Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: FRfsw5XRupxdT2jIWj7iWF5pUDEQmb42VA9DSyy7Pi4=
Subject key identifier: A9:05:BA:83:E0:74:DF:47:11:AE:C6:A4:BF:5C:EB:85:21:8C:D2:3D
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 01965312052D738CB927F90C034B1F511543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 05A9
Signing time: Sun 20 Apr 2025 12:00:12 +0000
Manifest this update: Sun 20 Apr 2025 12:00:12 +0000
Manifest next update: Mon 21 Apr 2025 12:00:12 +0000
Files and hashes: 1: nbFO3tETAKU90cGGwpaCKUOKTLY.roa (hash: cquJx46DtG8x6pISzm/UdeY5xz+jlo5riwT4Pb8N/jw=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: 59kt3ctf9TKGACDVJB210o9JVSaeKRGFP7yw0DMN+YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:05:2d:73:8c:b9:27:f9:0c:03:4b:1f:51:15:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Apr 20 12:00:12 2025 GMT
Not After : Apr 21 12:00:12 2025 GMT
Subject: CN=a905ba83e074df4711aec6a4bf5ceb85218cd23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1b:96:b9:29:66:62:9d:de:47:4f:85:7e:44:
e3:50:72:bb:79:e4:cd:93:08:0e:c0:a0:8c:b7:5e:
21:a4:6d:75:e7:c4:8b:a3:d8:d1:f9:0e:07:3f:9e:
53:fc:6d:aa:32:66:cb:69:d9:3d:19:cd:9d:b3:fc:
a1:d2:df:26:2f:41:1f:31:1f:33:6f:ab:38:83:af:
6d:cd:74:24:98:dc:d0:6f:88:3b:11:58:c7:41:30:
db:67:7f:3a:48:e9:b9:bf:40:ca:62:f7:e8:bf:48:
6c:79:f5:0d:4d:65:fd:8f:e9:17:18:94:53:16:b6:
bb:6d:9f:c8:33:5a:b8:4c:a0:14:76:2b:cd:1c:3e:
af:d7:d0:1c:7a:e8:ed:23:45:72:8a:64:c4:59:31:
80:ce:77:a5:03:79:a4:12:eb:83:10:80:f6:43:af:
7b:c0:1c:10:6a:45:24:59:55:a0:6d:d4:dc:de:36:
88:c9:12:c3:9f:a2:06:16:53:93:eb:19:b6:d4:04:
f0:cf:04:e3:4f:78:8c:88:3a:48:a5:0d:81:30:87:
1b:e0:42:20:3d:41:9a:21:ac:07:42:0b:0b:47:96:
73:65:45:b8:69:f3:0b:7e:0b:7f:17:25:99:1b:79:
dd:4f:6a:b3:78:3b:02:f7:48:89:52:1b:39:63:1f:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:05:BA:83:E0:74:DF:47:11:AE:C6:A4:BF:5C:EB:85:21:8C:D2:3D
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:74:77:00:f9:07:f4:57:4f:52:99:51:c9:18:29:6a:d8:37:
02:f1:2e:48:10:e9:2a:88:0b:b9:86:ef:70:ff:6e:58:85:e6:
48:a1:ec:ae:bf:26:dd:ca:e1:48:8f:eb:52:72:7d:a3:84:6c:
ff:3b:9a:7a:d7:c7:b6:21:a1:cc:50:ce:b9:30:ca:0f:7b:da:
37:23:0d:71:78:42:31:d2:ab:72:90:87:2f:2a:d0:26:18:5e:
53:24:9f:ba:ff:67:af:48:11:27:24:31:b1:12:81:f2:cd:15:
bb:27:8c:d3:df:e2:17:30:78:72:50:1c:21:2b:28:af:63:0b:
82:7a:c9:ab:8a:98:2d:63:58:db:33:93:10:a6:76:02:23:cd:
fa:99:ca:0f:6d:5e:c9:dd:51:29:6c:cd:4c:4b:14:00:4d:27:
b8:34:56:f5:46:08:d3:db:e6:e2:d0:72:f6:01:9e:c1:94:8c:
d2:54:c5:7e:6d:6b:a7:ac:f9:39:64:e8:b8:0c:a0:20:2b:70:
e7:b6:cd:db:ef:fa:8b:c1:75:ed:ef:89:68:43:4e:3b:2f:b3:
91:6b:66:55:1c:49:e6:57:e8:1a:86:4e:9b:c2:ef:69:4c:64:
53:b7:ab:b8:d4:4c:4d:dd:43:7a:ce:ac:6c:3b:52:8a:26:53:
7d:46:1b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:19 2025 by rpki-client