Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier: EPNQHmI5JDAlD2acrqm7X8YrJLP3I6g0rF5d5xOfpm4=
Subject key identifier: 5D:E0:6B:6B:A3:09:1C:F9:5C:C4:EA:2D:B6:E5:F2:CD:51:61:99:D0
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 0196556E7F23C44370533569C4147901BFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 23:00:26 +0000
Manifest this update: Sun 20 Apr 2025 23:00:26 +0000
Manifest next update: Mon 21 Apr 2025 23:00:26 +0000
Files and hashes: 1: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: 1C7NJlbpS52FRPcvZ+aTPI1j+Qk4P3+v66RB0Ir8DME=)
2: XgpSQjhhfxwk9vZfnDmQ4hugM38.roa (hash: 0VqbQTYbejzGPg6sOJbQNqmXP31XYN5qUoi8IUVN5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:7f:23:c4:43:70:53:35:69:c4:14:79:01:bf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Apr 20 23:00:26 2025 GMT
Not After : Apr 21 23:00:26 2025 GMT
Subject: CN=5de06b6ba3091cf95cc4ea2db6e5f2cd516199d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:9e:89:3b:b8:64:2e:b1:d1:2c:0d:a4:84:
89:63:f9:20:37:e2:ad:aa:32:e5:71:71:93:54:80:
c7:f0:ff:e1:e7:69:a5:21:3f:f3:f7:7a:17:4b:75:
72:88:55:3c:98:9a:bb:7b:63:db:a2:24:3e:51:54:
85:5c:f0:64:6d:f5:6a:85:c6:ca:28:1b:7d:bd:e8:
a7:c0:c3:8b:48:25:e2:13:c3:b3:e6:cb:5c:f6:03:
58:13:1f:bf:4a:a8:3c:9c:81:65:30:77:70:63:bb:
f9:37:8e:1c:d7:8f:b1:72:1c:27:78:bf:eb:e3:a1:
a9:df:7a:f1:45:4d:22:2d:b0:7b:71:ec:4a:c8:31:
f4:47:98:a5:46:09:a1:a5:a9:7d:23:7c:cd:f0:1f:
22:1d:aa:bc:c3:50:6a:4a:4d:6e:38:55:77:f6:58:
0d:4d:8d:3f:96:22:20:33:0f:67:9d:54:99:80:82:
3d:80:0e:cb:2e:d7:c8:c1:3c:88:4e:c4:43:62:f5:
34:4f:64:c4:6f:25:58:4c:fb:44:1b:89:79:52:fd:
84:bf:12:9a:4d:b9:d6:6e:9f:2c:41:82:54:59:21:
91:05:f7:51:c8:a0:af:ff:07:b2:90:58:97:b5:a8:
f1:9c:ce:85:8c:34:e0:22:63:bc:d4:df:79:83:a1:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E0:6B:6B:A3:09:1C:F9:5C:C4:EA:2D:B6:E5:F2:CD:51:61:99:D0
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:01:ca:27:6b:62:23:67:fb:72:76:36:0f:47:ae:34:a9:c1:
dc:77:92:2d:ce:e2:bb:17:bd:e5:64:21:1f:49:46:34:cf:9f:
d0:fb:02:c8:de:9f:70:9d:d4:37:c0:5d:80:cb:ed:38:04:c1:
e1:06:1e:5a:d6:23:2b:bf:6b:75:81:51:95:a5:5b:a1:0d:20:
4b:b7:8f:73:eb:58:e9:ed:3d:4e:c3:dd:a4:69:bb:b3:cb:45:
d4:80:4a:2e:14:96:85:ee:55:31:c8:cf:2d:a0:8d:d4:cf:e3:
b0:89:9c:e2:6d:44:63:94:68:dc:cb:57:e5:dd:cb:ff:69:a2:
0c:1c:2e:19:d1:c7:54:68:f2:99:dd:4e:80:43:5d:b4:34:46:
15:76:86:08:11:2c:23:b3:98:49:00:bd:8b:fe:8e:d7:db:b8:
bf:66:77:02:e2:ab:9f:51:bb:b0:b5:0d:43:40:cc:d1:53:02:
3b:b1:02:59:0e:c7:58:87:de:c7:f1:c8:0d:e7:92:c9:fa:b8:
c7:61:7a:a6:c4:76:1d:fa:4c:b3:31:9b:e8:8e:91:c3:63:0b:
fe:6e:95:f9:a8:99:39:67:e3:14:16:76:db:f9:18:b2:50:cf:
7b:51:bd:53:b1:dc:92:3a:37:74:a0:20:93:c4:29:49:42:7f:
35:99:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:02 2025 by rpki-client