Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File: pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier: U4KA9V9zDy71z+vXreZjtNYfpFIuWT+E6LDHKFByGkA=
Subject key identifier: 88:3C:19:B1:A6:83:DF:09:20:0A:5A:FC:B7:B5:20:10:5C:4E:43:D6
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer: /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial: 0196545BCB362D398288C020796A30F8E23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 18:00:23 +0000
Manifest this update: Sun 20 Apr 2025 18:00:23 +0000
Manifest next update: Mon 21 Apr 2025 18:00:23 +0000
Files and hashes: 1: _fFHOJoXpOrY_um7x7QB-vvO3bk.roa (hash: p/LewBD8vsUMOUJR34qULDasx72iNLAz4cIqUSFI+5E=)
2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: iQSWxBg6vg9GqOh5sLUAkNHEvUNDNiYOGuj6DV2xZ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:cb:36:2d:39:82:88:c0:20:79:6a:30:f8:e2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Validity
Not Before: Apr 20 18:00:23 2025 GMT
Not After : Apr 21 18:00:23 2025 GMT
Subject: CN=883c19b1a683df09200a5afcb7b520105c4e43d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:76:4b:5a:11:c2:7f:02:10:0a:e4:68:2b:bb:
4e:b3:36:61:12:69:68:11:03:83:25:8b:e4:5b:5c:
8b:ce:dc:a5:fa:1f:cb:fb:c8:94:49:62:1f:b8:33:
10:c8:aa:9f:45:25:26:bc:79:64:4c:34:a2:73:dd:
68:e6:48:ef:bc:ff:1e:95:49:b1:1c:0e:4c:3a:99:
e5:bd:8b:12:53:c5:68:da:74:91:5c:af:45:be:c5:
86:77:4a:0e:51:f9:f7:0c:6f:6a:4a:99:a1:b6:9f:
15:b2:7a:75:f0:82:6f:96:08:c5:8a:56:1f:e2:87:
ef:36:dc:18:31:38:cc:49:6d:09:4b:5d:4c:c2:74:
83:f5:bf:a2:25:cf:28:7b:9b:e2:b1:a2:07:06:a1:
b9:5f:4f:ee:99:2c:58:88:8d:e9:59:e9:c0:84:62:
ca:26:a6:f2:98:8b:81:2e:e0:bb:ab:d9:ba:17:d9:
82:23:4a:3d:91:70:71:9b:27:fa:93:72:3a:f0:65:
ea:24:01:96:87:05:c4:9a:b7:e6:93:5f:46:6d:9e:
aa:bf:b8:c0:1e:e0:85:2b:62:cc:c3:88:14:ca:de:
c5:20:43:39:7c:34:f2:6c:8a:d7:5e:86:ec:a4:47:
c1:9e:27:d9:b8:ba:19:4b:a4:1b:e2:d0:90:83:f7:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3C:19:B1:A6:83:DF:09:20:0A:5A:FC:B7:B5:20:10:5C:4E:43:D6
X509v3 Authority Key Identifier:
keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:47:64:28:8f:bb:c3:7b:f4:8d:55:57:d8:80:d8:33:3b:04:
3a:76:65:cf:29:b9:6a:86:17:05:b6:48:bc:08:68:0d:55:17:
06:ee:d6:98:70:af:83:c1:ac:f3:ee:97:cd:e6:89:8b:2b:93:
41:5b:89:88:8c:ff:ce:22:eb:d3:aa:f8:db:f3:3e:27:8e:a9:
1b:04:66:c7:63:7a:bf:99:4d:eb:da:88:81:53:8e:71:65:67:
c5:7f:a0:5b:58:f3:5b:e1:40:35:38:f1:59:92:76:98:c3:20:
03:b1:4e:ef:52:cd:d2:40:80:5b:0f:20:19:ba:a5:f1:1e:75:
12:2d:a6:07:42:55:2f:69:52:6c:c3:b0:0b:64:87:4b:f7:dd:
c0:31:10:24:b3:4d:5d:8e:8d:a3:19:eb:15:0f:a0:6e:14:f0:
ec:ff:cb:ed:15:dd:af:35:c2:d4:85:87:ed:d4:83:97:6a:47:
54:b4:30:ce:33:0e:22:62:9d:64:88:e9:f6:63:e1:5f:3f:37:
cd:1d:c7:cc:d7:fd:2f:c2:0a:f8:b7:60:18:29:04:47:50:11:
cd:dc:9e:9c:5e:ea:71:8e:f5:5e:f3:87:01:3b:49:2b:56:53:
68:a5:c1:16:51:a3:c3:c3:ff:69:74:7f:f9:37:42:10:e2:25:
fb:5d:ff:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:29:21 2025 by rpki-client