Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: BAPBO6dHkdTH1Fdkoff+tQNk3giXUsHwpg6ZamjSgEg=
Subject key identifier: F9:3B:FC:80:69:B6:7C:B9:52:4D:39:FA:FA:59:8D:84:75:17:13:2A
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 0196556E66B12394BF271DFB7B2EEFFA920D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0B93
Signing time: Sun 20 Apr 2025 23:00:20 +0000
Manifest this update: Sun 20 Apr 2025 23:00:20 +0000
Manifest next update: Mon 21 Apr 2025 23:00:20 +0000
Files and hashes: 1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: CJ+5FyKxu25z0ctN3VMQmxBkMvdsP1TIB9M+Ah9YAcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:66:b1:23:94:bf:27:1d:fb:7b:2e:ef:fa:92:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Apr 20 23:00:20 2025 GMT
Not After : Apr 21 23:00:20 2025 GMT
Subject: CN=f93bfc8069b67cb9524d39fafa598d847517132a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:72:4b:1c:95:5b:03:a2:67:fd:4a:44:fc:
fb:a4:ae:4e:17:6a:2d:c7:c1:5f:b9:c0:4b:9e:12:
9e:2b:2f:85:93:93:8f:22:e8:6e:46:49:e0:8e:47:
78:97:1d:40:23:e8:4c:0a:6f:90:ad:84:e7:fe:bf:
b3:34:de:5d:b0:da:07:7f:df:4c:2e:e5:d1:c1:bc:
a0:48:0a:c0:03:3e:8c:b8:14:c6:15:d2:c7:ab:67:
29:98:9f:1b:b9:f2:15:52:0c:fb:ee:db:6e:c1:d1:
03:33:fc:dd:be:d4:51:aa:8b:2a:2d:52:82:5c:4a:
fa:f8:32:6c:06:27:f5:aa:a0:18:bc:5e:dc:60:83:
d5:0d:79:18:a8:35:6f:28:73:6f:65:3f:12:03:ef:
4c:13:41:53:b6:6a:d5:da:ee:de:3a:bf:57:ba:99:
9b:bd:a4:e0:45:c2:ec:d4:c2:1e:02:e9:68:2c:c9:
82:54:5b:10:93:12:61:06:32:7b:89:ac:6c:d7:2c:
9b:f7:ff:11:c1:16:c0:8c:af:43:72:56:dc:d1:3e:
db:22:32:a5:78:1a:91:a3:ec:f8:69:fa:e1:a7:d3:
49:fb:f7:25:b1:d8:f7:57:dd:77:a1:54:07:90:15:
16:9a:54:2e:ee:63:6d:34:d1:b4:22:2f:6b:6c:55:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3B:FC:80:69:B6:7C:B9:52:4D:39:FA:FA:59:8D:84:75:17:13:2A
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:52:76:93:30:80:53:ab:95:65:12:2c:f4:57:b2:90:29:dc:
d9:b6:31:cb:6f:61:af:98:49:ef:49:ba:af:db:13:26:99:2e:
2b:6e:9f:a0:ea:69:3c:5b:9d:50:14:31:e8:aa:f1:10:6e:a8:
9b:7e:cd:b2:6d:09:44:e6:40:d4:c0:6d:e7:5f:a0:09:3d:02:
79:f5:b9:2c:8c:24:ba:22:c1:36:f5:43:a3:38:e6:de:40:1c:
31:a7:89:3f:a0:6b:c7:cf:b6:a4:55:77:65:74:41:1a:c8:9c:
72:2d:09:6f:f8:82:9a:63:b3:dd:13:87:85:5b:20:a8:a8:8a:
41:cd:10:41:85:95:3d:78:28:eb:7e:db:cf:2a:e5:75:d2:1c:
20:ae:e5:3a:3f:87:dc:3c:8c:1b:29:7b:5b:df:3c:75:14:5d:
71:6c:54:23:a7:91:30:df:ba:0c:c3:6a:1f:2a:ed:21:96:a2:
56:4c:60:3b:b0:5d:33:3c:72:2c:75:a9:52:de:71:03:35:b4:
4f:49:59:51:64:5a:dd:ef:88:5b:12:96:f1:6e:cc:34:f9:09:
2e:be:3c:80:77:b1:a9:f9:f5:23:b8:ae:3b:68:cb:da:42:e0:
34:e1:96:2a:82:bb:74:c4:e6:38:fe:8c:2f:6e:ae:f4:f5:87:
fa:28:ef:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:21 2025 by rpki-client