Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: sNXnUd/eJIEzDY1X1nS6Dpc/jSFgZbBsXPU9bwHi5Oc=
Subject key identifier: 5D:2E:10:BC:02:7E:57:9E:EF:FC:4B:97:95:60:7A:1A:B5:6B:6B:68
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 0197B820BFC0E6C6578D06C682D3B10E8688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:00:43 +0000
Manifest this update: Sat 28 Jun 2025 20:00:43 +0000
Manifest next update: Sun 29 Jun 2025 20:00:43 +0000
Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=)
2: PHmIlcJAMKaUCf176lVhWz-T4Wc.roa (hash: bNQSW/1JZ77X2TCkKdD1g52s5lNQ368QaQCo0ZhUqTw=)
3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: WIRB+mY+ljDVZhXT/u8yWTzSbXmGFS591Z92bukrLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:bf:c0:e6:c6:57:8d:06:c6:82:d3:b1:0e:86:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Jun 28 20:00:43 2025 GMT
Not After : Jun 29 20:00:43 2025 GMT
Subject: CN=5d2e10bc027e579eeffc4b9795607a1ab56b6b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:40:f8:df:08:aa:de:9d:d6:28:eb:9b:67:
5f:88:65:d0:26:bf:fe:ea:24:6a:b2:60:f0:ca:ba:
50:d1:81:9c:9f:4c:18:80:88:7c:e9:ae:1f:4d:46:
12:e3:c1:e2:95:e5:39:07:d1:8b:b7:3c:e3:25:86:
e8:b6:4d:45:d5:a4:ce:08:24:3b:c1:e1:74:a1:51:
a6:42:83:b0:a2:b2:f2:dc:a2:38:0e:c3:e0:e1:ef:
a8:3e:af:7e:cd:12:32:42:92:b3:cd:3c:15:4b:90:
81:ea:e6:f4:40:20:68:50:f9:22:be:1f:74:c1:3a:
55:47:80:2b:60:c5:bb:46:2a:42:d8:7f:9a:88:ae:
00:b9:12:f0:92:b8:7c:e7:33:d8:6b:82:16:f3:1d:
6c:0d:27:b4:78:01:ae:28:58:00:e2:ed:a9:29:c0:
d3:bf:23:12:53:3b:12:74:1e:87:42:2a:ef:5e:57:
e8:d2:0f:61:65:32:c6:85:c7:87:ce:f5:4f:1e:47:
b4:fd:ca:b2:26:49:fe:a9:6c:61:4f:93:c3:13:82:
78:98:d2:0b:bf:fb:38:30:0d:39:26:3b:5c:33:cc:
32:81:00:a2:46:1c:91:64:c4:01:e8:4c:f0:8b:c6:
aa:82:7d:54:52:f6:45:02:e8:c5:cb:ff:58:09:0d:
54:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2E:10:BC:02:7E:57:9E:EF:FC:4B:97:95:60:7A:1A:B5:6B:6B:68
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2c:3c:43:5b:52:40:97:ff:d4:11:73:a6:2c:cb:81:85:5a:
45:57:41:99:5e:80:f9:ea:47:05:d3:27:db:f7:f9:be:7a:c3:
04:13:ff:94:9c:10:b5:a0:74:fd:85:63:5f:a7:95:5e:3b:8f:
14:ae:65:a9:9b:7c:c2:12:4c:98:fa:4a:52:2c:4c:62:e2:b3:
6b:ee:40:a5:47:71:e8:38:3c:5d:20:e6:8a:3f:4d:6c:9a:1b:
b5:84:06:8c:68:62:b0:89:37:86:7d:d1:86:cf:3e:ba:7f:e2:
77:1a:ee:45:91:3f:7c:ad:3a:11:9d:2f:2f:24:25:13:27:61:
f0:70:68:77:80:2c:b9:a7:d5:33:e6:28:60:22:1b:3b:e2:71:
1e:ee:3b:5b:24:6f:9e:a5:80:89:27:79:24:f9:3b:6f:21:0d:
7c:5c:50:3d:9d:99:57:0b:53:62:67:aa:b4:03:ba:d3:bc:ab:
eb:07:dd:9f:10:3e:d7:0f:11:18:bc:a9:cb:a5:b9:ed:05:87:
b9:e8:a5:ac:c2:a3:6b:4b:e6:24:fb:a5:80:97:06:6c:1c:e6:
1a:30:15:6e:f8:c9:f6:5f:68:9c:ef:9b:89:9d:54:82:e4:6e:
e2:e9:89:95:fb:96:a0:48:36:db:c7:ec:9b:3c:6e:99:27:7e:
03:93:d8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:37 2025 by rpki-client