Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
File: pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json)
Hash identifier: UfdSg5yx+CK+/xqM8PKHqu4SPzZoTTViD2e4x5XzDyQ=
Subject key identifier: 38:C5:63:3D:62:ED:FB:46:98:8A:68:5D:17:C7:3B:37:A1:38:62:16
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial: 01964DECAF4548F0DA749C2F3773C5B90540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
Manifest number: 1500
Signing time: Sat 19 Apr 2025 12:01:18 +0000
Manifest this update: Sat 19 Apr 2025 12:01:18 +0000
Manifest next update: Sun 20 Apr 2025 12:01:18 +0000
Files and hashes: 1: W8EH6cHJ1jqNd1-fbWQ4302NcPE.roa (hash: 0aNZYoUKp18HEp9H4MaKrqtXZZf4gT5hLWGwRtSFdxU=)
2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: +udekuWIZURItKi5b8oWSvpiPEL7++8rBrq1yI5H+n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:af:45:48:f0:da:74:9c:2f:37:73:c5:b9:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Validity
Not Before: Apr 19 12:01:18 2025 GMT
Not After : Apr 20 12:01:18 2025 GMT
Subject: CN=38c5633d62edfb46988a685d17c73b37a1386216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:dc:41:e0:88:74:09:03:4c:7c:fc:12:48:
39:d3:07:4b:0c:a5:23:3c:88:a6:59:98:93:11:ce:
02:3a:02:3c:b2:c6:2f:c9:78:c3:f2:2f:67:ba:a7:
f2:ef:18:6e:ab:74:17:54:2c:50:3a:6c:e3:0b:38:
eb:98:6b:f2:96:9b:df:a6:26:3f:ae:fb:7f:b8:8e:
f9:0e:05:b7:6a:e3:86:91:a0:c5:20:eb:ee:3f:4b:
08:a9:74:3b:7d:c4:b3:f6:8f:ca:fc:60:85:e1:01:
59:71:0d:a1:3f:c9:fd:ca:46:9c:28:09:11:70:a1:
6e:d0:87:42:8a:6d:e3:ea:33:ce:d5:0d:71:58:59:
9f:ad:9f:e0:b4:1a:3e:8f:8e:ce:60:82:8a:a5:4c:
d1:af:3c:08:6d:00:f6:63:25:ff:71:30:7f:b8:03:
a9:9c:52:8c:56:f0:e5:e2:ac:c6:35:d6:75:84:7f:
80:21:1c:1e:4a:3d:61:c5:85:32:da:0c:ba:ae:79:
13:a1:15:fd:e9:be:66:d4:0f:eb:de:ff:60:b6:7d:
21:02:5c:61:85:1f:cf:ba:7c:de:c3:86:fd:98:1a:
a7:eb:6a:d7:29:c2:10:a8:46:3f:89:27:b1:ae:61:
9c:ab:00:b9:91:19:bb:3c:8b:11:c0:46:24:df:9e:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C5:63:3D:62:ED:FB:46:98:8A:68:5D:17:C7:3B:37:A1:38:62:16
X509v3 Authority Key Identifier:
keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e8:e4:ff:6d:40:1c:a8:ae:8f:ef:f7:64:28:29:02:7c:80:
03:51:61:a4:d2:12:dc:7c:a2:dc:19:ec:eb:5c:71:9a:b5:1a:
c7:e8:3b:43:7f:64:5d:8e:7a:cd:8b:c1:04:29:b9:86:64:cd:
bf:4d:ea:e3:83:7a:ea:49:e6:62:d9:aa:33:5f:27:0f:bc:fd:
bf:78:34:7c:e7:b3:ca:58:5a:f0:66:3f:91:0a:a7:02:2b:07:
00:65:12:c7:e0:1e:8f:b4:da:b1:35:c4:f0:51:ea:c1:e0:23:
21:ce:ca:52:3b:9c:7f:88:95:f5:75:74:a9:44:75:30:b0:31:
fe:f9:4e:34:83:6a:79:ca:4e:08:61:07:42:97:95:84:88:ab:
48:b9:5a:12:67:44:23:93:86:2a:2a:4f:2d:5a:22:5a:88:36:
e1:4a:fa:cc:a5:0f:81:0e:50:1b:2d:e2:fe:80:78:e9:23:75:
e5:eb:21:3f:31:71:43:71:48:1e:f2:32:b9:2d:5c:d3:bf:fa:
7a:c7:94:14:f2:05:65:fe:b8:9f:37:b8:ac:aa:e5:51:26:b7:
ad:a6:a7:a5:2d:b2:84:58:4b:2a:3a:6a:4d:2d:69:32:14:3a:
0c:5d:a9:b2:66:c2:e8:8a:ef:c5:18:b9:6c:cf:98:5f:eb:94:
d7:41:d6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:11:56 2025 by rpki-client