Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: hGUAPm7Lelm6fQCq4Yjb2E2qSmJA8YwL/aWKVPy9/1E=
Subject key identifier: 05:C8:0D:62:10:0A:FF:63:4E:AC:D7:E4:5F:92:E7:62:69:FC:1A:32
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 01958F2A6BC2EE7E79AFCD930E71E2DCD5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 11:01:16 +0000
Manifest this update: Thu 13 Mar 2025 11:01:16 +0000
Manifest next update: Fri 14 Mar 2025 11:01:16 +0000
Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: 5/jp1LIBWIvaMFPoj0wZ3zdDRZYSku3RKeY1m1QMFPc=)
2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:6b:c2:ee:7e:79:af:cd:93:0e:71:e2:dc:d5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Mar 13 11:01:16 2025 GMT
Not After : Mar 14 11:01:16 2025 GMT
Subject: CN=05c80d62100aff634eacd7e45f92e76269fc1a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:1e:04:57:e6:3f:2c:ec:3e:01:6d:fe:a2:
d9:10:ff:b1:17:c2:9c:32:91:cd:a7:9d:7e:a3:ee:
49:65:56:63:58:39:81:ce:ba:d5:d4:00:1d:b9:20:
d6:5a:56:76:64:25:02:4b:4b:de:2f:12:5b:c9:f7:
53:3b:c7:23:34:0b:1b:06:b7:b6:33:83:54:8c:50:
d4:f2:05:56:63:af:f5:e8:0e:12:f9:90:42:90:5d:
9c:8a:e9:24:81:4b:8d:01:ed:7f:47:25:6e:de:9e:
c7:9e:02:b4:bd:d7:8d:17:19:31:de:78:7d:5e:ca:
ee:0b:32:96:73:d3:75:02:f5:84:fe:7a:ec:c2:53:
04:28:25:14:ca:dd:cb:c1:ad:7a:03:d1:d1:98:73:
e0:a5:2a:61:ed:ea:77:05:03:37:14:c5:e5:dc:df:
fc:47:39:42:5b:9f:f4:fc:f1:7f:c7:43:9b:66:fa:
0b:c3:51:e7:dd:cf:41:72:98:40:64:93:e3:47:be:
ad:48:e7:bf:ca:34:f6:0c:9d:e2:dc:cb:26:4e:5f:
4a:61:7a:b0:54:8f:6b:69:d7:71:19:a7:be:db:e7:
44:56:ac:d4:6b:40:22:17:80:22:07:ba:a3:28:89:
a7:6a:d5:93:61:49:15:c7:8f:2f:20:06:83:d3:c4:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C8:0D:62:10:0A:FF:63:4E:AC:D7:E4:5F:92:E7:62:69:FC:1A:32
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b9:e7:24:c2:38:5e:da:8e:d4:38:13:76:e2:08:0f:4a:fd:
6b:24:29:db:70:d2:68:d7:9f:10:ab:fb:37:4b:d1:c9:54:af:
82:fc:93:99:ca:b5:7c:79:f8:b3:ca:df:ab:cc:d8:61:63:4d:
fd:ca:de:ce:6e:e1:b4:a4:c8:36:fd:5b:6f:26:7f:de:11:9b:
6a:71:05:0d:a4:7f:d6:98:9a:8c:4e:7f:e1:1d:08:4f:62:63:
9e:fb:c6:89:9d:4c:1d:85:9a:13:56:81:2d:64:e7:d4:9a:44:
98:2d:39:c6:76:e5:0f:bc:57:6b:cf:35:05:54:72:c8:d7:4e:
2c:92:26:c5:39:b9:49:47:49:eb:ec:d8:16:dd:84:7a:b8:0f:
39:81:bf:95:80:4c:9a:b7:93:0e:87:39:59:f6:ce:56:41:32:
ac:5c:2f:46:48:d2:ce:c6:da:27:0b:62:31:f2:5c:08:ff:66:
93:ec:e2:58:4a:57:22:60:eb:0f:4a:e6:8c:a3:ad:9d:34:70:
4f:71:0c:f9:ec:af:69:b2:bb:8f:74:1b:fa:8a:3f:2c:59:e1:
71:f8:ab:89:8e:f0:93:3e:2f:10:35:cd:59:38:57:5c:9b:4a:
49:fa:5d:13:6d:f5:bb:62:81:f8:d4:7a:9b:a5:c1:32:e2:f6:
d8:fd:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:12 2025 by rpki-client