Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File: pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier: PWz6whwDgg/N8ASu53MECHy1onY930j3gp/Am017lwQ=
Subject key identifier: 88:62:CB:A1:09:D7:44:0B:B4:30:E1:0A:7C:C0:41:5F:49:A1:F7:1B
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 01964EFE871B15060605D43A444A73DB45FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number: 0BCB
Signing time: Sat 19 Apr 2025 17:00:25 +0000
Manifest this update: Sat 19 Apr 2025 17:00:25 +0000
Manifest next update: Sun 20 Apr 2025 17:00:25 +0000
Files and hashes: 1: c2KmzgC2E8wnyMl3ET7bbXtsl28.roa (hash: iCu/CgeKq6j6xvBOhyPWL0bUM1p4HmortGMzXWFLmpc=)
2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: gJcpcNEAzCLlVeMLnY7KfrIDbuGvWVwHetsovpmB04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:87:1b:15:06:06:05:d4:3a:44:4a:73:db:45:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: Apr 19 17:00:25 2025 GMT
Not After : Apr 20 17:00:25 2025 GMT
Subject: CN=8862cba109d7440bb430e10a7cc0415f49a1f71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:1c:da:db:49:3f:e9:19:91:7a:08:8e:b7:
01:53:be:d5:98:0e:26:84:ea:e7:82:17:96:5b:42:
9b:54:b4:b3:0c:ec:a0:0b:cd:5a:2d:c9:51:71:9f:
c9:05:58:20:68:d9:cd:a7:b5:e5:d8:6b:95:52:e0:
5e:10:c0:d9:27:35:2a:0e:ab:0a:79:52:27:c2:6a:
01:a6:2c:a4:9e:d8:0f:42:a2:6b:b2:f5:0b:5c:af:
0f:34:ff:59:f5:0f:bc:62:f4:2f:e3:2b:81:46:69:
cc:d7:ff:90:3e:ac:3f:03:2c:26:59:ab:33:c8:51:
03:46:99:8d:84:03:07:5e:d5:18:76:9e:e9:4f:bf:
b5:b2:3a:d1:ec:e6:2d:8c:9a:59:d3:1f:17:c3:dc:
70:2a:c9:4f:d7:3b:ba:b7:66:01:e2:95:da:1e:dc:
8e:8d:30:2d:fd:34:93:b4:0f:67:18:80:e3:49:a5:
93:cc:ba:18:32:7e:df:e0:e3:2e:a1:0f:d0:9c:be:
96:28:6d:46:e8:b1:bc:f9:bc:cc:4e:c3:f0:46:47:
b4:d1:92:07:52:dd:16:35:af:d8:de:ed:f0:19:47:
4e:17:d1:db:0c:d6:93:63:22:ff:62:77:fb:7a:98:
be:21:73:4a:cb:f2:1f:1e:f0:37:e6:d7:f4:04:7c:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:62:CB:A1:09:D7:44:0B:B4:30:E1:0A:7C:C0:41:5F:49:A1:F7:1B
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:17:d7:20:62:59:2f:8d:65:8b:c2:d3:57:d2:3f:8d:ef:f8:
3c:3f:83:4e:d3:3a:7d:d1:5e:7f:c7:ed:74:b2:4c:c6:33:b6:
84:00:7e:c5:a6:d5:8a:7f:12:16:a2:fd:0a:9d:1d:e9:1f:0a:
87:2c:a4:42:04:0e:e1:78:ff:7a:69:e7:4e:0b:10:ff:83:6e:
b2:5f:1e:b4:f7:6c:6e:65:ef:92:c5:c1:ed:35:a3:80:52:4a:
26:a1:ba:d1:df:06:2a:67:0c:8e:70:a3:d7:35:4d:be:ba:98:
22:d6:70:9a:e4:5f:07:4f:03:03:15:d5:a6:0b:4f:e9:c2:a1:
c4:77:2a:ed:58:94:62:c2:38:e4:90:ae:84:9a:b1:89:98:55:
82:22:04:d5:c4:e8:ad:70:33:ad:7d:a5:62:61:61:da:fa:65:
b1:81:b2:fb:db:b5:56:fb:da:d5:58:28:d0:b1:23:47:a1:9c:
40:c9:55:96:11:b8:1b:dd:6a:62:85:80:1c:b5:97:6f:c6:0a:
41:b0:98:7d:04:ee:8b:c1:9f:61:93:33:7f:e3:37:d3:d7:d4:
9b:e9:55:e2:e4:07:cf:b8:2d:f3:15:ee:39:68:88:f7:26:31:
2e:06:1e:9c:bd:f2:db:17:58:9e:99:eb:1c:26:77:2c:f4:5b:
11:d7:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:56 2025 by rpki-client