Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: 1eYFgVP4NAB/DsEr2AtqHKluK7Y+J9Tx7pNPabgg0Ks=
Subject key identifier: AD:CA:32:4C:D3:E1:9F:07:03:06:06:C2:2C:DA:64:EB:19:D8:9A:8E
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 0197B8FD57B6F4DB61B97A9825D776921138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 00:01:40 +0000
Manifest this update: Sun 29 Jun 2025 00:01:40 +0000
Manifest next update: Mon 30 Jun 2025 00:01:40 +0000
Files and hashes: 1: 9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa (hash: C4dGnq5v0d5/X1v0Ow3x2iZJ1sOJLLWISEpoXWZpLas=)
2: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: bjQo1UZGp7VRR5eQwsz5HTLgq+UMuqzc0eRFh3S5QVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:57:b6:f4:db:61:b9:7a:98:25:d7:76:92:11:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Jun 29 00:01:40 2025 GMT
Not After : Jun 30 00:01:40 2025 GMT
Subject: CN=adca324cd3e19f07030606c22cda64eb19d89a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:6d:74:db:d7:91:07:66:6e:50:f6:89:5a:
d6:4c:bd:7c:c5:b8:cb:c2:96:68:82:c5:80:94:1e:
e7:74:a7:a5:4d:48:54:de:9c:4e:ca:d2:32:04:6c:
61:3a:5c:ee:be:fe:2b:77:3a:5d:e4:72:52:c0:56:
f3:38:09:9e:a2:7b:e4:7e:be:25:ac:78:f9:5b:5d:
31:77:11:0b:f8:55:20:31:97:d9:62:d0:fc:98:b4:
d0:6f:77:7e:2d:f8:82:d9:e0:a8:fa:e1:8f:4d:f8:
8a:48:75:f6:12:ff:b1:e7:82:fb:34:65:d0:3f:70:
d5:b9:f2:f0:89:de:94:0f:9d:75:bd:59:62:d7:8a:
db:bc:41:f6:50:26:84:f9:de:39:31:0f:47:c0:18:
5c:6a:98:b1:ea:da:94:dd:09:55:58:6b:89:78:24:
d9:b5:da:8a:2f:8c:15:b5:f3:29:fc:38:78:04:4d:
ed:97:e4:c5:bf:3f:ef:f0:f0:d2:dc:ff:0b:bd:e7:
0b:99:31:8c:be:76:06:29:7a:6b:97:99:69:55:74:
29:37:1e:2d:6d:45:1a:f1:53:62:2f:22:0a:48:a2:
74:1f:5f:f0:d5:84:58:ab:4a:23:2f:2d:d6:a3:54:
3d:2d:f4:7a:9e:cb:ae:73:c8:90:7d:ab:06:d0:fd:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CA:32:4C:D3:E1:9F:07:03:06:06:C2:2C:DA:64:EB:19:D8:9A:8E
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:84:b5:8c:24:aa:58:8d:41:e8:9e:ac:54:b9:93:57:25:e8:
73:9e:72:a1:45:ca:97:ab:80:2f:4e:bd:cb:e9:38:62:16:36:
24:95:08:04:54:61:e2:27:85:98:f1:53:50:c9:8a:b1:d2:36:
18:25:c5:4b:e7:c8:2d:36:5e:b5:24:37:a8:d5:44:f8:a2:cd:
4b:26:cc:20:f6:d0:2f:74:53:c6:34:7d:46:d8:d2:01:32:76:
d6:d1:c9:b9:72:24:be:06:50:01:28:e4:95:80:43:f3:d4:7b:
2c:f7:b0:d1:96:12:3c:da:4b:2f:84:70:e0:1c:09:47:59:dd:
4e:c4:b7:39:6d:81:ed:2d:92:3f:f0:9e:66:ff:bf:aa:ba:e7:
85:bb:3b:98:d9:cf:c7:4a:4c:e7:f7:8d:30:0c:dd:c1:e9:44:
15:65:71:0d:a5:f9:ae:57:6b:68:be:52:49:2f:e7:0b:e3:47:
90:a8:66:d0:60:1d:fc:ee:de:06:8c:7e:83:e2:56:c8:d2:f3:
e5:7f:c5:50:76:14:73:1e:5f:b5:7a:35:5f:1a:a7:af:92:1f:
0e:d2:7b:e2:94:60:10:dc:e1:0f:26:8e:33:eb:b1:a0:ff:34:
44:96:f4:b9:e5:80:4b:ea:ac:0b:dc:90:f2:2b:39:1f:e4:a1:
3d:e1:b2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:28:33 2025 by rpki-client