Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: jqZWodWiKRuiGHceq5tgeQp0C0bYyRfyvVmeO74PI6A=
Subject key identifier: 66:B8:25:C8:B4:BC:14:C1:61:22:E6:DA:61:A4:F5:E3:0C:7B:4A:8B
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019657CB9B9CF97993A587A213672A30429D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 03D4
Signing time: Mon 21 Apr 2025 10:01:23 +0000
Manifest this update: Mon 21 Apr 2025 10:01:23 +0000
Manifest next update: Tue 22 Apr 2025 10:01:23 +0000
Files and hashes: 1: 2aIv5EFJCSs3iPuLEwGcOsjanoQ.roa (hash: rNsD7+Ehz0+ume5zSIU3z6oGfVe17YRXQCn2AWnXoqw=)
2: 3Z7L3_p0yn0EwtvhrBcb6RS6PAs.roa (hash: 4nmnsCr5dF+3f2AuaahP7K0weju+VIeFWLyhjXlOYao=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: kzXHXHdhU/oaIAmFwr8CR/T7fc2aYo9nb5Ffpe9YOcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:9b:9c:f9:79:93:a5:87:a2:13:67:2a:30:42:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Apr 21 10:01:23 2025 GMT
Not After : Apr 22 10:01:23 2025 GMT
Subject: CN=66b825c8b4bc14c16122e6da61a4f5e30c7b4a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:56:d9:e0:29:01:34:31:48:ca:7a:6b:58:56:
94:52:9a:30:09:42:e3:72:dd:9e:00:91:0e:39:7f:
e4:a2:da:3d:64:13:63:11:78:32:e0:6e:92:5a:3c:
a2:70:2a:32:63:f7:3b:ab:24:f9:b1:2a:d1:f1:a1:
71:28:92:37:24:58:e6:25:03:2c:b6:8e:7e:a6:e1:
46:83:d2:42:67:5a:cf:81:35:b3:45:2b:b3:5b:3e:
8e:61:78:84:97:1a:7c:40:86:57:ea:42:00:4d:10:
42:25:04:70:d4:98:01:13:c7:37:33:2e:53:67:31:
9e:a2:55:e4:08:3d:93:39:73:6a:26:dd:a5:a3:e1:
94:d8:d5:8a:21:d6:5b:ed:ab:8f:76:89:94:9b:5b:
3b:c2:53:83:a0:02:12:6a:31:f1:4f:30:b9:dc:d6:
cc:78:96:d7:94:1e:fd:40:c5:69:0c:14:1d:29:6c:
bf:84:d9:0c:6d:ed:4b:57:50:7b:e2:c5:60:54:2b:
8e:21:3d:26:eb:78:33:aa:f5:12:b9:54:86:23:91:
98:aa:42:ed:ba:78:16:ea:5e:cb:f6:38:17:6b:19:
d8:e7:7f:23:f4:2a:77:cc:44:ac:4d:3a:61:f2:77:
05:e3:1d:c8:92:ad:68:de:a5:2e:0e:af:c6:a9:40:
d7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B8:25:C8:B4:BC:14:C1:61:22:E6:DA:61:A4:F5:E3:0C:7B:4A:8B
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:71:2f:b3:0e:3a:48:55:04:7f:2b:aa:9b:54:e6:88:7c:98:
83:1c:16:cb:2b:fb:fc:52:2c:f8:41:ff:bf:7c:21:c6:1d:79:
fa:5f:f8:75:1b:aa:54:57:54:ab:fd:93:55:78:75:e1:0b:a0:
5f:d8:8d:78:32:80:20:31:ea:fc:0f:75:33:7a:7d:8c:72:be:
1a:dd:d1:e3:f9:cf:d5:86:50:fe:27:44:56:43:c0:43:f3:1b:
e0:03:17:eb:4a:88:a5:96:3b:18:31:fa:c0:90:74:5b:62:ca:
d0:ac:5c:fb:4d:da:7c:67:25:31:84:00:79:4a:79:34:d2:cd:
1f:6e:47:9c:26:2e:0f:85:c6:a1:d9:c6:e0:ad:b1:46:73:73:
aa:49:41:07:6d:bb:68:b8:9e:77:3e:bc:2c:5d:2e:a0:a4:5e:
f2:c0:65:da:76:d7:a8:76:a0:ee:19:8d:d8:0c:45:ba:6c:b6:
5b:47:e3:6f:f8:96:38:2f:f0:c1:55:84:71:55:c1:53:c5:d7:
b2:10:c8:5c:f2:ab:e7:78:a6:dd:ac:40:8f:28:d1:c1:0c:d6:
de:9e:15:6a:bf:f3:ec:d0:91:c0:f1:e1:86:dc:20:21:92:ee:
54:74:b5:0a:c5:38:ec:09:f7:d5:df:a1:90:7a:b7:11:bd:f4:
13:3d:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:19 2025 by rpki-client