Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: qmMF88OhKjMjq6u6kHvnehFhgRxqN325R4s9zB/DGJU=
Subject key identifier: 43:9B:30:81:4E:ED:CF:7D:6D:C7:3A:FA:32:3B:D1:F9:1D:88:14:24
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 01965236A7A95E1E95436F19DC60A1BDA462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0789
Signing time: Sun 20 Apr 2025 08:00:35 +0000
Manifest this update: Sun 20 Apr 2025 08:00:35 +0000
Manifest next update: Mon 21 Apr 2025 08:00:35 +0000
Files and hashes: 1: pGhFSYKZpUat85kiXiiCd2_IqX0.roa (hash: rRFD7qwRqqnJAuhQ1luySoQoJ9GoQlnTCcam7ZPbXJk=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: 2QioDdrxviQbCHxc8yKRbV2eJg8SPKKgAlRdJ6Zghyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:a7:a9:5e:1e:95:43:6f:19:dc:60:a1:bd:a4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Apr 20 08:00:35 2025 GMT
Not After : Apr 21 08:00:35 2025 GMT
Subject: CN=439b30814eedcf7d6dc73afa323bd1f91d881424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4d:dc:c3:fb:f9:bf:45:b4:93:fd:0a:02:ad:
62:74:97:d0:fe:81:bc:2e:f8:f3:f4:65:58:f1:31:
cf:ef:cf:30:66:80:74:00:6b:29:94:80:90:24:b5:
30:1f:b7:5e:67:a3:83:6d:e5:19:1c:f4:52:4d:d7:
e2:31:9f:ff:22:0a:ef:d5:81:01:83:62:0f:02:8c:
e7:63:68:9b:bc:7b:9e:4c:1d:ec:7f:12:b3:ad:14:
6f:6a:0f:9a:8a:26:e1:8d:bd:4a:98:89:5d:f5:90:
43:d4:3e:26:7e:32:a4:92:15:f1:1a:f4:ec:1d:05:
6a:bf:b5:78:39:74:d9:7f:89:e0:48:b3:e9:6d:a9:
2c:b7:7c:6a:27:f5:62:27:07:6f:26:a1:f0:de:fc:
f7:00:e4:98:80:c6:4d:7a:f2:a0:b9:c6:52:6c:13:
e9:9c:2b:7d:e0:75:36:4d:28:89:28:3a:75:af:7e:
40:a9:9c:4e:30:61:f9:9e:ac:ba:44:6b:43:19:de:
61:22:57:72:63:f2:83:ce:83:1a:4b:4d:9c:a6:57:
5f:f1:04:70:76:48:1f:cf:e6:d4:de:a1:41:23:fc:
c8:39:7b:12:f9:a5:4a:28:28:2f:77:16:15:c5:86:
07:7d:ab:89:82:be:c6:9b:93:55:28:60:48:bd:4d:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9B:30:81:4E:ED:CF:7D:6D:C7:3A:FA:32:3B:D1:F9:1D:88:14:24
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e7:09:05:6b:88:69:3b:3e:77:76:5e:29:eb:5b:46:c1:b2:
94:28:09:38:a9:07:27:79:b3:8f:b6:d0:a4:9e:13:6c:98:5a:
65:ce:61:54:00:3e:76:a5:62:89:fc:fe:80:1d:08:40:39:1d:
75:29:78:b2:e9:d5:43:87:bb:ea:d9:76:5c:93:6e:7c:f1:24:
47:4b:d7:70:f5:b1:82:52:f5:27:6d:10:ae:31:5e:9a:42:d5:
98:19:52:29:17:3b:27:09:76:e4:57:42:e2:ed:5c:4d:29:3a:
15:1d:ce:96:f9:ed:e5:2b:b0:0a:4d:6e:48:fc:19:24:c1:55:
34:ef:b3:5b:d3:48:aa:41:5d:cc:0f:bd:fc:4d:eb:73:1a:b4:
2f:94:d7:6b:e0:c1:4d:de:d8:b4:9a:2c:e7:7e:4f:cd:1b:20:
72:a2:13:2c:db:d8:7e:d7:91:09:c2:6b:20:fe:90:4d:df:ea:
15:35:12:27:d0:9e:cb:be:55:6d:11:63:ba:c1:90:02:26:31:
ed:20:15:1f:e8:42:a2:96:08:55:69:d3:28:a1:d2:4a:53:72:
58:8b:1d:db:54:7a:f0:82:8a:1b:8e:78:fc:e0:a1:1d:3e:22:
51:88:02:cd:f5:c8:70:6c:e7:06:ae:69:39:3d:c5:c3:f3:7b:
e3:7b:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:28 2025 by rpki-client