Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: +nJz3/k869yEt48QQyQc8IaGPiRaBJbA9pXwyWmLm/A=
Subject key identifier: B5:EC:69:68:62:1C:6B:09:79:A0:7A:FB:6E:A1:F7:E0:EE:06:EA:0A
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 01961EEE49DCCF0459470F8503C81CE66715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 14E5
Signing time: Thu 10 Apr 2025 09:00:55 +0000
Manifest this update: Thu 10 Apr 2025 09:00:55 +0000
Manifest next update: Fri 11 Apr 2025 09:00:55 +0000
Files and hashes: 1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: AMV/ZepOvVuI9V7NmGHbr0abkjlMhKt8Z5sB/sGNjlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:ee:49:dc:cf:04:59:47:0f:85:03:c8:1c:e6:67:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Apr 10 09:00:55 2025 GMT
Not After : Apr 11 09:00:55 2025 GMT
Subject: CN=b5ec6968621c6b0979a07afb6ea1f7e0ee06ea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:91:ff:cd:05:c5:6f:42:db:f5:69:77:45:
e1:14:5a:09:ba:8f:05:cc:19:c3:f6:53:92:53:0a:
ef:b6:ad:3e:d4:cd:77:d2:b8:c9:9a:f7:b6:7b:ff:
93:74:a0:99:88:38:56:25:b1:d2:3e:7c:f9:f1:48:
d8:1b:12:12:26:1c:73:4e:c9:68:ee:6d:05:95:5f:
b4:f2:7e:e2:b2:87:bc:6a:29:42:e8:34:89:c9:e4:
d1:fa:8e:6f:bb:a5:92:04:f3:75:45:ff:a3:8d:1a:
0a:70:f7:98:fc:2f:09:ad:10:ef:00:17:ad:86:44:
3e:39:55:e3:fd:aa:34:ce:c3:20:76:c6:fe:69:29:
e6:03:a2:1e:1e:9b:d7:18:06:64:46:9d:4d:e0:0c:
d0:ad:cd:00:bb:09:cc:fe:04:a1:0f:fd:42:63:45:
c4:98:14:d6:12:cf:bb:c3:21:b9:4f:27:9d:19:5d:
01:a5:75:d6:07:09:31:e5:6f:db:d6:16:03:3a:ea:
ac:ab:56:ab:c2:c7:04:01:19:dd:54:cc:96:36:a4:
58:4e:d1:ee:33:ea:a3:32:c7:1f:c7:3a:8e:d9:00:
7b:bc:8d:c2:4e:cf:bd:67:8b:90:6f:ce:48:50:40:
bc:1a:c2:67:d6:d5:0b:38:41:82:15:be:1b:90:e1:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EC:69:68:62:1C:6B:09:79:A0:7A:FB:6E:A1:F7:E0:EE:06:EA:0A
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c8:a4:be:1c:69:2e:58:28:fd:03:d0:04:cc:1d:40:cf:06:
6d:9f:fd:43:4f:9e:1b:8b:13:94:71:e9:54:24:b9:a6:43:a5:
3f:fd:f1:c6:df:9e:be:bc:02:25:cb:2f:40:6b:81:fb:33:3b:
05:47:07:88:73:27:10:8b:35:af:27:0a:71:82:d3:c3:5b:7a:
f5:36:15:aa:a1:29:19:14:11:38:27:b6:83:00:3b:50:1e:04:
0b:aa:63:73:9f:70:0a:8d:89:a9:88:54:26:04:23:4e:f3:21:
f4:04:2c:53:ec:4f:45:c3:85:15:a7:d9:95:07:eb:91:af:2e:
b5:42:1c:c7:b3:42:48:2e:9f:62:b5:cc:07:f9:78:dc:ca:54:
14:d5:8b:01:27:15:65:5b:1b:c4:df:16:38:35:6f:68:d3:7a:
68:e1:99:31:b8:2d:f3:a9:a2:01:48:26:87:cc:82:98:f9:ec:
e2:75:e9:bb:82:71:f9:3e:e0:c3:90:aa:71:3e:72:b1:b4:95:
2c:99:23:fa:bf:1d:ca:5d:ce:1c:34:5b:4c:6c:61:d9:4d:73:
45:7d:fc:49:43:f4:27:a3:6f:f7:56:d2:6e:1c:92:1b:9c:1c:
57:2e:bb:e7:bb:39:16:ae:0f:7a:38:f5:22:5e:09:52:45:36:
d6:7a:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:11:09 2025 by rpki-client