Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: cDRUw4BVhGGJximfry3JMgla9Iiq6NEm08t+BdAEetM=
Subject key identifier: C6:13:D2:37:1E:82:2B:A2:3A:FC:03:42:1D:06:B7:F0:71:3F:C0:39
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 01964331B9C9CB97A8E87AD3EDC07903638C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 14F9
Signing time: Thu 17 Apr 2025 10:00:54 +0000
Manifest this update: Thu 17 Apr 2025 10:00:54 +0000
Manifest next update: Fri 18 Apr 2025 10:00:54 +0000
Files and hashes: 1: 41_o2BIwv76TF64VP1DAdfjTxPo.roa (hash: ZsvXvwGlxNqhMT0bqp079C/5ezKY6fiYSiOoxT1NO2o=)
2: 4mRSyOWbS8hQScfHLulGf4Y6ZgQ.roa (hash: o3JSSVtXNFoFrqvnt6XhA+Y0uItKhtMcyPKqriXcd08=)
3: Qw_MgL0jZxAEcUaQV1xqF4PVe2w.roa (hash: K6DZu82eoM3254ECuNlV9U+0ldDohrzL2NCBM61LLzM=)
4: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (hash: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=)
5: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: SZ1Xf23HBcPLK/uQ0/ZhdarePPOyMxHm0eO8Q0iJk3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:31:b9:c9:cb:97:a8:e8:7a:d3:ed:c0:79:03:63:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Apr 17 10:00:54 2025 GMT
Not After : Apr 18 10:00:54 2025 GMT
Subject: CN=c613d2371e822ba23afc03421d06b7f0713fc039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:73:21:81:47:4d:02:5e:34:64:1e:d0:5b:
01:38:01:2b:9e:a9:ce:87:c5:ed:91:05:3d:35:94:
37:16:e8:a4:18:94:1a:7a:d4:77:13:fc:2c:4e:10:
22:e7:4f:d4:64:38:45:70:89:e4:68:83:99:c3:d1:
4c:64:e7:0f:96:40:59:db:56:26:01:58:f4:0d:e9:
cd:42:a7:80:22:ec:a5:83:5a:8c:5f:1c:81:a0:66:
db:98:46:66:e9:f4:ef:89:37:07:7f:d3:2a:e6:10:
18:d7:50:44:11:31:26:59:c3:85:25:5c:e4:75:20:
a5:38:13:d7:78:d3:1f:0c:3e:de:eb:a2:25:63:73:
1e:50:3e:19:2f:47:db:51:74:ea:0d:d2:cb:c0:da:
8d:c5:0e:1a:1e:0b:79:50:91:9c:d5:ed:d3:8b:7c:
60:5f:6f:11:6e:d1:ff:07:53:3f:a0:8c:fe:0c:7b:
48:d9:c8:b1:79:95:ba:80:58:33:32:e7:d1:59:d2:
eb:81:81:eb:79:0c:6e:75:e4:bb:16:87:c9:c5:34:
cf:a5:43:3b:9e:0d:52:64:db:8f:cc:b7:7d:3c:c0:
4b:10:bb:6f:66:90:05:78:0b:8f:cb:9c:b0:7b:0d:
5d:d8:b6:04:fc:d1:4e:f6:2a:6d:15:7c:31:c3:8b:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:13:D2:37:1E:82:2B:A2:3A:FC:03:42:1D:06:B7:F0:71:3F:C0:39
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:dc:cb:d2:17:ab:dd:24:2b:f3:5a:6e:7b:54:44:e4:f1:d8:
2a:1d:36:f6:11:76:73:d6:42:b9:e8:95:0f:b4:d5:85:3e:8b:
96:b2:c3:40:fe:e2:fe:59:dd:91:92:49:01:51:6b:fa:36:c3:
ad:78:e8:d5:a8:c2:4e:8f:50:28:c4:22:b7:a5:68:2a:52:34:
69:58:64:32:dc:71:cb:b8:e0:15:65:4d:6f:92:33:9e:78:e2:
e4:0b:bf:ff:f4:c5:25:50:46:35:dd:6f:58:80:a1:4f:6d:82:
a2:5e:58:08:bb:54:78:6f:94:0a:69:61:71:f1:02:a7:59:19:
dc:16:84:6b:dc:58:c0:2f:ce:8c:c9:26:de:e5:72:bb:c8:e7:
21:a2:a6:ef:d5:24:75:bb:0c:bb:c2:0c:d9:b2:59:6a:9d:e2:
18:33:a7:da:f3:66:d5:c9:45:f3:48:73:71:84:e4:7c:7b:9f:
97:90:d9:31:fd:17:7d:f9:1a:ef:35:cd:d2:d9:12:c6:3a:c0:
ca:42:e7:c1:d7:9e:2f:4f:57:89:a8:76:35:62:94:ef:83:ef:
9a:7a:9f:93:5b:50:a6:2c:45:19:36:87:0e:48:6a:d2:3a:12:
2a:e4:79:20:43:da:7d:d8:45:f9:43:51:79:15:73:1b:0d:65:
1a:13:7d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:30:33 2025 by rpki-client