Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: 65R5x8rfp0PciV+jxC+a5V8X691DRfymvNWVuG9Ycm4=
Subject key identifier: 02:20:F7:DA:0C:FC:12:03:02:9E:82:13:16:EA:10:C6:96:81:D8:B7
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 0196138F02BECF6957BD5018F51F007E1A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 0B29
Signing time: Tue 08 Apr 2025 04:01:01 +0000
Manifest this update: Tue 08 Apr 2025 04:01:01 +0000
Manifest next update: Wed 09 Apr 2025 04:01:01 +0000
Files and hashes: 1: 4jSg2ODlu3CFd6jIl7kHiP-BX_4.roa (hash: xgMqCXuymiqYkTjb0uA/T+UuFonELwxqYTVdoLkLInU=)
2: 9NbAaWTN6CWxeEqYQjGZLmOhbQQ.roa (hash: h5XO3HcLJOMuvQP0KQj1fHH4O24IzSVqKiTXw+BaXeo=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: wXoQAoZOw+qpNNG7J5kGGtPXszqCYouSw1dX7V+m2xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:02:be:cf:69:57:bd:50:18:f5:1f:00:7e:1a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Apr 8 04:01:01 2025 GMT
Not After : Apr 9 04:01:01 2025 GMT
Subject: CN=0220f7da0cfc1203029e821316ea10c69681d8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:05:80:45:b3:f7:84:92:1d:df:89:53:14:41:
73:2e:fb:9b:35:2d:47:12:25:dd:36:50:5f:07:3e:
02:e7:e4:1b:af:6f:42:72:b4:66:55:c8:46:04:33:
86:43:0d:7c:60:31:b0:12:b7:fe:23:a2:3d:87:f3:
81:5d:f2:53:3f:cd:85:33:38:3c:80:03:a8:fc:d5:
7a:49:76:40:2e:a1:7f:51:61:41:34:91:76:50:4d:
be:8c:86:88:b7:da:ba:46:bc:b8:1e:2e:31:78:99:
6a:99:63:4a:65:ce:aa:d8:fa:3c:94:73:0c:e6:40:
1a:c6:75:ad:ae:b6:4e:13:e9:89:f5:65:be:62:6b:
4b:72:04:ae:bc:fa:ef:29:29:13:54:96:1f:b4:2e:
e4:4f:3f:d0:f7:69:80:bd:47:cc:f4:6e:89:ff:33:
af:93:ee:87:c2:9d:c4:f6:3e:11:22:7b:fd:e2:fb:
99:79:9c:49:d4:0a:c4:cc:5e:68:01:c0:a9:a8:49:
d1:62:6f:d7:5a:5b:ec:39:78:77:4a:f9:0c:b1:2f:
77:74:75:07:65:bc:3b:df:11:93:38:c3:56:32:fe:
bf:bd:89:73:92:5c:c8:36:0f:f2:38:96:8b:67:ab:
94:d8:10:47:f6:09:fd:d0:79:be:a0:7b:f7:5c:99:
f7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:20:F7:DA:0C:FC:12:03:02:9E:82:13:16:EA:10:C6:96:81:D8:B7
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9b:1a:b5:2b:cb:9d:15:93:48:78:7b:2d:33:66:0d:0c:64:
11:fe:72:f9:8d:dc:9c:f2:bf:a6:d7:6c:60:7f:f4:d8:85:73:
26:9c:ac:86:a0:2a:96:58:f6:30:51:e0:ab:44:a5:ee:5f:dd:
1d:cd:c0:3c:cc:91:54:4b:b9:ef:fb:11:cf:ff:f9:4b:bb:90:
b4:e7:b9:0f:24:39:b0:1a:dc:07:7e:c1:85:86:e4:79:77:46:
a9:4e:af:4b:80:74:b2:dc:e2:c7:8e:30:e5:e2:d4:ce:d3:2e:
1b:7b:f8:d1:5e:96:78:dd:c1:83:17:6f:10:4d:44:95:f1:b2:
34:df:89:64:cc:92:0e:2b:f2:03:db:b9:c1:ab:69:f8:4f:eb:
18:2e:7a:d3:15:81:0d:d5:ba:52:cd:72:a9:54:77:60:2b:8c:
df:3f:51:34:41:34:db:c9:e7:6b:72:57:2d:78:bb:85:03:0c:
a7:c1:0a:e8:82:c0:40:2c:d3:74:d2:06:28:49:74:26:81:22:
0f:55:af:2e:13:3c:76:a5:be:4c:96:eb:18:67:b6:ee:2f:50:
9b:47:9a:fb:ee:c1:44:ac:7d:64:22:1d:b2:8b:d5:c7:4a:15:
ec:8c:fc:ab:e6:57:13:c8:98:80:07:7b:d2:14:35:be:b9:c8:
32:e3:58:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYTjwK+z2lXvVAY9R8AfhoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGU0NmQ2M2E3MTgzZjcwZGE0OTJmMDJiODA5OGMyYmZm
YzI4YmUwHhcNMjUwNDA4MDQwMTAxWhcNMjUwNDA5MDQwMTAxWjAzMTEwLwYDVQQD
EygwMjIwZjdkYTBjZmMxMjAzMDI5ZTgyMTMxNmVhMTBjNjk2ODFkOGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wWARbP3hJId34lTFEFzLvubNS1H
EiXdNlBfBz4C5+Qbr29CcrRmVchGBDOGQw18YDGwErf+I6I9h/OBXfJTP82FMzg8
gAOo/NV6SXZALqF/UWFBNJF2UE2+jIaIt9q6Rry4Hi4xeJlqmWNKZc6q2Po8lHMM
5kAaxnWtrrZOE+mJ9WW+YmtLcgSuvPrvKSkTVJYftC7kTz/Q92mAvUfM9G6J/zOv
k+6Hwp3E9j4RInv94vuZeZxJ1ArEzF5oAcCpqEnRYm/XWlvsOXh3SvkMsS93dHUH
Zbw73xGTOMNWMv6/vYlzklzINg/yOJaLZ6uU2BBH9gn90Hm+oHv3XJn3PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIg99oM/BIDAp6CExbqEMaWgdi3MB8GA1UdIwQY
MBaAFKYORtY6cYP3DaSS8CuAmMK//Ci+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMt
M2I3ZWYyNWNmZTgzLzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMtM2I3ZWYyNWNmZTgz
LzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZsatSvL
nRWTSHh7LTNmDQxkEf5y+Y3cnPK/ptdsYH/02IVzJpyshqAqllj2MFHgq0Sl7l/d
Hc3APMyRVEu57/sRz//5S7uQtOe5DyQ5sBrcB37BhYbkeXdGqU6vS4B0stzix44w
5eLUztMuG3v40V6WeN3BgxdvEE1ElfGyNN+JZMySDivyA9u5watp+E/rGC560xWB
DdW6Us1yqVR3YCuM3z9RNEE028nna3JXLXi7hQMMp8EK6ILAQCzTdNIGKEl0JoEi
D1WvLhM8dqW+TJbrGGe27i9Qm0ea++7BRKx9ZCIdsovVx0oV7Iz8q+ZXE8iYgAd7
0hQ1vrnIMuNYWw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:22:38 2025 by rpki-client