Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
File: puiiWpN5KlizotgPsarZWeZa7d8.mft (raw, json)
Hash identifier: jmSOr1n4hBlH3r632agykXossiCjCHaHUAdR8s/0Fu0=
Subject key identifier: 17:73:14:90:6E:71:FA:8B:22:67:FE:4E:82:BE:BB:6F:4D:F7:34:0E
Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
Certificate issuer: /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Certificate serial: 01961A6C9C6C3D355BF16A507043D2DD7447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
Manifest number: 1439
Signing time: Wed 09 Apr 2025 12:00:47 +0000
Manifest this update: Wed 09 Apr 2025 12:00:47 +0000
Manifest next update: Thu 10 Apr 2025 12:00:47 +0000
Files and hashes: 1: m4oaOJvUbTCnMfIaVthxaAca0Fo.roa (hash: 63YgwjxraN8fKu5dlPjbo9SecMVJoKvca3zxswMIA4c=)
2: n3U4T0b_eZvC8-6ycL0d5_eDNuM.roa (hash: 9t7F6PBfxlnF6OlI2OhDxP2xK45ENz8bFdMmt86tiuo=)
3: puiiWpN5KlizotgPsarZWeZa7d8.crl (hash: TVR9DUdib+vCEq8QBIwQOX5cZB3mLLz2FiXm7sbrqpM=)
4: tDmGVhL-hfe86EtwqqFgtbugIGI.roa (hash: yybIZyz2WHKbdDgnIhAh2oqd5wKR3WI3gpGpCQsuSFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:6c:9c:6c:3d:35:5b:f1:6a:50:70:43:d2:dd:74:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Validity
Not Before: Apr 9 12:00:47 2025 GMT
Not After : Apr 10 12:00:47 2025 GMT
Subject: CN=177314906e71fa8b2267fe4e82bebb6f4df7340e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:f7:8d:fb:d1:74:3f:56:76:0f:ee:54:76:
35:04:16:20:bf:d2:be:8c:0e:41:97:40:4a:05:41:
85:b6:ed:90:a4:93:56:7d:25:97:4f:53:c9:fe:69:
f1:1a:c2:72:9e:85:c7:06:1f:c8:a1:f1:ca:0a:38:
c9:09:f9:99:3f:1f:61:75:e5:77:a9:3b:43:89:37:
78:1c:05:8a:2a:e1:36:22:96:b2:ae:45:74:67:a6:
ec:a3:3c:68:2b:82:67:5a:1c:95:06:7f:4a:90:0b:
35:3e:f9:82:2f:28:01:83:9c:73:15:fc:03:60:eb:
b4:b2:cf:7d:3e:24:c4:bb:59:77:1e:2c:ed:a0:c5:
14:1e:41:44:4b:1f:13:30:fe:da:00:7c:c1:33:df:
76:0d:ea:0f:a8:7d:67:a6:3e:4e:7d:ad:6e:dd:2e:
0d:0a:1e:53:e0:e8:11:d5:d1:5f:7f:24:7f:f7:da:
e1:2b:07:a7:6d:26:d3:da:3a:cd:3c:82:87:4c:64:
73:25:2c:c0:bb:01:81:7a:01:7a:54:57:4e:a7:eb:
1d:58:c0:90:c5:a1:d1:9a:78:d1:a0:b3:f3:fc:3b:
31:0b:97:36:8d:99:3c:02:a5:f7:1a:b8:ba:20:7e:
c1:26:26:d8:ec:6c:5b:ce:b1:63:53:1c:cf:8b:34:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:73:14:90:6E:71:FA:8B:22:67:FE:4E:82:BE:BB:6F:4D:F7:34:0E
X509v3 Authority Key Identifier:
keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:67:a9:b7:a3:42:5c:94:25:97:74:e3:20:9f:6c:4b:8a:40:
be:45:54:fc:53:44:bc:31:20:9f:73:2f:e2:2b:3f:4d:51:39:
3c:e8:b8:40:69:77:2a:d2:ac:dc:f5:0d:bc:77:4f:ef:86:a4:
8b:d6:fa:d3:78:01:8e:f1:ed:41:f2:75:60:27:e3:be:ba:ef:
c4:fb:7f:db:6d:4d:64:fc:40:00:34:66:58:b4:24:19:9b:e6:
4e:27:f0:56:67:72:26:39:56:4e:7f:8a:84:51:c7:f8:5d:f6:
5a:fd:e4:92:bc:86:a5:c5:38:a8:40:f6:03:09:bd:a0:10:0c:
e8:17:4c:60:c1:1f:c6:c1:27:65:3c:f4:9f:3b:99:a4:73:11:
77:f6:89:1f:0b:1f:5e:f9:e6:22:16:4c:97:33:e0:c1:95:3e:
d7:5e:d9:1f:07:a0:ad:3a:95:ae:33:8b:d9:c7:71:3d:fe:83:
a7:fd:ee:d4:b8:c3:37:21:c6:7d:45:69:38:86:fb:0b:b3:1a:
19:ba:83:3e:04:11:71:7c:0c:73:36:0f:95:fc:4a:d6:fb:0f:
73:24:36:b2:c2:d0:c8:e3:21:b7:fe:f0:48:59:77:e3:7f:03:
3f:c7:8d:8d:44:2a:80:42:40:c1:66:06:20:67:29:0e:3f:4f:
8e:92:a4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:15:51 2025 by rpki-client