Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier: bKu3ZcGet3f//e7o70pACeiNsxlvI3EuYBc76AE+tjY=
Subject key identifier: 45:A4:E4:C2:13:7A:97:DB:F6:76:17:7E:E4:37:A6:C8:14:9B:B2:F7
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 01963F550CD76611FEBD0FF9C2FBAC6DB6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number: 084D
Signing time: Wed 16 Apr 2025 16:01:00 +0000
Manifest this update: Wed 16 Apr 2025 16:01:00 +0000
Manifest next update: Thu 17 Apr 2025 16:01:00 +0000
Files and hashes: 1: SY81gJpFL3O5UNAf48JLyqIodXE.roa (hash: jLBfqqRL2Al9+uGkQb3qfdiObpqqeOZguvx4px0RKv8=)
2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: OZXFBolH1hcIYd/6Al9l5Ybf85BfV03im8ysARmvTsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:55:0c:d7:66:11:fe:bd:0f:f9:c2:fb:ac:6d:b6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Apr 16 16:01:00 2025 GMT
Not After : Apr 17 16:01:00 2025 GMT
Subject: CN=45a4e4c2137a97dbf676177ee437a6c8149bb2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:75:2e:4f:65:ff:2c:35:22:98:a6:bd:35:
61:b1:8a:04:66:ea:5b:eb:42:a1:72:c6:de:dc:04:
c2:9c:28:ad:d9:05:16:e4:02:28:84:64:2d:4d:63:
58:2a:95:10:40:7e:29:cf:8a:6e:c3:eb:d2:bf:43:
cd:57:dc:2c:c6:63:d3:d4:ab:eb:47:4b:38:ac:c6:
9e:85:0b:b5:ce:a4:57:69:b8:4d:36:1a:f2:03:fb:
08:e0:f9:b6:b9:50:59:26:86:31:66:51:a3:c4:e9:
b6:5b:62:f6:40:25:e1:df:d2:b3:34:39:e9:f5:78:
b7:d0:23:32:6a:1b:01:35:38:fe:ed:e1:0e:bd:5d:
8f:b4:48:df:58:85:05:8c:e2:47:ac:ce:65:4a:41:
92:e9:3f:78:b1:e0:a3:60:1d:9f:48:0b:57:0d:6e:
f1:72:df:4e:24:08:9e:93:31:a6:ff:42:04:9b:ce:
d8:88:a0:52:88:df:db:73:1a:2c:d2:f9:a3:e6:46:
42:89:6b:64:1b:d5:f8:7a:ad:78:17:66:af:7d:6a:
35:72:31:a4:b3:22:a4:bf:38:b0:7f:91:67:0b:ae:
13:37:e3:0c:fb:cd:34:7f:95:4d:a8:fe:66:f6:29:
92:df:ff:58:7e:6f:8c:3e:45:53:e6:51:02:43:b2:
b8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A4:E4:C2:13:7A:97:DB:F6:76:17:7E:E4:37:A6:C8:14:9B:B2:F7
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:87:e1:ad:2c:10:e1:de:c2:89:3e:fa:d8:51:8f:c2:cb:a4:
87:05:c0:bc:be:44:8d:fa:d9:48:d7:b7:eb:e9:2e:fa:d0:a8:
20:96:46:0f:63:20:04:58:22:37:c4:ca:52:89:7b:eb:78:9f:
77:c7:b9:8e:bb:a2:db:44:05:62:d1:24:26:f9:84:30:45:f3:
ce:08:ba:38:51:30:83:7f:c4:31:13:c3:f6:16:b7:a3:49:05:
ac:60:84:24:99:2e:b0:3d:ad:cc:be:74:a5:c2:28:16:6c:e6:
42:81:b0:b2:73:2a:bb:d1:aa:a1:e0:59:9a:58:08:d6:9a:67:
ee:14:9e:97:30:a1:8f:44:94:55:a7:8c:99:6a:0a:79:ca:7e:
1a:8c:c1:60:74:e0:0c:9f:7e:f7:2e:0c:cc:af:cd:82:0d:8e:
72:c0:46:9c:30:7c:f4:e1:ac:95:cb:a9:84:78:48:3f:4d:09:
c7:bf:89:98:86:5d:a4:1b:e6:7f:2a:75:9e:a7:1d:47:a4:ac:
3d:2f:30:0d:29:02:d8:31:9a:4c:a9:28:c6:b4:36:aa:3b:31:
4b:74:b0:4f:09:66:16:cc:08:d6:31:72:c2:6f:4b:89:2c:c6:
ac:24:9a:cf:20:23:39:39:07:64:66:6a:d7:1e:78:b4:1a:33:
24:6c:6b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:47:07 2025 by rpki-client