Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier: CzLxYRm+xv9HIxrHiCfZWb5xsNaXrm8AzAgT/uOPJBo=
Subject key identifier: 0D:38:F4:86:AF:C9:6E:A5:E5:75:A8:6B:C0:60:9E:60:9D:04:FF:DF
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 0197B88FC88EC9619B276A0D0D52E6F264B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:01:59 +0000
Manifest this update: Sat 28 Jun 2025 22:01:59 +0000
Manifest next update: Sun 29 Jun 2025 22:01:59 +0000
Files and hashes: 1: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: kQPgDreN7NEnrHqAkkbo1IDs12PzVWjg7SD47zHlCvk=)
2: pV9OuJfGvboWa4RSwyOam_iwesY.roa (hash: RTkqdqbXmblScuzpz+Ud/Jj/+DA6UotPUIkNIsu6BJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:c8:8e:c9:61:9b:27:6a:0d:0d:52:e6:f2:64:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Jun 28 22:01:59 2025 GMT
Not After : Jun 29 22:01:59 2025 GMT
Subject: CN=0d38f486afc96ea5e575a86bc0609e609d04ffdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:3f:27:b0:62:ec:66:92:22:cb:7c:cb:f7:
61:11:d7:79:42:2c:6e:75:a6:02:7c:20:99:cf:6c:
2a:94:42:ec:cb:26:46:b1:b2:33:6a:f3:3e:50:b4:
dc:06:99:31:53:92:99:9c:f7:12:0c:29:8b:b7:7e:
70:4f:31:d4:61:ca:ff:40:e4:d2:cd:44:42:ce:f8:
de:af:02:6a:e5:29:7c:85:df:8a:8b:a2:78:f5:66:
5d:d5:83:95:87:9c:4e:ac:e4:66:7e:8a:a1:cb:55:
b0:58:c0:1b:8a:61:1e:86:36:a5:d1:a5:d6:ee:a9:
03:b2:f8:78:60:77:d9:5d:c1:4d:ce:c2:25:a5:d3:
f6:13:43:18:20:72:95:5b:15:9b:2f:e9:b2:33:e1:
e2:47:77:53:f3:e1:26:fa:07:86:3c:f8:d2:e3:24:
b2:8e:8c:87:79:bc:26:4c:73:91:93:c4:eb:14:c6:
45:a5:60:0f:82:db:fe:29:61:81:8d:c1:60:6f:c3:
a6:72:3d:98:b6:66:6c:1b:e5:61:84:96:5d:ae:b8:
7b:e8:00:48:5a:3b:d3:5e:f5:55:7c:44:c4:a6:d7:
49:b1:18:82:b5:54:fb:18:7c:80:9e:df:7c:4e:78:
35:a3:74:3d:e9:6a:68:15:6f:86:ae:45:9e:c6:80:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:38:F4:86:AF:C9:6E:A5:E5:75:A8:6B:C0:60:9E:60:9D:04:FF:DF
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:22:3b:a6:76:d9:17:06:12:0b:f5:49:26:6a:fd:c1:e3:36:
33:ea:4a:0e:6e:6e:11:90:97:fd:ff:c9:80:20:f1:14:d3:5f:
2f:72:5f:c8:fc:b5:0c:3c:27:0c:9d:e0:9c:f2:1a:15:a1:43:
8e:65:82:b5:04:29:10:57:c5:2c:6e:43:90:90:a4:98:57:d4:
ba:4b:48:77:4f:6a:43:8f:8a:86:42:be:b2:d1:14:cd:c7:18:
5e:cc:f5:ab:ad:f6:bb:af:f8:71:ac:ff:7e:b5:fa:6b:d8:63:
ad:29:e8:85:a3:38:71:36:0f:dd:4d:e8:a7:5a:86:c5:f8:50:
b7:31:99:67:77:c1:88:31:5c:76:e3:7d:ea:e0:ab:99:e3:05:
a6:92:09:5e:e0:2a:18:aa:8d:da:34:e3:95:6f:51:60:07:b2:
59:4a:b6:1c:43:11:df:4c:b1:f9:01:01:ed:24:1e:ed:db:e6:
1f:99:0c:65:4a:27:97:cf:cb:36:8e:c7:28:ee:54:12:35:c7:
52:bb:2e:ff:7b:29:98:b4:03:aa:75:07:d5:56:f8:db:48:3a:
64:ed:55:8e:56:04:78:50:c6:33:9f:d1:c1:a8:1d:8d:94:5b:
fe:80:fd:f3:8b:e6:2f:26:80:17:b4:0a:40:10:94:be:e3:bc:
c4:98:43:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:15 2025 by rpki-client