Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: uWCo8eMG9QOQ+JMPbgJxfQrSn2T9szr2hs9ZfVixyUk=
Subject key identifier: 94:42:C0:E1:C0:F6:2F:52:37:21:C2:A8:EA:3B:D2:FC:52:54:0C:DE
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 01964C347BD154D890898DFA6EA48447A2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 04:00:30 +0000
Manifest this update: Sat 19 Apr 2025 04:00:30 +0000
Manifest next update: Sun 20 Apr 2025 04:00:30 +0000
Files and hashes: 1: 5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (hash: SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=)
2: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (hash: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=)
3: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: n3KMWKqyNlfg6CjiG67y3MBnVOCyv9Kzm6RHA3ggpvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:7b:d1:54:d8:90:89:8d:fa:6e:a4:84:47:a2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Apr 19 04:00:30 2025 GMT
Not After : Apr 20 04:00:30 2025 GMT
Subject: CN=9442c0e1c0f62f523721c2a8ea3bd2fc52540cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:87:4f:73:12:0a:a6:c2:db:71:e8:bd:c7:
98:0c:09:d7:bb:53:42:0d:94:94:4c:69:c1:c9:8c:
31:92:c8:58:c7:76:1a:ab:f0:a6:67:01:c0:6b:be:
84:b9:72:99:fb:72:c3:23:b4:aa:bf:5d:68:f3:97:
e3:5a:0c:2e:2f:83:68:7b:9e:17:8d:65:92:a7:e9:
27:c5:4f:77:4e:cb:4a:7b:80:ca:61:54:2f:01:a7:
f1:ad:39:73:af:d4:71:8d:2f:5b:97:9b:bd:23:10:
55:30:f8:64:8f:96:6a:d3:79:8e:df:1f:dc:b7:55:
9f:68:73:6d:3f:56:6b:02:cd:71:2f:09:c0:d6:72:
af:d3:6c:eb:19:83:4d:58:4a:ea:ae:a3:a0:d4:55:
88:cc:a9:82:43:ca:68:0b:d4:4f:1f:20:7b:98:7b:
39:22:8e:c3:fd:d8:e8:17:a7:35:2a:99:2d:45:ef:
67:4c:f8:d3:66:c4:15:3a:a0:68:17:ac:33:b4:f1:
9e:5e:fa:0c:7e:89:0f:53:4a:1c:92:b3:4b:4e:cb:
da:18:b2:56:87:0f:1a:81:a5:3a:5f:8d:b8:bd:9c:
fb:ec:20:0c:f2:ae:b2:79:c1:6c:8f:06:ff:73:41:
d0:90:37:85:11:ff:35:0d:b3:e2:33:a0:7d:37:e8:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:C0:E1:C0:F6:2F:52:37:21:C2:A8:EA:3B:D2:FC:52:54:0C:DE
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:52:6d:87:0a:dc:cc:20:5a:bb:95:f9:a0:be:5f:04:ff:9f:
7c:f3:ac:0d:f4:f5:cb:9b:0c:85:ff:0a:a0:59:90:43:21:90:
b5:8b:1e:d5:67:7e:f5:37:57:63:b5:97:e2:ca:1a:b0:ca:c9:
36:bd:ad:c2:26:8c:4d:df:3f:43:c3:c0:7a:86:de:bb:0f:f8:
00:c1:d0:14:70:4a:e1:e3:b9:86:b1:07:80:f3:51:1c:0f:67:
c2:fc:c8:31:c7:a9:2a:64:d6:34:6b:b2:f3:ad:e7:f4:67:76:
e1:68:54:a2:54:a3:49:22:72:a1:60:8f:60:ef:7e:75:b0:81:
1d:62:13:17:a8:08:e5:93:3e:d7:fc:68:7b:f9:64:91:ef:9a:
d1:ee:e6:b0:ef:f5:83:43:42:1f:44:f2:21:29:04:f6:3f:6b:
e7:31:d6:bd:0c:92:d5:60:25:37:54:61:5f:ed:8b:69:45:99:
f9:18:e9:52:75:b4:37:d5:e2:69:37:6c:a7:0e:58:af:16:ee:
47:f4:34:66:7c:99:e2:27:f0:f7:5e:ca:ec:76:e8:4e:87:0a:
c3:bf:63:b5:15:22:b9:44:13:b8:a3:c0:2d:b8:9e:b2:1f:f2:
f6:ab:98:ea:6d:b5:78:a1:8d:a9:d9:59:ee:e2:f4:98:97:7f:
5f:b7:8f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:06 2025 by rpki-client