Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: nih/7BGXtG41ca/Yt9j7P+uTf/ZGyJCywDdWIbBObW0=
Subject key identifier: A2:CE:22:37:7A:75:05:32:4E:62:DF:54:87:5D:F1:DD:72:58:7E:94
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 0197C26DF2FDA72C80A243276605A3B76DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 15BC
Signing time: Mon 30 Jun 2025 20:01:14 +0000
Manifest this update: Mon 30 Jun 2025 20:01:14 +0000
Manifest next update: Tue 01 Jul 2025 20:01:14 +0000
Files and hashes: 1: d9zp6AZxGUIdUrJzz8idXxXqkvw.roa (hash: FfoXAw9lK5hBRkyqnfyBrRUYHwvSIXzUheL45ZXlndI=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: luR7KblcRdxIgsfmQ2XvOY2T8DM9nJT8Joyq/XHMcv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6d:f2:fd:a7:2c:80:a2:43:27:66:05:a3:b7:6d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Jun 30 20:01:14 2025 GMT
Not After : Jul 1 20:01:14 2025 GMT
Subject: CN=a2ce22377a7505324e62df54875df1dd72587e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:df:d5:d1:ed:de:11:e3:8b:43:e8:51:bb:
19:c3:5f:9e:5a:28:16:13:52:99:c8:78:b6:dc:27:
97:7c:33:1a:9a:0e:2e:69:60:7f:b8:bf:ef:9e:e5:
9a:cb:fa:0c:1f:a9:77:c1:2e:e7:03:bc:68:81:36:
4c:1e:64:84:3a:12:04:a5:6e:84:18:b2:8f:e7:d6:
21:47:55:98:d1:be:96:77:7a:58:b6:60:f5:9b:65:
f0:43:bb:05:98:c1:34:70:78:80:4f:d3:41:ee:52:
9a:55:71:2f:d3:d0:fe:af:5c:eb:ff:ef:1c:28:9d:
54:cf:a4:1b:2b:ca:df:57:ae:53:77:72:84:ab:62:
a6:40:ab:76:19:05:9f:19:69:71:06:2d:00:0b:5a:
8c:cf:05:a2:cf:1d:b7:65:06:47:5c:cb:eb:48:6f:
ea:bc:a6:46:cd:36:2e:ab:db:c9:ba:73:a8:31:03:
a1:5e:87:e3:ad:89:aa:dc:51:67:87:8d:71:eb:be:
b5:4d:91:52:57:a5:f7:10:e2:c7:69:27:2a:8c:ca:
c8:3b:1a:c4:8b:e4:b2:d9:f1:5a:8a:6d:39:28:c9:
0e:a1:46:e1:d0:c5:bb:f6:ef:a5:1d:2a:93:2f:21:
97:30:a4:eb:1c:af:c7:df:8b:d8:d6:5c:54:fa:6e:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CE:22:37:7A:75:05:32:4E:62:DF:54:87:5D:F1:DD:72:58:7E:94
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e8:cf:0c:6b:9a:17:10:75:2c:76:13:42:43:b6:ca:4c:ab:
a4:9d:ee:66:ce:89:a2:0c:13:55:72:d8:60:40:6f:f8:d0:8a:
af:6e:16:30:dd:b4:37:9d:ab:a6:88:2f:18:3a:35:72:01:56:
00:d8:f1:c1:a8:02:54:ad:eb:fb:7f:22:75:8c:1f:0e:4c:ab:
99:7f:b9:e2:22:d4:0f:f5:bc:4b:89:82:bc:6a:5b:ee:17:9c:
b4:c1:00:69:ff:1a:67:f0:f2:9b:23:8b:3a:6d:82:9c:ff:c1:
af:1b:8f:8e:4a:48:ee:7d:db:28:19:19:da:61:a7:e6:b0:9e:
34:9a:29:a4:25:9d:a2:19:78:b0:7c:0e:40:bf:7f:20:32:52:
6c:2f:a5:9e:32:07:7a:fe:b3:c3:6f:a8:2c:dd:95:40:0f:e1:
03:c0:bd:d4:ee:9f:eb:e0:d0:d8:20:5b:28:d0:01:f6:26:6d:
b4:2e:38:6f:46:13:ad:f2:b9:df:8b:58:bd:2b:89:5a:1a:5c:
08:05:62:a3:13:07:cb:9b:1b:f9:06:fc:37:bc:5c:f0:f2:aa:
47:cc:c9:16:35:c4:d7:6e:09:c8:a1:f0:4b:b5:0d:d6:03:9d:
75:14:03:0e:31:b9:5f:5f:bf:a5:0e:61:fa:9b:80:16:20:14:
f7:c0:32:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:52:27 2025 by rpki-client