
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: 0CHWHXtQpY7mjHkXoi5azvJNbYQas2EsXQl5HEa1GWw=
Subject key identifier: C8:47:F3:A8:3F:59:08:2F:72:BD:52:E9:B4:74:D2:80:B2:F5:71:8D
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 019649D83CABC27B49770A13304AE5B7B9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 0273
Signing time: Fri 18 Apr 2025 17:00:30 +0000
Manifest this update: Fri 18 Apr 2025 17:00:30 +0000
Manifest next update: Sat 19 Apr 2025 17:00:30 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: YYNVD6WTZ79u5Bd+VL3de1SoYWkFTLzxp9mS9zWs3W8=)
2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:3c:ab:c2:7b:49:77:0a:13:30:4a:e5:b7:b9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Apr 18 17:00:30 2025 GMT
Not After : Apr 19 17:00:30 2025 GMT
Subject: CN=c847f3a83f59082f72bd52e9b474d280b2f5718d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:27:69:bc:4e:ba:ae:b1:5a:11:30:29:5f:
7d:df:30:62:a9:d3:24:08:3d:ca:d4:ad:1f:54:64:
14:14:4c:d2:66:bc:01:0b:d4:d3:09:27:bf:b3:00:
71:c3:4f:4a:e6:cb:b8:2d:60:1d:42:8a:ed:3a:ed:
50:d4:5e:1d:94:61:d0:0e:7d:a6:69:25:da:25:4f:
81:6a:62:ba:02:03:d1:c3:30:62:a1:e6:2c:be:26:
1e:85:77:b5:03:dc:08:87:d2:6a:62:05:cf:b4:ba:
ca:b1:0b:e5:5a:be:5d:50:83:75:f3:80:48:89:da:
b6:0e:09:e3:78:72:2c:52:0d:cd:53:b8:ae:7b:52:
18:09:54:b7:11:c1:f9:c5:e5:f7:ce:13:d3:c3:56:
dc:c6:e8:5a:2e:86:f6:a4:1d:d9:03:b2:fe:2e:a8:
d8:cd:c4:f4:74:21:e7:d4:c3:e8:ad:60:eb:f9:45:
6e:ab:7b:83:2b:da:cd:1e:31:5b:84:c9:69:de:da:
49:ba:68:e6:c9:91:c4:37:33:81:77:8e:72:e0:8d:
59:d7:64:5d:5d:70:e3:4e:35:75:05:2b:ad:c1:fe:
05:82:4e:8d:26:77:c5:cc:b1:8f:28:04:ce:9e:e9:
11:b5:a3:65:ce:d9:d4:d1:0f:04:eb:2f:41:86:4b:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:47:F3:A8:3F:59:08:2F:72:BD:52:E9:B4:74:D2:80:B2:F5:71:8D
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ed:05:19:62:40:da:77:ba:4d:7d:1b:ec:90:6e:a7:d9:8d:
73:49:58:05:19:b2:ea:3a:55:bc:09:d0:fb:c9:71:ff:53:50:
5a:3e:f7:5a:65:67:31:3b:a7:ef:75:2a:2f:ec:30:c9:14:1f:
96:e3:b0:36:4a:61:a4:1e:83:bd:60:69:93:b3:60:ec:81:8c:
45:7e:66:19:80:ac:97:17:ca:1f:ff:35:59:cb:ef:dc:dc:eb:
d3:f1:30:96:f6:f0:68:cd:b6:0d:09:39:86:ec:93:67:66:6d:
06:f5:29:0b:8d:da:8a:e7:80:b6:ce:4b:b7:71:71:71:49:37:
e6:fc:1c:d3:6b:3a:f6:2c:d0:56:55:6b:6f:c5:aa:89:ad:bc:
28:ab:75:e8:f3:f5:d6:74:77:14:d5:63:e0:8c:3a:4d:1e:77:
13:5e:2b:c9:89:c9:f3:c3:fd:96:42:07:ef:31:80:b2:d2:72:
53:b6:3e:6a:24:91:10:b3:16:74:51:9a:65:86:0d:6b:76:fb:
74:76:65:26:bd:b1:9d:8c:1c:03:a6:55:d9:13:d8:09:97:d2:
a2:6b:8d:6e:57:b2:57:e3:1e:48:e6:72:b4:a4:77:36:2c:e5:
ed:42:01:16:2e:98:b3:c2:30:f8:51:f8:2d:a4:cc:9c:87:fa:
91:96:f5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:49 2025 by rpki-client