Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: CfNzXPgkYR9TCVtBBEWuw3o8BEazsw4BO2RcYQchbKQ=
Subject key identifier: 73:BB:1E:20:74:30:07:24:D4:74:A7:5A:C5:BC:AF:61:1A:BA:0A:24
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 0197B745894CCC013E42730DB76C1344CF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 047B
Signing time: Sat 28 Jun 2025 16:01:17 +0000
Manifest this update: Sat 28 Jun 2025 16:01:17 +0000
Manifest next update: Sun 29 Jun 2025 16:01:17 +0000
Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: mkwRIrC47/oOxObx2h0M7+UtZS1RmRlo7rdE2UdapAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:89:4c:cc:01:3e:42:73:0d:b7:6c:13:44:cf:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Jun 28 16:01:17 2025 GMT
Not After : Jun 29 16:01:17 2025 GMT
Subject: CN=73bb1e2074300724d474a75ac5bcaf611aba0a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:cc:79:67:5a:5f:54:10:3a:61:5e:9a:51:
ca:f0:ea:d3:a5:fa:a4:ff:27:25:32:0c:47:f0:e2:
0c:2e:47:50:e2:98:fa:8c:6a:5c:79:40:e7:d3:8e:
81:a7:39:d1:2b:1e:2c:34:5c:38:11:be:b5:8d:6d:
5f:ef:72:c0:a7:71:16:97:d9:0f:41:49:9a:4d:e1:
9b:8c:32:ff:70:46:0c:5b:47:d9:b8:ce:e4:f5:06:
41:81:cd:e4:1f:bf:4f:e0:c6:20:9d:e1:81:66:7b:
e1:57:cd:84:16:32:97:11:6b:57:cd:67:6d:c8:dd:
80:ba:a1:fd:c0:bf:f6:82:e2:b5:e3:41:8a:9c:14:
a4:24:62:79:e4:e7:56:55:2b:17:c1:33:38:84:2c:
11:4e:ba:01:dd:0b:a1:43:0b:90:f0:f3:f6:5f:90:
18:cb:b4:05:b3:20:76:8d:43:83:47:ae:cd:08:35:
e9:dc:29:b5:bc:40:16:74:7b:86:e0:51:37:25:a9:
62:ef:1a:1f:14:ed:45:92:a1:dd:f2:96:7e:1f:5e:
af:2f:3e:89:67:f7:dd:13:0b:de:43:af:73:7a:9b:
6b:8a:5d:ca:30:e1:b5:98:75:8b:1f:31:17:6c:67:
df:75:e4:c2:48:1d:df:23:c7:69:d5:93:67:bd:1a:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BB:1E:20:74:30:07:24:D4:74:A7:5A:C5:BC:AF:61:1A:BA:0A:24
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fe:4c:91:52:aa:2e:23:45:bb:5f:63:87:c3:b4:d8:6e:9a:
8f:58:9b:c7:48:6c:14:ac:4a:e2:93:a6:6f:f8:de:50:05:84:
7f:1f:08:de:17:0b:70:d8:55:46:1e:f6:74:41:f1:99:2e:ca:
ce:66:85:2b:13:aa:51:2d:87:ed:b6:cc:d3:e7:75:5e:6d:d7:
a2:26:09:37:a9:66:e9:b1:68:3f:08:72:99:f0:f0:a6:4f:d6:
5e:47:1b:ee:1e:d5:dc:16:f9:e5:4c:85:a4:fc:c9:d0:0c:a8:
0e:56:e3:9f:47:c0:3f:4c:cd:2c:5d:94:b9:e9:0b:1c:60:43:
25:e0:48:13:cc:71:ed:e6:5f:ea:61:c5:7f:68:8d:39:dc:62:
38:55:0f:dd:53:80:55:f6:db:61:62:04:04:cf:e0:44:48:43:
a3:1a:82:0c:79:95:a7:82:58:73:3d:9a:bd:95:b9:52:2b:fb:
fb:00:96:df:60:51:3a:aa:36:66:38:d7:06:25:25:e6:71:ee:
35:d2:af:5f:03:74:d0:59:60:e3:0b:93:ee:e3:94:e4:1c:27:
e3:79:88:7c:b6:99:61:dc:54:47:ef:c4:16:50:68:47:90:6e:
0d:ac:66:ae:50:09:90:94:77:a4:ff:ff:fd:33:72:b2:10:b7:
62:c4:04:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:43 2025 by rpki-client