Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
File: pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json)
Hash identifier: RAvUlf20INERNNn2LRGvczSOCS7Hw1JZCZENcM4KuMQ=
Subject key identifier: AC:D7:21:10:43:E7:69:F6:29:46:5D:77:CC:FC:AA:CA:42:F8:C5:9C
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Certificate issuer: /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial: 01958BF27F0786DD9207532EFC8EB6163F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
Manifest number: 1498
Signing time: Wed 12 Mar 2025 20:01:20 +0000
Manifest this update: Wed 12 Mar 2025 20:01:20 +0000
Manifest next update: Thu 13 Mar 2025 20:01:20 +0000
Files and hashes: 1: 3slyfZXxVcWO-rhXLBn1z60ShoQ.roa (hash: aD+13qB77l1eWjcaYEDaoeBPF19MIy6v6JQPzBT88zc=)
2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: 1l2auEaGz2+ovMyFtUPj+SlUVu9Ok0/Hsz5wXxqMT7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:7f:07:86:dd:92:07:53:2e:fc:8e:b6:16:3f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Validity
Not Before: Mar 12 20:01:20 2025 GMT
Not After : Mar 13 20:01:20 2025 GMT
Subject: CN=acd7211043e769f629465d77ccfcaaca42f8c59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:12:06:90:27:10:ba:5b:d1:c5:55:ce:59:
b4:09:62:6b:f8:7a:42:96:a8:31:eb:2d:83:83:bc:
c6:a0:7c:1c:b0:3b:4e:c9:f7:c7:ae:1d:a1:a8:5d:
20:11:73:62:5d:0f:c5:c3:97:c4:82:f9:8c:48:d1:
e4:2a:fa:2d:8d:7d:06:d3:f8:5e:4c:37:17:b1:c6:
0f:89:1e:44:0b:b0:77:f3:71:48:13:f3:79:0f:66:
42:16:25:6f:00:b7:62:ec:fd:c7:8c:b8:89:53:40:
a3:9c:e1:1a:4d:6d:7a:28:ca:a0:12:30:37:a8:1e:
1f:e4:7d:08:b5:97:5c:92:71:7e:20:ac:1d:55:b0:
63:0e:6d:20:67:1e:f5:e7:55:35:1f:cf:a4:1e:d9:
9f:b8:03:11:2c:0e:3b:11:35:79:a7:23:dc:5a:ca:
48:e8:72:05:aa:7d:6b:16:be:94:92:b5:f7:48:cd:
9f:dc:75:21:f7:9d:05:90:aa:39:9f:8c:f9:43:92:
bb:c7:e1:65:8e:02:11:9a:90:60:b0:31:5a:4c:e9:
5d:96:85:98:77:be:d3:ba:ea:48:ef:8c:9a:3a:5f:
a0:92:d2:65:ba:43:78:21:50:bd:44:34:28:78:18:
06:99:66:29:09:1c:ce:d6:35:32:f6:bb:40:56:e0:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D7:21:10:43:E7:69:F6:29:46:5D:77:CC:FC:AA:CA:42:F8:C5:9C
X509v3 Authority Key Identifier:
keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:60:6c:73:ed:dc:16:6c:45:53:4e:92:a9:97:32:2a:04:23:
b9:99:bd:e7:22:37:42:4d:8a:65:1b:46:b2:95:06:64:ce:da:
df:13:a2:b4:aa:65:fc:5f:1e:32:8c:22:76:dd:d2:55:38:b9:
6c:60:64:68:5d:33:fa:54:b1:28:29:66:08:55:c2:ef:37:b5:
f8:28:29:03:d5:2a:c7:5a:be:7e:de:6b:1e:3e:49:e1:48:1a:
de:77:43:4b:f9:9e:f4:fe:1f:fb:f5:a4:87:c2:da:06:14:63:
8d:4d:97:8f:11:53:a1:53:56:f0:69:83:1d:d2:7f:0c:01:24:
6a:f0:bd:a1:85:c4:2c:60:86:2d:ec:91:7d:1a:ca:7a:fa:e4:
b5:45:65:3b:5b:0d:39:2d:4e:d1:d1:ba:fd:d7:56:75:c5:1c:
d3:a2:84:70:78:ae:11:77:82:b3:20:12:1a:96:d3:43:e1:9c:
28:9d:1c:50:15:6c:54:5e:a9:e7:2b:ef:43:7f:18:3b:0c:ae:
76:0f:46:7b:37:fb:50:30:d2:e8:82:6f:3d:82:bc:9b:70:41:
68:bb:d0:f9:7c:e9:01:3a:42:87:9d:71:67:44:b1:98:ac:34:
65:4b:3a:87:75:9b:de:b1:9d:ff:df:e9:de:de:50:e7:af:ba:
fe:63:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:56 2025 by rpki-client