Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File: pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier: wKu2lckxJUc9McjVDmIj6hEktVGHSaLtcjFTt2KddLI=
Subject key identifier: F7:E0:27:7E:27:6A:AF:5A:9F:6A:C3:E1:E3:BD:CD:57:DA:07:3A:89
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer: /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial: 0196545C37A02F084D3A510825719AFF6205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number: 13B5
Signing time: Sun 20 Apr 2025 18:00:51 +0000
Manifest this update: Sun 20 Apr 2025 18:00:51 +0000
Manifest next update: Mon 21 Apr 2025 18:00:51 +0000
Files and hashes: 1: VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (hash: fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=)
2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: YwuRM3PAR73hY6uk32a+zrUf+2PPD4pC4fs384XLk9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:37:a0:2f:08:4d:3a:51:08:25:71:9a:ff:62:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Validity
Not Before: Apr 20 18:00:51 2025 GMT
Not After : Apr 21 18:00:51 2025 GMT
Subject: CN=f7e0277e276aaf5a9f6ac3e1e3bdcd57da073a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:2b:96:8a:ba:a7:fd:34:2b:13:73:f0:bb:
1b:f9:86:a5:7b:da:35:8e:b4:d9:70:99:af:f7:dc:
5c:cf:a1:9f:e2:90:f6:aa:41:2d:d3:9e:99:ba:56:
ed:e4:7c:93:6f:46:d9:34:55:a4:fa:b1:c6:16:f5:
5b:ca:77:4a:39:6c:2a:5c:db:50:24:94:71:96:c6:
ef:ae:a2:15:73:4a:4e:52:a3:aa:4d:4d:3a:2b:9d:
96:70:a1:13:d0:97:ce:d1:43:7e:77:ae:90:09:93:
8e:19:7e:23:1f:57:6c:d1:95:2e:82:bc:d7:33:14:
38:16:c8:d0:c4:57:81:22:29:87:f2:e7:ab:c2:39:
6f:bc:6d:12:30:1b:d3:59:36:62:fb:1d:1d:03:72:
21:f1:8e:62:4b:92:d6:63:ae:24:9c:e2:83:c1:92:
60:73:b5:9a:25:1a:bb:c7:fb:cf:5f:a5:64:f3:80:
b2:d9:2a:0e:1e:29:be:b6:11:6f:cc:21:ba:1d:e4:
b3:a7:90:eb:41:fa:21:48:68:c0:39:c7:6f:97:01:
a7:fc:c9:57:89:81:2e:25:28:41:b1:d6:c4:55:09:
96:03:9e:10:f7:88:a5:bb:f7:ea:55:af:f8:92:ee:
44:0d:dd:7b:84:e2:c3:23:b2:43:b7:43:c9:ce:18:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E0:27:7E:27:6A:AF:5A:9F:6A:C3:E1:E3:BD:CD:57:DA:07:3A:89
X509v3 Authority Key Identifier:
keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4d:00:77:2e:47:f0:89:50:ae:de:44:54:b2:82:84:f0:20:
c8:2a:54:0f:fc:d0:ff:45:6a:f3:dc:a9:81:38:23:fd:24:2d:
5d:52:30:e5:80:7e:9d:2d:8d:1e:5b:c4:10:37:62:01:9b:8b:
93:c2:7e:82:ec:72:2e:9e:3d:f0:aa:61:87:0b:ca:a3:ce:70:
86:38:5f:3c:ba:f3:33:1a:e9:5c:06:25:38:8e:d7:85:87:a0:
78:6d:94:82:3f:cc:64:6d:41:45:96:4b:d0:3d:2d:33:2f:91:
dc:e4:d1:8b:11:be:e3:9f:3b:07:a5:8a:31:1a:84:59:df:44:
99:26:aa:55:b9:a9:a8:83:f3:48:2b:ef:3b:89:89:8b:fb:27:
d1:1c:12:79:39:4e:56:ee:25:2c:99:f4:37:b1:ae:58:c2:de:
15:ca:c4:b8:e4:9b:7a:a2:e4:db:3e:b6:0b:d8:86:8c:58:62:
b3:26:ea:79:da:f3:a4:47:1f:3a:5c:f8:b3:d6:24:64:8f:ab:
d0:79:f5:67:1e:a4:72:6f:0e:60:53:b8:d4:73:8d:26:94:40:
e1:36:7d:e5:24:97:5d:7b:bd:35:0e:f3:9d:21:c7:5e:91:48:
b3:c9:3b:69:17:39:90:12:8b:d9:60:31:77:b9:00:fa:ea:34:
ad:4f:b8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:42 2025 by rpki-client