Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier: mL5NX44Y0GpjKt0oRdeBN0q7txCtA4tYeQCvqHiRPuI=
Subject key identifier: 74:E6:C2:9A:E0:A7:CE:AE:FD:D1:9A:47:57:7C:21:77:3B:45:BC:E3
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial: 019618B4EDEEE2DEEDE480EA14E60F454996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number: 0820
Signing time: Wed 09 Apr 2025 04:00:32 +0000
Manifest this update: Wed 09 Apr 2025 04:00:32 +0000
Manifest next update: Thu 10 Apr 2025 04:00:32 +0000
Files and hashes: 1: cGGNHHL2taAbcfw5rMUB84kQw_k.roa (hash: J56YjCbrct/bNrc5fidg1pLfrEEsu9MaAGzXOMhbxY8=)
2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: RtihdbjRviTJ12trR/0Sfoh99JCkjdxO7cRD44hd5/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:b4:ed:ee:e2:de:ed:e4:80:ea:14:e6:0f:45:49:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Validity
Not Before: Apr 9 04:00:32 2025 GMT
Not After : Apr 10 04:00:32 2025 GMT
Subject: CN=74e6c29ae0a7ceaefdd19a47577c21773b45bce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:96:82:b9:a3:ce:75:cd:72:d4:7b:99:a9:7f:
54:c4:06:cb:4d:58:d0:05:89:65:73:ba:80:1a:d3:
68:d0:2d:eb:d4:36:32:5d:ac:a5:a8:92:b5:5a:69:
6f:4c:9e:da:bf:8d:e6:c3:2d:d6:fc:40:e7:9d:93:
40:fe:10:ed:e2:14:3c:a1:5d:68:2d:04:42:f8:25:
2e:4b:49:7f:07:0e:56:85:1f:c5:cb:b1:28:6d:6a:
7c:1c:26:7e:f0:37:29:18:53:32:d9:7c:16:37:18:
ab:73:e6:90:c5:af:51:01:ea:9c:3f:78:24:5e:76:
9b:37:26:1c:e3:ae:ff:4a:db:6b:79:d4:15:c3:54:
d5:76:2a:63:51:76:89:6e:6e:d2:8d:e1:04:31:43:
b6:bf:6f:60:e8:63:14:97:22:c3:07:96:ad:9b:de:
66:94:55:ac:f5:97:f0:c1:a7:54:b3:55:ca:07:1c:
aa:32:dc:1f:95:b2:d1:ea:7d:64:2a:ff:a3:cb:d6:
72:0b:b6:49:a2:fa:3f:f7:0c:9b:b1:b2:79:25:fc:
a2:4b:e2:61:3f:11:76:ad:2b:9a:8e:14:06:43:9b:
81:15:37:25:d4:75:ec:5c:12:b8:a9:cd:85:d3:25:
29:93:c2:0f:5a:df:a6:7b:a8:e1:af:e1:cc:a0:53:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E6:C2:9A:E0:A7:CE:AE:FD:D1:9A:47:57:7C:21:77:3B:45:BC:E3
X509v3 Authority Key Identifier:
keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6d:71:8c:a7:b9:39:a3:0c:74:f9:cd:08:d0:45:27:cf:18:
fd:3e:f5:d7:55:37:c8:d2:17:1b:74:04:ce:63:a1:55:5a:a0:
3d:c7:10:13:6f:1e:1c:ee:eb:5d:28:77:a6:85:d7:56:59:b9:
72:6e:96:98:33:c9:9a:c2:8b:2b:de:67:fe:f5:6c:67:81:fd:
2a:b8:6f:bf:7c:ba:20:3f:56:d1:c2:ca:98:58:75:db:20:7a:
cd:ce:36:bc:18:36:11:51:7b:9d:eb:7e:25:c3:37:db:68:ff:
ad:a5:c1:63:00:f4:d2:ca:aa:e7:6c:a0:4f:61:d5:0a:8c:7f:
b8:69:34:c0:72:4f:93:05:4d:7e:4b:44:d4:7d:33:a6:94:9b:
22:fc:83:12:56:42:6e:ac:63:e1:ba:01:ae:2e:3c:ac:62:ef:
14:bc:bc:b5:39:f2:d0:b0:0e:1a:12:1a:cc:e4:73:40:9b:97:
5c:18:e5:ca:a3:68:5e:af:ee:d9:7c:62:83:c2:18:56:ff:14:
94:d1:7b:ae:80:05:68:3d:05:40:2f:13:87:7e:2d:00:ae:d6:
94:9d:82:a7:1b:67:dd:c2:b5:77:ac:cc:45:8b:b9:d7:68:c5:
b2:8a:48:a1:33:09:d7:6f:22:52:58:09:19:b3:00:77:93:b4:
1f:cc:1f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:34:54 2025 by rpki-client