Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
File: PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft (raw, json)
Hash identifier: bH8+mAE9tiSYOQOU/4m4hPdwkA6W+zGm1zcW6fHgs3s=
Subject key identifier: A1:EF:C5:45:75:8F:BF:C0:C2:FA:F2:0C:8A:E1:4A:AF:44:9D:C5:2A
Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460
Certificate serial: 019652A48BFCA65DEFD86F986C06787C86CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
Manifest number: 0190
Signing time: Sun 20 Apr 2025 10:00:37 +0000
Manifest this update: Sun 20 Apr 2025 10:00:37 +0000
Manifest next update: Mon 21 Apr 2025 10:00:37 +0000
Files and hashes: 1: 5CyBpeLyifB2AFAXOFh8yVUvCwE.roa (hash: JsDCYkyYiFX4qZJz2FVAXDqsZF5P1tX4kX3+rULf7lU=)
2: PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl (hash: uTuANYXgvHggKW4eXgn2VJZ/13dWLlRMzgzbJfbukzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:8b:fc:a6:5d:ef:d8:6f:98:6c:06:78:7c:86:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460
Validity
Not Before: Apr 20 10:00:37 2025 GMT
Not After : Apr 21 10:00:37 2025 GMT
Subject: CN=a1efc545758fbfc0c2faf20c8ae14aaf449dc52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:61:27:bc:06:1b:c0:d1:e8:41:37:54:2e:
12:ab:f7:91:1c:13:f3:6a:b4:00:84:8f:b0:ee:3c:
17:27:15:48:ff:b5:74:cf:62:18:5d:63:bc:7f:d5:
2f:13:89:d5:19:2d:6d:17:fa:87:5a:ec:8c:74:06:
71:34:2f:68:7d:e8:a7:13:a6:72:2d:a6:9b:91:09:
7f:dc:e8:28:f7:77:0e:12:db:ba:12:05:33:0f:a5:
fe:f8:24:05:eb:c0:37:90:12:a4:4d:e8:ef:79:11:
68:91:52:ab:ff:41:bf:6c:59:50:69:86:fe:28:d0:
d1:df:c1:cf:7b:b3:58:8f:8c:93:69:61:e5:0e:39:
b2:34:41:71:a8:3b:d2:44:fd:7f:fc:04:34:63:84:
06:20:84:21:4a:70:cd:88:24:8a:85:86:e3:af:43:
0b:61:98:60:9d:dd:ee:62:82:9f:20:f8:aa:80:bc:
c2:2a:e2:d9:ae:5c:92:9d:ff:9a:1e:79:c2:d6:21:
29:32:b8:f6:2d:a3:3b:bb:e5:fc:c1:9a:52:10:fb:
36:99:14:47:d7:63:ae:8b:78:dc:4f:62:3b:f6:d7:
9a:6b:fc:d7:05:52:c3:9e:5c:64:0b:af:3b:6b:e9:
8c:84:bd:6e:12:94:d1:6c:5d:ed:6c:ba:94:5e:11:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EF:C5:45:75:8F:BF:C0:C2:FA:F2:0C:8A:E1:4A:AF:44:9D:C5:2A
X509v3 Authority Key Identifier:
keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c6:3e:87:1e:ae:8b:05:af:f5:2a:66:76:7d:2a:d2:fb:03:
d0:bb:25:5a:56:85:d6:a9:17:67:4c:59:15:bc:0b:95:c0:10:
ee:b2:8a:97:c8:10:b2:51:83:7c:2a:be:82:ef:f1:3a:8f:8d:
4a:0f:fc:31:2a:78:f4:be:4d:8d:e2:8c:0c:3b:d5:07:94:75:
0d:ae:41:55:42:56:2e:32:62:93:2e:01:69:d0:ee:0c:25:0c:
af:8d:a7:e9:95:cf:39:f9:8b:00:9b:a1:08:09:ab:91:26:2c:
be:b3:48:63:83:41:f3:d5:ad:43:0c:b3:91:9e:56:ab:77:20:
c1:6a:8c:85:9d:d9:63:ed:67:3e:f8:4c:62:1d:4d:89:f4:e3:
3c:f0:69:5d:0a:e3:f7:1f:d6:e9:b1:0a:69:97:85:d7:7c:99:
58:53:78:40:ba:4f:4f:61:71:7a:ad:85:b6:bd:8f:fb:cc:03:
cd:f1:a4:25:c1:41:dd:de:16:bd:2d:4f:e4:e5:50:5d:b4:2e:
57:a7:c0:b3:4f:f4:a5:6d:07:bb:90:1d:a6:82:2b:01:c7:4b:
7c:af:7c:63:05:50:e3:34:a1:3a:cf:d5:9b:2c:7f:15:8d:66:
d4:3a:b5:e5:b3:2c:ab:d9:9c:04:97:3a:1a:0b:41:ad:3f:73:
6b:bd:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:58:45 2025 by rpki-client