
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier: DI8o7jHorFeyQynGYwGBrED52MYrMHZDUcyCJFhGIDc=
Subject key identifier: 3E:4E:EB:B8:0F:7E:20:90:9B:76:A6:0C:A1:37:16:9F:8F:56:7C:B7
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial: 01963876E545DA1251E0213A68AC6B56681E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number: 07D1
Signing time: Tue 15 Apr 2025 08:00:38 +0000
Manifest this update: Tue 15 Apr 2025 08:00:38 +0000
Manifest next update: Wed 16 Apr 2025 08:00:38 +0000
Files and hashes: 1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=)
2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: JLHA6xDVa+PE91p5HeVxHh/tzzT+rKee1WOBH9UV4zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:76:e5:45:da:12:51:e0:21:3a:68:ac:6b:56:68:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Validity
Not Before: Apr 15 08:00:38 2025 GMT
Not After : Apr 16 08:00:38 2025 GMT
Subject: CN=3e4eebb80f7e20909b76a60ca137169f8f567cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:88:f5:71:d4:7f:11:34:e3:56:cb:91:45:
03:48:98:f7:0c:58:77:86:52:da:4b:7e:19:40:9c:
cf:5c:5b:fb:ab:79:15:89:06:31:f0:89:f0:c3:5e:
56:5a:b1:43:b9:2d:47:73:c2:5d:c9:13:a6:a8:19:
ad:d3:1d:f1:94:13:66:ea:b8:93:6c:f6:6d:27:f1:
cb:e8:9d:8f:3b:ad:85:60:25:6a:04:ec:e3:d8:6e:
1e:b0:f4:74:66:fb:b1:94:88:19:de:3b:f5:0e:df:
bf:8a:2f:d4:ac:03:fa:e9:a0:e2:1d:67:9d:a0:87:
7b:d5:b8:a0:48:a8:59:3c:cd:cb:84:13:f0:d9:c3:
d5:ca:52:f1:a4:43:0a:95:1f:61:e4:8d:ce:87:49:
a8:b0:0e:73:f8:71:9f:96:49:e2:cb:07:de:9a:87:
5f:b7:50:a8:a0:a3:aa:4e:21:61:47:45:b4:3f:88:
19:d3:49:6e:f9:9f:e5:46:97:64:7a:47:d8:33:1c:
cb:4d:de:21:eb:65:3f:8c:2b:89:12:a6:f9:cc:e5:
29:7b:d7:83:ec:c9:04:ad:b6:7b:78:d6:84:e4:35:
85:00:76:2d:19:39:b0:3c:5f:d8:dc:ac:d1:0e:29:
b4:37:6a:c1:da:63:47:ec:9b:e2:5e:54:c7:1b:22:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4E:EB:B8:0F:7E:20:90:9B:76:A6:0C:A1:37:16:9F:8F:56:7C:B7
X509v3 Authority Key Identifier:
keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f4:3a:f7:d3:94:a3:56:86:c2:54:a7:b8:47:95:62:2b:4d:
91:c5:f3:b6:e6:7e:af:ff:93:df:ef:d5:75:9c:e3:2c:8c:71:
1c:90:b6:88:75:ab:24:d5:79:b5:48:07:30:bf:82:cc:0d:0a:
f1:fd:87:79:58:ba:19:e2:11:88:28:a0:fd:88:fc:20:64:6f:
ae:a1:56:1b:56:7f:59:a4:c7:a2:17:06:7a:cb:06:3c:1e:21:
4f:71:76:6d:0a:3a:17:ff:44:25:e8:ff:62:ab:24:0b:7f:fd:
7b:f1:9d:29:4e:33:56:4f:48:a8:e3:f2:ba:42:4d:ec:2a:14:
34:f5:2e:c6:de:44:c3:ea:bf:3f:e1:82:98:97:90:53:7c:40:
03:91:74:27:14:7e:2a:bc:05:fa:7d:f5:bb:db:30:a6:06:df:
fb:04:97:1e:2c:49:80:fc:1e:d0:98:73:f9:e0:c9:5f:8f:a9:
a9:90:fd:74:bf:69:06:a6:09:90:14:24:77:fa:ac:c7:b2:5c:
a2:30:82:46:a4:e5:6f:db:33:e2:73:b2:de:5c:67:eb:84:74:
47:03:b2:45:5f:29:b7:81:1f:22:3a:63:af:5a:15:dd:60:24:
5f:47:09:27:27:9a:06:52:de:4e:32:09:94:0c:94:7d:0c:bf:
40:4f:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:40:24 2025 by rpki-client