Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: RIj2bgvofOPODFVKXZzIhML87gnA/MVPVkQccZz5yTI=
Subject key identifier: AB:67:C0:94:71:CD:32:B1:28:9A:8F:29:33:19:2A:E0:FE:18:C5:E4
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019629A91FF67361F33520D21FE51A1A41A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 14E7
Signing time: Sat 12 Apr 2025 11:01:11 +0000
Manifest this update: Sat 12 Apr 2025 11:01:11 +0000
Manifest next update: Sun 13 Apr 2025 11:01:11 +0000
Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: 7YtqEskkMQy0+8Cgke/8u8LMJahV3V9A8wqcKvHLlqw=)
2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:a9:1f:f6:73:61:f3:35:20:d2:1f:e5:1a:1a:41:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Apr 12 11:01:11 2025 GMT
Not After : Apr 13 11:01:11 2025 GMT
Subject: CN=ab67c09471cd32b1289a8f2933192ae0fe18c5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6a:90:18:af:3f:2a:c0:18:d3:06:c7:cf:3e:
e2:dd:bf:75:7a:1c:12:ab:ec:d0:fb:06:3f:20:4b:
3b:65:48:b5:57:58:ba:1b:7c:3e:77:fa:0a:08:21:
aa:67:1a:0f:f6:4d:d8:3e:9d:dd:f0:0b:c6:6c:eb:
17:49:8e:f5:d5:c9:f5:76:66:a2:fa:d0:d4:34:da:
d3:b5:aa:38:16:c0:63:df:7e:4c:eb:7c:da:eb:8c:
b3:51:64:30:13:d4:1a:46:5b:c4:37:17:15:1f:5c:
a0:a8:ba:2c:29:3b:71:e2:33:3f:f3:56:82:6f:e2:
45:c1:ff:d3:dc:a8:ec:5b:6f:f6:3a:44:ec:4e:b4:
65:4f:2c:9a:76:c9:75:48:b2:d5:1f:24:eb:8d:5c:
be:2a:5d:61:7f:b4:63:7b:82:15:25:a4:c8:83:33:
b2:36:82:4d:35:dc:f8:38:c9:f1:71:b3:95:c6:0d:
fb:5d:f1:4b:31:4f:75:be:fc:d1:c1:2e:ef:8d:27:
60:32:87:62:8e:aa:9a:0c:b9:c2:d5:e6:1d:54:0a:
3d:4b:96:ac:52:11:91:24:f7:d8:0a:5c:1d:31:4c:
01:ae:08:5f:bb:3b:7e:b8:e3:e9:24:84:32:49:51:
d5:98:14:e4:ef:16:9c:c2:35:8b:11:63:9a:02:12:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:67:C0:94:71:CD:32:B1:28:9A:8F:29:33:19:2A:E0:FE:18:C5:E4
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6e:04:5d:e8:a5:84:39:69:f4:b2:bf:bb:1c:f7:7e:8f:a2:
6b:e0:68:9c:54:54:11:d5:6d:c1:fa:db:b2:f7:0c:e8:8e:e2:
f9:b4:55:48:e4:df:ca:62:ff:99:67:5e:6e:40:26:7e:d5:f6:
02:55:66:86:0d:47:aa:05:00:93:a9:31:49:82:46:33:42:69:
2d:dd:b9:a3:f5:b4:f7:dd:51:32:37:c9:0f:2c:f3:f1:83:e3:
67:ae:b7:09:6f:e1:ad:b3:6f:c7:94:45:81:0e:18:56:51:d5:
46:8f:07:8d:af:5d:80:a5:fd:eb:e4:54:2d:29:6f:95:ef:0f:
26:9d:eb:c5:00:bc:20:cc:fb:4c:ac:14:91:84:e0:37:53:fa:
dc:38:dc:aa:4f:51:ea:72:5a:f5:f9:36:0a:dd:2b:a2:d7:e1:
3a:95:8b:48:41:09:a0:31:48:63:5f:ad:1f:b8:e9:ed:9d:6e:
77:8d:02:97:a1:6d:ee:3f:4e:7e:d2:e3:97:29:a4:e4:9e:1d:
3b:48:6f:64:f4:7a:a4:23:b5:cf:e5:23:3e:b5:d7:8a:0c:f4:
4d:2d:c1:a5:bb:2a:32:64:5e:1f:66:96:65:81:1d:5d:c9:b0:
3b:e8:7f:b7:82:3b:56:f7:ae:20:9e:6c:5e:c4:9c:76:91:3e:
08:cf:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:14:46 2025 by rpki-client