Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: 9xMobsjac+75KLe3gQUiJ7usYqhzc8hQ+thWOZgimN0=
Subject key identifier: 39:2C:E2:F1:5B:4A:3B:46:E4:37:FD:4B:9A:E5:8E:24:62:4C:AA:52
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 01964F6CCEFE0153246B178FE0EBAED6BAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 14A8
Signing time: Sat 19 Apr 2025 19:00:52 +0000
Manifest this update: Sat 19 Apr 2025 19:00:52 +0000
Manifest next update: Sun 20 Apr 2025 19:00:52 +0000
Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=)
2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: w/Ac309QV8zOuvkiEMBby7deY46+qvCBLX2rfXRW9Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:ce:fe:01:53:24:6b:17:8f:e0:eb:ae:d6:ba:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Apr 19 19:00:52 2025 GMT
Not After : Apr 20 19:00:52 2025 GMT
Subject: CN=392ce2f15b4a3b46e437fd4b9ae58e24624caa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:17:c5:09:0e:1c:28:77:b8:20:55:2b:b6:
67:3b:fb:48:0f:68:26:6c:32:96:bc:68:23:fe:04:
12:c2:8f:ca:0b:22:53:84:0c:1c:6d:cc:24:41:d5:
89:bf:4c:33:12:1d:91:48:cd:8c:7f:b9:b8:7f:69:
84:21:31:9b:63:34:0c:6a:f3:df:39:98:f6:40:db:
da:ea:cd:60:e6:cc:ef:0c:8f:92:50:55:87:76:f8:
c5:e5:bd:11:76:0e:de:5d:81:7c:0a:7c:92:32:b1:
ca:ed:28:67:7f:dc:61:c1:b2:9e:b5:55:41:30:29:
80:fc:be:51:88:50:d9:f6:64:e7:74:f8:0d:12:3e:
33:bf:45:93:a8:ad:4c:bb:e6:ef:d1:c4:7e:fd:58:
ea:bb:7a:4b:05:61:8d:db:6b:09:ba:d6:89:cc:55:
36:0e:f6:08:7b:4d:93:64:d4:6a:7f:48:03:20:55:
55:ca:01:b8:8d:83:b5:cc:90:cc:30:2b:23:af:c5:
69:c1:8e:98:3b:2e:a9:74:0d:2a:1d:08:d1:46:c6:
3d:ee:a7:a6:78:f7:f9:ab:14:ce:0c:84:5c:87:19:
6c:a8:d5:66:40:1a:d8:ce:1d:d4:81:9c:15:47:0b:
73:1a:1b:9b:0e:c5:fa:92:50:b5:aa:12:c5:bb:10:
0e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2C:E2:F1:5B:4A:3B:46:E4:37:FD:4B:9A:E5:8E:24:62:4C:AA:52
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e7:1b:4f:a8:50:e2:2a:a9:10:60:9d:2d:0f:29:4f:f7:19:
fb:08:71:44:b2:0b:9e:9d:49:87:22:9f:6c:7f:90:4f:68:40:
68:70:da:b7:91:f7:90:b9:fc:54:03:f7:31:42:fe:39:a8:50:
71:90:07:46:c5:39:e3:3b:7f:4a:d5:69:8b:6a:85:fa:0a:31:
5f:bd:0d:0e:bd:74:15:62:f4:2f:0c:a0:7f:f3:24:6c:43:8d:
e8:ad:9f:a7:d5:b6:d7:a2:6c:e9:85:68:ba:d2:aa:f1:55:71:
9f:2c:7c:ed:18:a4:fb:7e:f6:bb:40:38:0f:89:73:7f:a3:1c:
13:87:35:f8:92:58:30:86:5b:7e:6f:c5:dd:b2:6d:05:5f:c1:
31:95:fd:4e:6a:a6:f3:a5:c6:16:6c:6f:de:bb:57:c7:a7:80:
95:b4:a4:f1:40:5c:81:07:ac:c2:87:5b:52:75:ab:95:a2:f8:
19:32:28:66:b9:97:44:14:d9:ef:31:ec:f2:e0:2d:5b:f4:d9:
4c:32:75:e4:3c:ed:80:82:49:96:78:26:db:42:d0:1e:50:4e:
24:31:80:36:6d:b4:95:36:fa:14:52:b7:85:ac:4a:e0:17:de:
5f:0d:89:7a:71:e6:d6:f6:7d:c6:1d:c1:9a:36:56:c8:30:82:
91:2c:97:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:40 2025 by rpki-client