Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
File: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft (raw, json)
Hash identifier: p1RY1PkZtPHzEuWWHePnrZCh0kWaczqoq0S49+16JOU=
Subject key identifier: 44:A4:09:BB:B9:B6:C2:03:03:71:EB:F8:D8:CD:D3:8C:A5:03:8D:58
Authority key identifier: A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
Certificate issuer: /CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Certificate serial: 0196515B95C4118703CB0B74F19E416D747B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
Manifest number: 0E03
Signing time: Sun 20 Apr 2025 04:01:18 +0000
Manifest this update: Sun 20 Apr 2025 04:01:18 +0000
Manifest next update: Mon 21 Apr 2025 04:01:18 +0000
Files and hashes: 1: H8Jh3PByPsoaxftF1Y0qeL6qk8M.roa (hash: OGYujsfjZeJUcMVXbqDzP8dUuHxSfUAIJn1ll6T06LE=)
2: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl (hash: DZKxQecPY19TG7S46NLXmyVSjWdRcakebdfm72c3MWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:95:c4:11:87:03:cb:0b:74:f1:9e:41:6d:74:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Validity
Not Before: Apr 20 04:01:18 2025 GMT
Not After : Apr 21 04:01:18 2025 GMT
Subject: CN=44a409bbb9b6c2030371ebf8d8cdd38ca5038d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:9c:83:2f:62:68:c5:36:d9:bf:bc:a3:14:
50:2c:4a:3a:bf:06:2d:37:d3:13:d2:22:6b:8f:56:
c0:c1:e2:dc:61:3a:3a:27:63:34:83:45:f3:e6:26:
ee:48:1a:d9:29:6e:19:15:8f:74:6d:07:b3:0c:ed:
75:ad:ee:41:7c:74:2c:69:c3:1d:21:92:4d:9f:00:
ce:75:d2:e9:2f:20:a3:11:e8:86:fd:d4:07:61:6b:
e7:3a:a1:5a:5f:1d:78:04:01:ce:cd:1c:2a:66:a0:
d1:59:90:7f:eb:4b:d1:4e:2c:a7:62:1b:01:10:e8:
28:6b:5e:79:6f:9b:a9:64:5e:35:34:32:88:fc:6b:
c2:83:ca:ae:96:5e:48:e5:45:cf:ed:3c:f3:2d:50:
be:89:bf:ba:15:68:0f:bb:5c:09:50:8c:c0:be:cc:
dd:1e:ce:ba:47:29:4f:ed:0f:90:d4:06:5a:fe:48:
e3:9f:14:e3:c3:52:53:03:46:f8:66:10:0b:84:8e:
49:de:28:d8:b5:29:a7:25:99:c2:6e:2f:5e:cd:44:
b0:95:45:ea:45:2c:ee:3b:d0:26:6c:83:84:fd:c6:
8e:f1:a8:8d:2a:07:e5:82:84:49:0e:3e:57:75:57:
4b:79:1d:77:f5:95:39:8d:a4:39:48:cf:88:78:4a:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A4:09:BB:B9:B6:C2:03:03:71:EB:F8:D8:CD:D3:8C:A5:03:8D:58
X509v3 Authority Key Identifier:
keyid:A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a9:77:ec:ff:e2:6d:b7:be:14:5f:91:34:ac:f4:bd:6b:a2:
8a:9a:f0:a7:21:c2:8f:3a:43:46:a4:7d:e2:fa:3c:70:d3:4b:
5a:60:68:84:09:14:e6:9c:c9:d0:43:5d:8c:ac:23:0f:86:32:
af:89:c6:7e:01:f6:95:40:54:b5:9b:b3:54:cf:5f:96:05:8a:
25:18:20:b0:42:4e:6d:1d:c2:b5:36:61:18:2d:83:54:ed:f3:
26:6f:59:1f:53:9c:bf:ec:70:6b:4c:6c:fc:c2:e6:60:03:66:
17:fe:07:27:1a:1b:a7:9b:4e:10:bc:4c:76:f4:cc:72:2e:1f:
be:9f:e2:90:f0:07:13:f1:34:77:ae:6e:ec:6b:4e:cf:0a:53:
31:20:1e:a0:7f:0f:82:3b:dc:ca:ef:1d:35:16:5b:9f:d7:c2:
33:a1:d6:5d:1c:44:79:f6:e8:83:3a:eb:13:85:bd:d0:ca:7b:
96:9e:4b:84:84:04:8b:80:e1:fd:d0:47:1b:a6:7e:16:b0:d8:
38:ca:67:77:0d:8f:98:ac:0c:2d:fb:69:27:3c:4c:00:ff:21:
be:4d:8c:e3:0b:2b:07:e5:7b:29:38:34:05:e4:9c:3e:7c:e3:
df:67:e5:43:71:c0:a7:d6:9e:56:3f:69:1b:61:64:fa:63:c1:
a4:73:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:43 2025 by rpki-client