Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
File: pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json)
Hash identifier: DT52IZQjWgBwN3UncvTFe7K7TTGhddxxR1dCf5sZUA8=
Subject key identifier: 4C:DE:1B:38:EA:15:61:EC:51:1C:9F:F4:08:CF:C2:DB:C6:26:55:09
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Certificate issuer: /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial: 019654C976C5FEC3612C4AC6F8373CA8907E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 20:00:11 +0000
Manifest this update: Sun 20 Apr 2025 20:00:11 +0000
Manifest next update: Mon 21 Apr 2025 20:00:11 +0000
Files and hashes: 1: 3slyfZXxVcWO-rhXLBn1z60ShoQ.roa (hash: aD+13qB77l1eWjcaYEDaoeBPF19MIy6v6JQPzBT88zc=)
2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: e/J9YrgZ8I6Law4wC8wxFG1d0enYKUaH38fdyijeeO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:76:c5:fe:c3:61:2c:4a:c6:f8:37:3c:a8:90:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Validity
Not Before: Apr 20 20:00:11 2025 GMT
Not After : Apr 21 20:00:11 2025 GMT
Subject: CN=4cde1b38ea1561ec511c9ff408cfc2dbc6265509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:e4:fc:f6:27:07:47:4d:78:34:69:24:53:
ab:b2:59:89:2f:98:04:d7:fb:a4:da:d0:a3:cf:8a:
dc:c9:7a:05:47:6f:a4:37:a8:8d:da:3c:a5:d0:93:
91:32:ae:d5:46:2b:92:0c:b4:ba:e2:ef:39:ae:49:
12:a3:a5:cd:ae:3a:a8:c7:c4:7f:bd:09:8b:56:68:
54:1c:73:8f:9e:95:7a:c5:d2:a9:2d:ff:91:b9:af:
96:ad:97:c1:c8:06:77:71:a2:37:94:09:64:ab:25:
eb:82:95:be:50:cd:e2:ad:13:b6:04:74:02:94:1f:
fe:7b:37:a4:f3:4d:9a:10:ac:92:d2:55:8e:00:8e:
e5:7d:4c:fb:77:bc:d1:91:9c:5c:e4:a9:75:27:e6:
55:24:3f:c4:8f:22:55:33:4e:b9:2e:7f:80:61:e7:
dd:ff:07:1d:12:8a:87:1b:a0:22:29:e8:8a:0e:aa:
e8:64:19:7e:da:67:e5:50:5c:46:3f:07:dc:4b:84:
1e:f7:1c:13:5e:69:35:72:58:7c:38:8f:f5:47:1e:
87:5b:ca:26:ef:f6:17:37:98:72:75:f0:68:4a:0f:
23:88:e1:f8:b7:ba:bc:b0:de:97:6f:a1:1e:30:59:
13:7e:fd:0b:3c:99:df:1e:ef:e4:0d:2f:0c:04:e7:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DE:1B:38:EA:15:61:EC:51:1C:9F:F4:08:CF:C2:DB:C6:26:55:09
X509v3 Authority Key Identifier:
keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e3:3b:54:36:c8:cf:5e:80:a4:de:88:7f:cc:9d:32:bc:13:
ec:4a:55:b8:f8:72:e7:1d:29:e3:1c:39:e7:44:3c:2e:ac:c7:
df:31:c2:3e:7a:e5:a2:45:f9:d9:ed:f2:36:2a:75:2c:1f:49:
07:6f:0b:e3:1c:3e:6a:c2:08:27:2d:9e:8c:81:7f:5d:35:d6:
2d:75:a3:f3:cf:8a:de:44:7b:ec:70:7e:f2:78:b2:ed:52:cb:
23:cd:45:0a:b4:23:29:0f:c1:38:51:ce:48:16:4a:ee:c8:f5:
37:61:de:22:05:41:36:43:df:ff:40:33:2c:a8:91:4e:26:ad:
69:a4:b7:ba:37:85:e1:0a:e4:7c:52:cb:e8:d4:81:ca:19:da:
09:a3:16:a5:c9:04:7d:89:68:94:66:94:a6:64:dc:2c:59:8c:
4d:bc:11:38:a5:84:d3:f2:44:4c:66:e8:24:ab:be:da:44:ef:
61:c0:f5:23:3f:2f:fe:f9:d2:7b:e2:3f:4b:62:db:da:2d:54:
99:1f:5c:f8:4b:6b:0e:ac:b3:27:6f:36:3b:63:fa:f9:01:82:
a1:41:f1:37:a5:03:04:b4:d2:8e:8b:8f:03:29:46:46:62:21:
dc:69:76:57:41:e9:71:96:70:c8:23:ab:90:ef:4c:b7:d3:35:
11:5a:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:16 2025 by rpki-client