Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File: pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier: F12CwKhitAevKxb/Exa++SrQeG6Bqkk5cw/u4pSxZ6U=
Subject key identifier: B2:95:ED:BA:5D:03:53:72:72:1B:26:32:DF:E0:0B:43:66:AF:8E:BD
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 0197B77C454A7FB53403A748AFDA68123BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number: 15CF
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: HMGH1OixlUbIZln6UuRHK_JoRTM.roa (hash: hIobepQhJMDuyYwWr9rOBNqOIvasbF7MFvvQPTjZKdk=)
2: PQ45AYuoXrKgjYd4a2nYqs6hfn8.roa (hash: 7Md1PLbDzWkJqH/gps7rzdw/URXMoRhj3yufH4c5pmc=)
3: XXKuildCsFJXdNyCwBMrowurkY0.roa (hash: NXW1f3EG3KW4h6xADEdnRgY4ZNLFSP48OU6WesEP2Jo=)
4: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: ojWubA/qs+u5dqCDr1k2eIzgWZ6QeQiPm9GRVdYmBTo=)
5: pjx3rNTZc8zgxWfuwXBOXgS3sqk.roa (hash: WRGBj9YhrJQ6r6myfQ5P/R+NIt879XmbiNbiLcGeJP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:45:4a:7f:b5:34:03:a7:48:af:da:68:12:3b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=b295edba5d035372721b2632dfe00b4366af8ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:40:00:18:1f:ee:c7:c3:44:75:85:a7:b8:
38:0a:40:58:86:dc:c9:ad:83:74:ba:99:d6:4d:73:
1e:22:11:04:6a:ee:9a:79:30:81:c5:7c:32:48:e5:
25:59:f6:44:a2:a7:fe:89:f4:fe:86:e7:5e:1e:a7:
8f:e9:92:e3:66:97:c8:c8:7f:9e:e0:b7:b6:95:46:
cd:52:2c:fd:48:9a:53:88:f1:93:a2:4d:fd:13:f4:
6d:5d:31:b0:8a:d2:70:00:bc:25:46:d0:00:87:5e:
42:d0:af:93:4f:9d:cd:9a:a9:bb:cc:9a:a9:e6:cc:
b1:e2:c5:0a:a5:c1:95:fc:3c:f8:67:5b:36:7b:95:
87:57:7d:fc:51:bf:56:44:5d:fb:8a:85:56:56:00:
f4:6d:8f:9e:eb:6f:18:20:86:52:75:03:2d:ff:a3:
60:16:a7:67:3d:4c:97:64:01:90:2e:91:13:33:cb:
16:a5:a1:50:9b:9d:b4:e1:c0:23:0a:e0:6a:a9:92:
dd:19:ec:75:00:fb:f3:b4:67:a8:56:e5:91:2d:7c:
fb:c1:8b:86:38:e6:f7:94:1e:3f:e9:0b:e2:06:d1:
a0:22:11:80:05:52:b4:60:c0:b0:d4:8c:01:83:0b:
42:cb:79:c7:0a:63:22:f0:e9:6d:1f:54:1c:98:9b:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:95:ED:BA:5D:03:53:72:72:1B:26:32:DF:E0:0B:43:66:AF:8E:BD
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9a:85:d1:22:7f:cd:b4:4f:60:7c:f4:24:f2:1b:e0:ba:0c:
d3:dc:55:af:dc:c1:e1:10:7c:0b:1d:e5:f2:42:81:e7:1b:69:
16:fb:ff:ad:38:62:d3:eb:4b:54:58:d0:ed:74:11:b3:3f:48:
9a:9b:35:49:30:03:db:82:b8:13:d5:a1:1f:1e:22:e3:b2:c9:
e2:b7:32:cf:19:73:8a:87:29:c8:26:1e:5e:18:43:84:61:1a:
dc:b9:9c:0f:bb:eb:2d:c9:fe:64:05:5e:08:5e:90:24:71:9d:
76:c9:f9:9b:32:be:c6:b2:26:b7:f9:bd:7e:c9:0f:a0:b8:ad:
ae:83:eb:28:cb:ed:72:30:e5:31:a5:3e:29:96:c4:a0:44:cb:
36:4b:3a:7e:3d:a2:02:97:5b:ec:3e:1b:a9:46:46:6b:a8:68:
b0:f0:6e:6a:ef:ef:dc:ee:fb:11:71:2d:e2:66:f7:94:f8:34:
f5:ee:64:6f:a7:2d:e4:2e:34:fa:8c:ae:17:c1:97:f0:b1:2a:
54:02:a4:e2:c5:39:2e:93:27:3a:29:a3:68:d6:69:35:4e:aa:
9c:03:ea:0e:16:00:ef:c7:29:2f:71:2c:d8:f8:24:2b:2d:00:
bb:99:82:a8:26:b9:7e:96:ab:a7:69:43:e7:a8:41:e2:6b:aa:
a4:c7:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:24 2025 by rpki-client