Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier: 8ytqpyCrIPhIlgQ6phemUsAQrIdGzSuQ6A8qeaOL0Zo=
Subject key identifier: 01:D9:41:92:65:6D:7F:1D:73:1D:D1:06:E4:CE:68:40:17:58:12:B7
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial: 01958B4DD222C713D7E7F12BA9D93C67E8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number: 1137
Signing time: Wed 12 Mar 2025 17:01:27 +0000
Manifest this update: Wed 12 Mar 2025 17:01:27 +0000
Manifest next update: Thu 13 Mar 2025 17:01:27 +0000
Files and hashes: 1: Hp2ljcULzg53pBCXbKt3KAlFkVw.roa (hash: qsDz5TZedLiWJnxlNWk1Ko36qqmg6+ybGLmJSNA11KU=)
2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: NTbPxKQ1wqYUcLNqZxjDIKIbx9dcVXIlTdhvmH4R1SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:d2:22:c7:13:d7:e7:f1:2b:a9:d9:3c:67:e8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Validity
Not Before: Mar 12 17:01:27 2025 GMT
Not After : Mar 13 17:01:27 2025 GMT
Subject: CN=01d94192656d7f1d731dd106e4ce6840175812b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:c7:6b:2d:85:e5:c6:96:80:94:2c:8a:75:
b4:49:1a:c3:ed:00:6b:e8:59:72:e4:24:67:e6:37:
4b:e2:17:e9:15:29:14:ea:b2:ed:31:3e:05:0b:ef:
7e:fb:5f:0d:36:38:3c:9a:5e:01:d0:58:74:92:29:
e9:d5:80:7e:57:9a:68:b3:01:64:e6:44:04:b2:93:
e4:01:40:17:6f:51:7b:73:d5:74:a8:dd:52:2c:40:
2a:95:86:9b:ce:3c:97:fd:fc:8a:8f:7f:e8:6f:19:
47:9d:59:48:e8:3f:cf:52:39:91:2a:b7:5f:fc:b9:
e2:8b:46:66:0f:b8:4c:d1:0c:5b:09:17:8c:bf:9e:
58:98:38:d8:7b:77:6c:cf:04:30:c4:40:b6:c2:24:
fe:73:ec:e3:6b:cd:b4:f7:0d:32:f3:c7:82:f5:d2:
5d:bc:4d:c0:ec:fe:a4:41:0e:a0:e6:27:14:8a:c3:
c5:04:ce:a7:7d:7e:a6:b7:73:74:e3:5e:8a:8b:01:
5b:8d:b5:85:d9:c0:84:49:b0:ef:69:b1:c3:4c:d4:
14:86:86:ef:85:90:82:d7:a9:09:29:04:be:37:36:
63:09:5e:c8:85:2e:c8:4d:c0:69:8e:25:1c:f0:37:
36:5d:d6:83:4b:40:75:c2:65:29:54:63:4c:f1:dc:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D9:41:92:65:6D:7F:1D:73:1D:D1:06:E4:CE:68:40:17:58:12:B7
X509v3 Authority Key Identifier:
keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d6:d7:d6:35:8b:5a:3f:e1:a6:c8:37:5c:ed:0c:1f:67:9a:
79:c3:dc:4f:43:da:d6:7f:60:a5:d8:31:61:95:87:ca:d0:5f:
62:9c:51:f4:db:11:75:c1:fc:59:06:25:31:b6:f8:26:d9:ac:
29:f1:a9:54:04:28:7d:21:bf:ec:0e:32:a2:54:7d:43:f7:f4:
39:57:a6:22:b1:e6:1b:0a:71:bc:ee:b3:06:e3:c3:c1:f1:fb:
c8:19:5a:46:49:26:23:30:7b:1a:13:9a:2d:05:09:09:4a:4e:
ee:24:ec:32:d1:9a:1e:bf:c6:d5:4c:df:e6:9a:6a:34:cf:38:
63:3a:c2:8c:31:c6:7c:f7:7a:0a:ce:70:10:09:d4:30:d2:ff:
54:4a:2f:44:cf:a1:a4:eb:67:ed:c3:ab:75:0a:56:a5:7c:c5:
4c:96:46:04:ba:f2:70:82:31:ac:b9:e2:f6:d3:72:ad:a2:0e:
f8:0d:5d:5a:8a:5e:ec:e4:a4:2d:f8:f6:5b:6b:bc:bb:76:64:
4d:e2:a5:e4:e1:0a:2f:4f:c7:e5:ca:49:88:85:90:c0:fa:68:
36:89:2d:94:d0:55:58:22:dc:6e:33:1e:0f:47:b2:fd:18:bb:
8b:28:11:14:6e:32:3b:6d:14:b2:bb:48:ca:fe:9e:95:07:2a:
1b:9f:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:20 2025 by rpki-client