Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
File: pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft (raw, json)
Hash identifier: fxKU+wpnpXW/DY3DWtigPKMMl6UZQx9e9Xv0eEN7IDs=
Subject key identifier: 35:BE:CD:B7:79:26:E7:E8:D7:95:E5:6A:1C:42:F3:BB:F4:ED:B8:12
Authority key identifier: A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
Certificate issuer: /CN=a634878281144a46a856003d622f6141ea4e006f
Certificate serial: 019655006709DB9DA588EC885EB0BFA61E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 21:00:11 +0000
Manifest this update: Sun 20 Apr 2025 21:00:11 +0000
Manifest next update: Mon 21 Apr 2025 21:00:11 +0000
Files and hashes: 1: BC9YAXepVvBWb0SpmFLnGsiu_0U.roa (hash: aM6wNA8MxfdfUppHaLmRAdGV0kYIIUvP9jpBwEyPjpo=)
2: _XoxeAXZ_0NOSgriyXyYImr8sp4.roa (hash: 95zz7gDtzubb5S5SZ2yFR8QhWyDigdhIQZqm7xDPB7s=)
3: pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl (hash: Hb2I+C59+YdIj+WwRe4uLFD8GTD/3vhAR+Sas0bXRIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:67:09:db:9d:a5:88:ec:88:5e:b0:bf:a6:1e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a634878281144a46a856003d622f6141ea4e006f
Validity
Not Before: Apr 20 21:00:11 2025 GMT
Not After : Apr 21 21:00:11 2025 GMT
Subject: CN=35becdb77926e7e8d795e56a1c42f3bbf4edb812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:10:96:c8:8a:87:58:07:43:fe:81:da:f0:
d0:a4:15:ae:c8:0b:1b:b7:6a:40:47:1e:32:05:cf:
2b:12:41:d0:c9:7d:1a:04:a5:72:25:ba:af:ce:d9:
bc:6b:cf:f3:28:f0:17:db:d7:ef:66:8d:32:d5:6b:
1f:ea:88:da:0d:cb:88:6e:5e:f3:6d:ff:07:fa:78:
ed:16:77:5f:e9:fc:03:78:97:2a:94:a4:df:7f:fb:
ce:ec:df:a4:61:d1:1b:26:77:6a:fb:cb:e8:32:b9:
06:da:45:a1:ab:dd:fe:4b:c2:ec:e1:b6:9e:bc:bf:
a5:cd:ff:a0:56:d7:86:a8:bf:bb:6b:eb:e8:c2:2a:
10:1a:25:04:b2:94:24:aa:2f:f0:01:8f:e5:0a:6f:
1a:2f:41:13:ec:ff:78:cd:17:c0:ed:53:78:99:96:
38:99:e7:84:92:c7:2d:bb:ea:52:7c:2d:ed:37:5d:
a7:a9:75:f8:b1:44:8b:cf:1f:47:5c:7c:d2:f5:bd:
74:12:06:3a:7e:92:89:0d:12:3c:1c:5b:9c:7f:38:
f2:7a:d6:14:2c:54:15:92:53:80:eb:21:eb:ad:7f:
5e:a7:2f:10:e9:ef:43:8e:4f:a4:ed:e7:2a:3b:f3:
e6:22:b9:39:36:1d:38:01:d4:8b:d5:86:3a:65:0c:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BE:CD:B7:79:26:E7:E8:D7:95:E5:6A:1C:42:F3:BB:F4:ED:B8:12
X509v3 Authority Key Identifier:
keyid:A6:34:87:82:81:14:4A:46:A8:56:00:3D:62:2F:61:41:EA:4E:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjSHgoEUSkaoVgA9Yi9hQepOAG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c345f3-b53a-41bf-996b-34b8d9de96ca/1/pjSHgoEUSkaoVgA9Yi9hQepOAG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d1:46:a4:3f:dd:2b:dc:24:54:5b:0c:ff:cd:8f:ec:f0:f9:
43:94:8c:40:63:bf:f6:81:2c:5e:46:72:a2:75:2b:e4:d2:b3:
b1:68:77:76:10:ad:0d:7b:af:08:44:7d:e0:a6:5b:85:81:b8:
0d:dd:39:24:0a:87:81:b1:93:38:a1:c9:44:a7:55:65:4b:e3:
d5:f7:68:8d:d6:86:4c:24:33:9c:2b:63:31:1e:48:b9:74:cc:
f2:d1:a1:cc:70:6d:32:f6:3f:40:5a:68:91:4c:1e:b5:4b:6c:
c4:0d:9e:19:68:01:8a:0a:fa:4a:c9:7e:ca:ad:45:83:27:23:
77:d9:be:c5:64:c6:46:e1:bd:5d:d9:08:a2:2c:dd:f4:42:e9:
9d:b7:9f:9f:e9:37:6f:7b:b2:a1:de:96:c9:12:94:93:94:a7:
8b:9d:4e:fa:7f:cb:1b:f9:16:27:ce:8d:55:4c:e8:12:30:78:
64:9c:63:4c:f8:0f:3d:6c:f9:cb:95:ad:8d:88:39:b8:aa:c2:
85:29:86:47:94:cb:bb:e0:f6:e0:b3:02:cb:27:ef:9a:f8:74:
64:a3:6e:df:a1:b1:a6:7a:b1:8e:fe:db:c1:08:db:e4:56:f5:
13:55:26:90:6b:59:d4:ea:ac:7d:b6:f4:5d:e8:96:9a:7b:07:
3d:90:f9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:38:34 2025 by rpki-client