Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier: Puo27AjaOTB+GbKtK6YREYSFNmLVAuBGU+3IkosoFmI=
Subject key identifier: 23:8F:8E:5C:A0:DF:67:79:F8:FD:2B:07:EA:F7:7D:26:FE:F1:22:E1
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial: 019642564A9850CB1E893A462FCE06D83F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number: 091D
Signing time: Thu 17 Apr 2025 06:01:13 +0000
Manifest this update: Thu 17 Apr 2025 06:01:13 +0000
Manifest next update: Fri 18 Apr 2025 06:01:13 +0000
Files and hashes: 1: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (hash: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=)
2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: g8QBXBa6unA/Zd5MDkL5vPpzQu/jdq+/OyXJMqkP9mI=)
3: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (hash: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:56:4a:98:50:cb:1e:89:3a:46:2f:ce:06:d8:3f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
Validity
Not Before: Apr 17 06:01:13 2025 GMT
Not After : Apr 18 06:01:13 2025 GMT
Subject: CN=238f8e5ca0df6779f8fd2b07eaf77d26fef122e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:c8:c8:15:43:f0:98:4a:4f:98:e0:e5:2e:
cf:68:c3:66:9f:05:f0:0b:d4:ba:08:d9:e0:4e:6b:
47:90:b0:14:8d:5b:1b:f0:1e:c3:3d:96:4b:aa:f5:
d2:b3:b2:e1:5b:66:cf:48:97:e6:bd:b2:21:2a:77:
32:32:32:b6:67:04:a5:79:5f:68:ef:da:b2:d8:2c:
55:66:2f:90:d4:81:c5:64:45:c0:b9:bc:2b:50:8b:
03:ab:81:88:a2:9c:2f:4f:59:09:6c:aa:77:a3:30:
ab:de:99:8b:02:85:db:97:02:b9:6e:eb:84:29:b1:
f3:52:89:ed:37:d9:d3:fe:ed:b0:b7:c2:a0:32:be:
a5:97:09:16:21:b6:63:fb:de:ef:3f:9c:a1:48:a2:
b2:a5:e1:b7:58:b4:a4:46:35:63:d5:3b:40:e7:76:
fc:50:e0:e1:9d:0b:b8:1a:f7:e2:d3:03:4f:79:ba:
73:35:58:ce:0e:64:f7:4a:65:58:a4:ba:9d:29:d0:
ad:a9:ba:49:14:1d:d1:69:ad:a0:18:79:42:9c:5a:
a2:90:54:9e:34:0c:2f:79:1c:07:76:0d:ec:eb:32:
38:45:c6:11:57:40:7e:35:52:ba:47:11:07:94:9f:
80:3f:88:56:6d:f1:a2:4d:0b:29:94:05:5b:d2:0e:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8F:8E:5C:A0:DF:67:79:F8:FD:2B:07:EA:F7:7D:26:FE:F1:22:E1
X509v3 Authority Key Identifier:
keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:9b:1c:d5:7b:12:4d:17:5d:ed:3c:f8:cc:cd:aa:da:6e:50:
64:a2:b6:5d:d4:1e:70:9d:d5:08:e7:50:7f:e9:e0:2a:02:4d:
dd:37:37:6a:cf:82:65:74:bf:d9:03:ec:e2:2b:27:d5:70:35:
77:88:6e:89:14:d1:a3:44:43:90:0a:0d:08:b3:ca:43:e0:e6:
d9:4c:7d:12:16:50:7b:72:d5:05:06:1a:51:c0:48:03:8b:93:
54:a4:cf:7c:18:d3:c9:6d:8a:63:b4:20:96:86:09:2e:6f:89:
05:c2:56:43:40:e7:bb:82:00:d5:c7:44:3c:a2:74:83:88:1a:
c3:89:8e:a3:bf:02:ef:00:28:a8:b4:ce:d0:85:d1:38:83:7c:
97:88:51:97:95:36:9d:e5:42:ef:f0:b4:70:b2:da:53:ec:64:
6d:b0:8f:3a:54:f4:a5:94:43:88:5d:a2:d2:62:da:ae:1a:5e:
a9:21:cd:16:72:16:48:c0:3d:ad:70:17:3c:2e:b0:d9:f2:3f:
20:1a:37:a7:dc:d0:39:2a:6c:2c:f6:d7:65:de:b1:a2:84:f1:
f4:bb:be:d6:50:2c:50:28:4d:65:af:e3:24:72:79:31:06:1c:
89:69:c7:55:4b:41:1f:a1:22:a3:4d:68:bd:1e:93:34:ef:3f:
e7:d1:c1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:34:35 2025 by rpki-client