Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
File: pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json)
Hash identifier: 5L20blTpy+aQLIv3WkY7TJ+A11HsuRyekNNnsmOO5wQ=
Subject key identifier: D4:6A:0A:F7:B4:10:2E:72:EC:48:2E:6D:62:26:F9:EA:35:49:D7:FB
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 0196403091F044B81C9D28AF7256D0BF27E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 20:00:46 +0000
Manifest this update: Wed 16 Apr 2025 20:00:46 +0000
Manifest next update: Thu 17 Apr 2025 20:00:46 +0000
Files and hashes: 1: BFaJClF3p4qT7dCc22lWmwjl7l0.roa (hash: 8kW6E4fmgwFFVui51mNwFwgDzJW114zoN23nienu6x8=)
2: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: JiHZENoTzxynWC2kxOq1LWVG2iOttLfohuE6FT5Q2uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:91:f0:44:b8:1c:9d:28:af:72:56:d0:bf:27:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Apr 16 20:00:46 2025 GMT
Not After : Apr 17 20:00:46 2025 GMT
Subject: CN=d46a0af7b4102e72ec482e6d6226f9ea3549d7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:2b:64:1f:f9:59:d2:b4:58:d4:03:48:b9:
b1:fe:70:83:72:fa:d5:9d:89:50:0d:4c:ad:ff:6a:
da:d1:0e:be:a6:3b:9a:d2:92:c3:78:01:84:db:ff:
70:16:8d:53:36:4c:77:61:24:90:9f:fe:c3:6b:d5:
02:5a:25:7e:f9:23:81:2d:b3:0d:e0:28:aa:23:1b:
cd:8d:c6:e1:04:27:99:01:20:73:12:40:61:37:bb:
01:c0:aa:d6:36:e1:4c:02:44:aa:51:c3:40:4f:e7:
8f:80:aa:87:d2:64:c2:8a:37:d2:67:06:a6:b7:c2:
0d:39:7b:e3:24:d5:16:ff:48:3c:0d:cb:7e:e9:5c:
d0:9c:a2:a0:62:79:87:bb:44:a4:ea:08:bd:23:5c:
48:e2:5b:55:6f:4a:e3:c6:48:4d:49:1c:35:3b:90:
6f:8e:a0:69:58:8a:8c:da:bb:c5:d0:1d:d3:e0:40:
59:93:ad:e2:fd:a4:81:aa:72:17:78:1d:4a:c5:05:
cf:9c:9c:24:85:a4:43:72:d1:54:13:60:a0:0c:61:
5d:a5:71:fb:8b:c0:59:bd:ac:f9:fc:4b:8e:f6:d2:
cb:b5:93:61:7d:71:e6:cd:d8:1d:24:e8:d1:27:59:
9d:53:8a:d7:6f:0d:4c:7e:ca:45:99:86:bb:65:15:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6A:0A:F7:B4:10:2E:72:EC:48:2E:6D:62:26:F9:EA:35:49:D7:FB
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:72:42:46:5b:e3:96:a0:e8:38:58:fc:77:42:7e:b1:45:00:
1e:f0:d5:0a:1b:a9:08:88:e6:e9:12:02:8a:74:3b:68:c8:d9:
cd:93:c8:17:23:69:3c:b0:57:dc:b5:dd:b0:44:ae:ad:f3:f4:
6a:d2:e9:fe:db:69:0f:52:d9:ad:e3:0f:57:5c:a9:7f:9d:71:
31:50:47:ad:be:2c:f2:1d:2a:59:45:2e:54:4e:73:cd:84:b9:
78:96:4c:03:c3:59:73:14:d6:e3:05:43:8d:f2:cd:1f:12:24:
6f:19:9d:84:d1:76:81:e6:67:26:96:77:8a:7f:74:7b:0a:b2:
3a:84:5d:c7:99:75:61:50:f9:13:e6:23:f7:ab:2e:c1:5f:8a:
98:2d:2b:34:f3:bb:42:db:48:8a:9a:3c:92:9e:27:c0:f5:35:
df:60:4e:30:36:05:2c:d8:06:82:24:f4:fa:db:2f:bf:d9:cf:
77:21:e7:fd:b1:76:3c:03:83:99:26:7a:df:84:49:0d:c5:01:
45:9b:cc:3c:aa:1b:33:f7:eb:56:4b:80:42:42:52:17:63:3e:
9d:ca:dc:f3:1c:90:ce:5c:70:62:de:11:e4:34:ad:83:00:3e:
e0:b8:db:c3:db:21:c6:4a:40:c4:76:b6:79:21:7c:bd:04:d1:
a0:91:5f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:21:21 2025 by rpki-client