Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: xT+v2pPYs+ap+1k27ip+OhoIUX/tQI5dtpxfLUTCnVk=
Subject key identifier: 01:F7:59:B3:62:31:01:3B:30:DB:72:36:09:D0:BA:07:62:C3:8B:74
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 0197B7EA560B291EB5B6EA9EF2FF1E9A904F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 19:01:17 +0000
Manifest this update: Sat 28 Jun 2025 19:01:17 +0000
Manifest next update: Sun 29 Jun 2025 19:01:17 +0000
Files and hashes: 1: 41_o2BIwv76TF64VP1DAdfjTxPo.roa (hash: ZsvXvwGlxNqhMT0bqp079C/5ezKY6fiYSiOoxT1NO2o=)
2: 4mRSyOWbS8hQScfHLulGf4Y6ZgQ.roa (hash: o3JSSVtXNFoFrqvnt6XhA+Y0uItKhtMcyPKqriXcd08=)
3: Qw_MgL0jZxAEcUaQV1xqF4PVe2w.roa (hash: K6DZu82eoM3254ECuNlV9U+0ldDohrzL2NCBM61LLzM=)
4: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (hash: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=)
5: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: lgCEOH1KvUpoZvzXxhBnDFxLE/KCuJqCE99Qj0HfPGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:56:0b:29:1e:b5:b6:ea:9e:f2:ff:1e:9a:90:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Jun 28 19:01:17 2025 GMT
Not After : Jun 29 19:01:17 2025 GMT
Subject: CN=01f759b36231013b30db723609d0ba0762c38b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e2:e9:e8:30:9f:da:a1:e7:0d:b8:2d:62:26:
c2:ff:d4:4f:85:6a:d1:f9:0b:40:bf:d5:8b:1f:29:
d2:e7:be:a9:1f:b7:65:81:b4:c9:0d:a1:01:de:cd:
b9:23:92:ca:30:19:a4:ba:d0:03:da:07:41:d5:9c:
3f:2e:c3:ce:63:db:ca:49:29:68:a2:f2:b4:cc:52:
40:41:62:f6:d6:21:ac:3c:a3:7f:64:a5:b3:db:b4:
c1:cf:ae:56:1f:d2:df:3e:92:3d:e8:58:c4:77:b0:
3a:0e:1d:ce:d4:d1:60:18:32:8d:19:89:30:25:8f:
62:d5:be:82:18:54:5a:0a:47:30:04:85:90:16:69:
e2:1b:17:05:10:22:97:f0:2c:04:28:0b:02:28:9f:
7b:34:4c:c8:7f:d2:2b:6e:42:80:1f:ae:76:c0:0b:
64:1b:e7:f2:b1:04:91:5e:6e:83:2f:e6:9a:de:7b:
aa:a2:32:ae:c2:6a:51:af:0c:ac:fa:9a:23:47:88:
86:13:cf:e5:f2:3b:09:5b:3b:f7:eb:b8:dc:44:46:
46:e6:6c:23:20:2f:7e:3a:f4:6b:0c:38:bb:de:b7:
92:4b:7e:ac:00:d8:b1:5d:49:57:de:fd:cf:df:d7:
0d:d5:33:41:26:ad:c0:ed:d0:aa:d0:ca:29:b8:42:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:59:B3:62:31:01:3B:30:DB:72:36:09:D0:BA:07:62:C3:8B:74
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:07:e9:13:c4:0b:99:be:a3:52:21:bd:65:91:a5:0c:55:48:
35:32:7a:20:3b:58:9f:70:1f:fd:bd:26:31:6c:64:15:20:89:
02:e0:2f:47:b6:1a:67:a1:16:03:fd:b3:68:50:c2:82:99:fd:
f1:b5:9b:ec:3d:39:e1:af:9d:02:ea:3a:86:2d:74:37:9e:7e:
84:13:3d:2d:43:e8:81:c1:b3:50:60:f1:ba:cc:91:d8:69:f5:
2c:8c:e8:58:9d:7e:b1:4f:d2:71:87:f1:0f:87:ec:af:6b:81:
3c:3e:eb:8c:97:b0:6d:45:2f:53:45:3d:54:74:43:61:08:d5:
b1:27:12:74:68:7c:4b:f1:12:0a:87:ac:90:ef:c2:7c:b2:40:
54:bf:4a:1e:d5:81:09:73:0c:3b:d0:fd:11:08:ac:e1:bb:26:
c5:e6:1b:4b:37:29:bd:51:a8:fc:e3:b3:7f:a2:a5:09:d5:c6:
1d:b8:67:43:24:fd:6b:a7:02:f4:f7:9a:d5:4a:c9:94:91:d3:
bd:22:3e:92:b8:86:b5:8c:81:38:48:bd:64:4c:9d:a9:80:7e:
aa:d4:2f:15:59:c4:27:85:4b:2d:b5:ca:ab:df:3b:6f:81:48:
46:6e:cc:7b:30:bd:c4:d9:53:c9:aa:ee:8e:17:d6:e4:18:48:
d9:63:18:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:20 2025 by rpki-client