Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: cjGXgw+zBj9sqKmNK9QZGWHKsa4MYbklraBxOqy1IX8=
Subject key identifier: 88:7B:8F:FF:52:6B:70:21:A3:18:35:30:6D:76:36:AA:7B:55:BE:11
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 01963F1DED627E7200ED670C43E24D66BBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 15:00:47 +0000
Manifest this update: Wed 16 Apr 2025 15:00:47 +0000
Manifest next update: Thu 17 Apr 2025 15:00:47 +0000
Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: Rt7L7A8/QV2o9/G+NDHJ3/8rhV7QoDafh11IDmutPDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:ed:62:7e:72:00:ed:67:0c:43:e2:4d:66:bb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Apr 16 15:00:47 2025 GMT
Not After : Apr 17 15:00:47 2025 GMT
Subject: CN=887b8fff526b7021a31835306d7636aa7b55be11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:7a:69:bf:20:46:4b:b0:57:b8:9e:e8:12:
e4:0e:43:74:47:45:b2:af:43:72:ee:fb:d2:33:cf:
df:7c:d8:c6:87:71:1e:b2:78:e9:50:06:09:c4:7a:
6f:5d:b8:8e:b7:b8:63:db:f9:dd:ae:f8:38:6f:6e:
70:8b:72:1f:f2:a2:30:26:7c:b4:0a:5a:c0:1c:47:
8e:32:af:00:3b:a4:76:23:c5:c8:49:81:69:a9:17:
cd:8b:28:19:64:f1:9d:00:0d:e0:9b:2c:20:fc:84:
a1:64:95:b9:12:39:19:33:c7:cf:e4:86:18:ce:1d:
d9:bf:5b:e1:89:0a:1a:60:83:eb:10:0c:6b:94:2a:
87:42:11:84:8e:ba:e4:97:d5:a9:7a:02:8c:28:3c:
fe:ec:8d:1e:86:9b:c6:9a:9e:df:10:b6:04:7d:48:
36:a4:45:b7:e5:06:41:31:44:10:8c:04:52:d3:46:
5f:58:92:b4:3c:16:57:96:42:c2:c6:12:a9:38:ea:
9e:56:73:73:fb:03:b6:e0:34:cc:1f:f1:60:3e:58:
e3:76:b8:c4:6b:72:75:8c:df:4a:9c:07:40:54:c9:
d9:e1:25:76:a5:c5:b3:39:a0:11:0a:1d:c1:d0:9d:
95:27:a2:93:97:24:69:99:a4:71:ac:24:b6:4a:18:
df:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7B:8F:FF:52:6B:70:21:A3:18:35:30:6D:76:36:AA:7B:55:BE:11
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:31:e4:9a:e5:d9:1d:8e:c8:c9:79:1e:2a:39:f9:a2:ba:dc:
1b:84:ed:be:e2:eb:f6:35:45:79:71:85:bc:b2:6e:c1:11:33:
12:b8:eb:0e:0d:ec:82:73:da:dd:84:fd:fc:d1:e6:95:85:73:
07:f0:7e:25:b8:aa:d8:75:96:e9:e5:31:cf:89:ac:cf:6c:3e:
a3:8a:53:b4:66:86:ab:f4:3b:3a:2f:81:01:c8:6a:26:94:13:
96:3f:23:49:60:2a:b1:23:fb:6c:f0:7e:b8:b2:96:cd:3e:c4:
b7:76:8c:53:dc:7e:b5:7c:46:12:60:49:b1:2f:d8:81:20:20:
8d:bc:a7:34:83:3d:2f:70:21:54:59:b5:c3:ed:b9:e5:49:ba:
66:be:fd:ad:dd:7f:2e:7e:73:aa:21:a1:c0:e5:8f:3c:f2:b1:
e3:5d:3c:e8:bf:e7:9b:2d:0d:a1:73:94:66:db:09:66:85:7b:
d6:b3:66:b5:41:84:76:dc:32:b1:4b:31:6f:71:77:3d:61:25:
99:17:7d:68:af:13:8e:9b:2a:62:bf:f0:ae:14:87:02:3b:a3:
1f:9e:85:81:88:04:78:30:5d:f1:cb:fc:d3:c0:dc:24:03:7a:
e6:9f:9c:15:fa:eb:5f:a5:24:11:1c:4b:5e:b4:f9:d6:83:5d:
bc:2c:da:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:36 2025 by rpki-client