Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
File: pSNBhTlzXL2bC6PCeew1V9cmJlo.mft (raw, json)
Hash identifier: ZIEm0j1zhDJrPRWp2Pm1/TKLG7BKuFJFaLRL1w4vSx4=
Subject key identifier: 65:51:AD:7F:48:20:49:A0:D9:B2:54:A2:F5:61:21:01:B6:FE:14:51
Authority key identifier: A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Certificate issuer: /CN=a523418539735cbd9b0ba3c279ec3557d726265a
Certificate serial: 01964D107E232C3F9E9807D57178F42EDC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
Manifest number: 12B0
Signing time: Sat 19 Apr 2025 08:00:48 +0000
Manifest this update: Sat 19 Apr 2025 08:00:48 +0000
Manifest next update: Sun 20 Apr 2025 08:00:48 +0000
Files and hashes: 1: 8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa (hash: Ub5Ka+iibeNMtT5d651FP9y1wedTUH3xQXSWP3OHFL0=)
2: pSNBhTlzXL2bC6PCeew1V9cmJlo.crl (hash: H4PydN3PBbiQxArf4fdeHA24S5u9E3CvN4Pii0rWi1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:7e:23:2c:3f:9e:98:07:d5:71:78:f4:2e:dc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a523418539735cbd9b0ba3c279ec3557d726265a
Validity
Not Before: Apr 19 08:00:48 2025 GMT
Not After : Apr 20 08:00:48 2025 GMT
Subject: CN=6551ad7f482049a0d9b254a2f5612101b6fe1451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:f8:54:e2:ec:ef:ec:1a:14:1a:eb:57:06:
9a:c0:47:9f:08:4b:ab:e9:73:24:40:08:bc:7e:54:
e3:40:bc:64:c2:c8:4e:d9:84:70:ff:31:70:57:ce:
3b:57:05:e7:34:1d:5d:54:0e:37:2b:0d:cd:30:4b:
2d:62:43:6a:8f:24:ed:ca:f5:78:b0:29:d0:60:8c:
89:e3:bc:84:29:44:b1:ca:f6:c2:95:9e:55:52:44:
35:c9:c8:3f:9f:3a:ab:e5:92:38:6e:17:35:78:80:
6b:d4:25:06:14:4a:19:9e:dd:cb:0b:d2:39:bf:64:
fd:29:82:fa:0b:61:c6:a7:93:8d:6f:92:dc:1e:18:
4f:73:f8:be:3e:a6:5e:de:3b:67:ec:b0:7f:fa:0c:
65:08:0f:71:72:0e:91:0e:85:9b:52:c5:fa:3c:b5:
7d:ba:02:bc:e9:5d:b7:8a:42:de:0b:55:56:27:7d:
43:8e:bd:c8:22:2c:25:34:98:fd:19:fc:c9:5d:31:
f5:a7:a3:a9:ea:79:4d:43:b5:d6:41:e1:59:39:4c:
00:8b:5c:f4:7d:39:0f:7e:fa:10:83:13:27:57:fb:
ae:55:98:97:6f:31:02:5d:8c:2c:2e:87:63:db:2a:
74:48:e1:8c:75:2e:8a:1a:bb:fa:9b:d4:c2:4f:e4:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:51:AD:7F:48:20:49:A0:D9:B2:54:A2:F5:61:21:01:B6:FE:14:51
X509v3 Authority Key Identifier:
keyid:A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3f:8a:b2:8d:4d:a8:f3:99:85:3f:c8:39:ee:1a:2c:f0:ad:
47:98:21:01:9a:c4:5f:ee:1b:95:9d:cc:26:66:1c:2b:ea:97:
ad:7b:94:97:0c:b8:24:3a:34:9a:ab:17:2a:03:06:fc:67:9e:
b6:6f:6f:58:01:37:6a:f4:8c:be:55:2c:d6:b2:3b:76:42:4d:
99:f5:fb:7c:3f:f5:25:76:19:18:d9:57:7b:f8:c7:e0:a3:ec:
e4:94:d6:fa:de:d2:6d:71:05:7e:63:5f:ce:a4:c3:36:e6:74:
14:35:7a:0d:d1:ed:fc:82:86:e7:dc:0c:f9:23:6e:93:b9:55:
f4:ce:e2:96:b2:9b:10:52:3d:38:cd:bd:7f:45:da:85:65:1d:
1c:0b:0c:80:f5:c2:5a:b8:44:9e:2a:24:87:02:92:a1:aa:26:
62:a6:82:d7:6a:d3:69:50:09:80:f1:7c:05:75:51:84:45:ad:
ed:3d:b4:76:73:7e:3b:0d:b3:5d:4b:42:ee:7f:cd:b7:3e:02:
89:a5:a6:aa:2e:ae:64:76:7f:25:00:87:aa:fc:cf:b8:ff:9e:
e3:c0:73:ef:26:c4:fa:ee:31:73:23:1c:57:53:29:a7:32:06:
48:e6:56:98:ab:06:8a:b0:55:d8:47:c4:34:bc:cc:e7:a9:07:
14:9c:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:58:51 2025 by rpki-client