:77:bb:10:59:6b:61:60:4c:32:
c9:e5:19:92:63:b9:c1:ce:6e:d4:86:0b:81:e3:6d:
e3:8c:f2:28:1a:96:fd:d7:30:d0:60:84:37:d0:d7:
05:cd:d5:25:39:97:b5:63:4f:de:3b:fe:1f:fe:65:
15:d3:37:d3:dc:ec:43:00:18:46:f1:2f:9e:26:7f:
4b:54:64:9d:74:dc:a5:d6:34:21:b8:02:14:64:26:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D9:F6:CB:77:F7:8D:5E:91:88:82:4C:3B:D7:E6:4C:2B:BB:D0:78
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:02:79:91:9b:c5:96:38:63:73:79:25:23:68:23:9e:0c:cc:
51:a6:04:25:01:59:d5:a9:f3:7c:ab:2e:7c:87:8e:59:9c:c4:
6e:cb:5e:c8:fa:cd:77:96:8b:54:37:a3:50:28:5f:de:0e:de:
a6:1c:be:71:f0:eb:bb:eb:19:08:b5:bf:51:54:78:82:4c:94:
8e:46:ed:58:c9:5b:78:99:8d:48:e3:40:b4:b2:10:6f:4e:e3:
31:d5:c2:a2:86:12:ae:3c:51:e8:4b:99:e4:9d:94:d4:54:4e:
ff:a9:64:4e:56:ad:d2:f5:8f:72:b4:5b:98:55:d3:50:ca:38:
f9:66:68:6c:14:b7:74:19:86:2e:b8:1c:2f:55:9b:bd:87:d1:
8a:34:52:73:ed:9a:f0:f9:f2:a9:40:01:0b:a8:62:93:d3:0f:
62:81:fa:a1:52:de:df:19:ef:a4:ea:c9:e1:51:29:ba:65:d8:
fd:ac:d3:6f:c2:42:1b:30:56:e0:3a:40:8e:96:24:64:bc:9e:
0b:d1:25:b3:80:f9:da:1e:07:9d:bd:59:fc:16:d9:5c:b5:8d:
7c:48:2b:b5:72:59:7a:fc:75:11:52:01:93:6c:ef:6d:e7:70:
18:35:fc:71:6f:d8:5a:3e:f3:d1:69:3a:e7:55:1c:23:47:a7:
00:f8:4d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:01 2025 by rpki-client