Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
File: pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json)
Hash identifier: +jxjO1yjx96MWw8vN32u+M066EVN0CxW4zaUb7BSFWo=
Subject key identifier: 69:70:25:25:9B:1B:6B:8B:EE:A3:7D:41:55:12:BF:35:D7:7E:F1:79
Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Certificate serial: 019659820F8A38965553C02882930467463C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
Manifest number: 01E8
Signing time: Mon 21 Apr 2025 18:00:17 +0000
Manifest this update: Mon 21 Apr 2025 18:00:17 +0000
Manifest next update: Tue 22 Apr 2025 18:00:17 +0000
Files and hashes: 1: 3zuNm_rolfFNztpZzjMDGM_7wOs.roa (hash: 6DVW+skCd5kOszHOwiH8v1Z8QoCm6yJygVbagRePo+4=)
2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: 2LJNg+4uZgaIzEXBzQh/Bil00s1A57QqI+uvPfJGPQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:0f:8a:38:96:55:53:c0:28:82:93:04:67:46:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Validity
Not Before: Apr 21 18:00:17 2025 GMT
Not After : Apr 22 18:00:17 2025 GMT
Subject: CN=697025259b1b6b8beea37d415512bf35d77ef179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:b1:be:a4:95:db:60:5e:f7:40:3e:db:fb:
42:e8:b2:be:dc:a9:bb:f9:27:78:69:7d:d4:15:c6:
50:35:68:a1:7b:a8:a4:32:2a:2e:4b:5d:c4:aa:ce:
70:11:75:3b:6b:92:fa:3c:6c:ea:cc:ae:2a:6c:ac:
e5:15:bd:bd:c1:3a:9d:0d:28:f0:e9:9d:47:3a:b9:
9c:c8:60:50:22:8a:81:91:71:2d:e7:54:64:78:b1:
f3:0c:62:f5:3e:f0:24:bc:19:e9:0f:36:b4:22:2b:
3d:b8:b9:15:c8:f0:49:4c:a9:6d:e4:7b:d1:9c:6b:
cb:24:b0:6d:41:1f:7f:ad:db:9c:03:bd:1c:c6:26:
e7:d7:2b:2a:69:f4:80:61:5b:d2:1c:3c:69:b8:b2:
8d:71:a4:db:c3:ab:e0:b1:b7:55:af:3f:14:6a:7b:
39:fa:36:fc:1a:ab:1a:57:b7:5a:ea:93:99:9c:f7:
2a:05:55:53:15:30:3c:e4:41:e4:66:05:79:f9:11:
94:f6:2a:50:00:e6:42:68:bf:1c:1d:96:9c:21:a7:
ba:f7:fb:0b:2a:1a:d7:b9:1f:35:2e:83:5d:45:81:
04:41:21:89:2b:58:0c:ea:67:5a:6d:d5:6e:da:9f:
fa:14:c0:6b:da:f0:35:8d:17:70:31:ae:c3:e5:d5:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:70:25:25:9B:1B:6B:8B:EE:A3:7D:41:55:12:BF:35:D7:7E:F1:79
X509v3 Authority Key Identifier:
keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:38:41:ac:60:97:5f:26:cf:3e:98:10:69:96:d1:83:f8:a3:
a7:a2:7f:c6:b3:41:a7:f6:41:d3:b2:a8:ba:ab:64:76:36:2c:
e3:45:34:dc:c3:c3:32:82:d7:51:62:49:6e:db:a1:a7:23:0e:
56:f3:49:0c:12:c6:fa:60:ad:10:8c:55:0a:d1:c6:96:ee:a5:
fc:ef:46:61:6f:29:84:e1:e1:30:35:84:67:65:d0:ef:63:bf:
9f:f9:24:22:22:9b:44:81:41:c5:9b:47:e0:67:d9:0a:f9:32:
05:6f:2f:6c:90:12:ef:8b:29:ee:fd:d9:37:3e:40:c4:12:f0:
45:cc:e6:b1:af:b9:0d:82:1b:3c:df:3d:ea:33:e1:c1:6d:07:
72:2c:ed:4c:1c:16:47:fd:ce:26:9c:05:04:2a:c6:54:6c:a8:
2b:11:ae:79:1e:f2:96:e2:63:99:f3:1a:40:1e:69:a1:1a:92:
9c:00:dc:62:eb:2b:ba:5d:a2:77:2d:16:5c:3a:fd:08:9e:4f:
4b:24:fd:2f:7a:5b:cf:4c:d7:af:ec:f8:12:b3:df:12:bd:58:
fc:8d:ba:19:50:bd:6e:86:d0:15:a1:30:11:ea:b1:43:6b:85:
38:c7:fd:00:3c:41:89:8e:01:54:64:85:d1:a8:a6:38:b3:5a:
24:8e:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:28 2025 by rpki-client