
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
File: pnYhghhEiOf3hxIqcYCZfOjpDUw.mft (raw, json)
Hash identifier: zm0B6ZZTEVhQdtwjy/ZTO/iq1zkxnFr/eSRAhxMdU5Y=
Subject key identifier: 6D:8E:52:88:A5:36:B6:F5:C4:9B:55:50:7F:3A:C9:07:26:53:CB:DC
Authority key identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
Certificate issuer: /CN=a6762182184488e7f787122a7180997ce8e90d4c
Certificate serial: 01965C83689C15A2ED16A69650CC12F6A9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
Manifest number: 01C7
Signing time: Tue 22 Apr 2025 08:00:37 +0000
Manifest this update: Tue 22 Apr 2025 08:00:37 +0000
Manifest next update: Wed 23 Apr 2025 08:00:37 +0000
Files and hashes: 1: pnYhghhEiOf3hxIqcYCZfOjpDUw.crl (hash: ZMaeFkXljeZ9cPwfJ93K354bON94FtrSn1SbeRL2wlg=)
2: yNyV4cceOnlRqYhPeAllARW73Jw.roa (hash: 8x/01ij81KHBd33TvjxnJ5OVDsgBIBKqbtRkLV2shYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:68:9c:15:a2:ed:16:a6:96:50:cc:12:f6:a9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6762182184488e7f787122a7180997ce8e90d4c
Validity
Not Before: Apr 22 08:00:37 2025 GMT
Not After : Apr 23 08:00:37 2025 GMT
Subject: CN=6d8e5288a536b6f5c49b55507f3ac9072653cbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:17:7a:1c:53:38:0a:e3:9e:80:c5:3d:e7:
51:7b:ec:89:08:08:ed:a6:0c:5c:e3:40:b5:f1:74:
f7:65:5f:2b:8e:69:39:12:96:40:d7:75:59:d5:44:
5d:2c:af:d1:e3:6d:0e:1b:14:4a:30:ef:2c:97:0c:
0d:2b:9f:cb:f1:2b:3b:d7:60:b8:71:5e:7b:97:48:
08:75:68:6e:7c:65:d9:fc:95:81:d8:d0:b3:21:9e:
97:94:c2:e0:6f:42:d8:6a:66:0c:c1:44:22:c3:9a:
19:70:f7:ed:b9:a8:da:66:cd:15:90:20:0b:3b:28:
44:3e:f2:9f:be:30:87:8a:4e:6e:b3:06:47:ce:df:
66:8c:17:f0:ec:8f:9e:b6:86:19:84:0c:fe:f6:72:
bd:6e:16:ac:62:42:6f:53:33:6f:b9:93:e8:24:90:
cc:1c:5d:bc:3d:49:c2:39:d3:32:8c:32:50:ef:57:
c7:ad:37:a1:ae:3b:84:18:0f:38:12:0a:a8:32:6c:
18:ea:6c:4f:1f:ec:a4:e8:c3:52:66:7b:3e:b4:e1:
46:dd:4b:48:f6:d6:68:bb:d1:0f:22:b4:c4:e5:62:
1b:3e:19:7c:d8:bb:c8:9f:cb:69:1f:a4:00:3f:30:
4f:67:a9:92:62:9e:21:99:35:cf:b1:74:49:bc:da:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8E:52:88:A5:36:B6:F5:C4:9B:55:50:7F:3A:C9:07:26:53:CB:DC
X509v3 Authority Key Identifier:
keyid:A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:5c:d0:38:83:58:15:37:be:05:1d:75:3b:e1:07:01:b8:0d:
2a:b8:61:91:32:8c:0d:91:8c:21:d7:1d:6c:f9:fb:26:d9:ae:
5a:07:96:4a:eb:e6:bd:7b:18:95:b7:79:d0:49:e2:e7:af:bb:
0f:6e:c8:0d:1c:3e:c6:15:ca:68:30:1e:25:ce:ac:ac:3e:22:
c3:d7:42:af:cf:e7:86:eb:50:00:4d:4f:20:a2:2e:4e:0f:74:
00:22:f9:2b:b4:2e:8e:2a:b4:24:e0:e2:7d:e7:d3:5c:83:7f:
da:c6:a9:9b:d3:d0:dc:ff:fb:ef:66:c1:86:ed:e4:a3:77:9d:
77:eb:a6:90:18:cc:42:61:a9:64:57:ed:8c:a7:e3:f8:8d:94:
33:2b:bc:6c:c5:ef:34:6a:84:82:9c:80:ea:0d:1b:3a:80:0e:
73:ea:d4:08:f2:6c:0c:33:46:90:d8:ac:20:8e:fa:60:da:15:
05:aa:55:10:e7:59:0d:36:c4:44:78:cd:7d:b5:31:ed:21:a9:
bc:30:74:ec:9c:b6:79:c6:8d:82:26:ee:9d:31:ad:c6:0b:ba:
20:0c:dd:34:6b:89:31:61:75:05:2b:3e:a6:9b:d8:7e:e6:03:
d7:76:03:db:61:9f:d9:12:af:73:11:fc:cf:97:65:a6:3e:18:
07:aa:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:58:36 2025 by rpki-client