Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: rhreRxjArbfUMN+mYx1pTrkdSgli21t4PKA+J99Dy4s=
Subject key identifier: 7E:0E:7F:2E:42:CB:04:6E:09:69:53:F2:B0:E3:EF:84:C5:54:A4:0C
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 01964B902943B04046BEA2507A1A4FAE93BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 0CB5
Signing time: Sat 19 Apr 2025 01:01:00 +0000
Manifest this update: Sat 19 Apr 2025 01:01:00 +0000
Manifest next update: Sun 20 Apr 2025 01:01:00 +0000
Files and hashes: 1: XZ2L7tby58uG7r0ttQk5HwT9l8k.roa (hash: oQ6DroqRbFL+VaKJERXvf6dbj57Lt/0NRTKEGy5wXFQ=)
2: ouICw0nyK_0-5jscxv12aq634vw.roa (hash: ZpjXF6V0UreF7p2IPTzGzZ30r7TGS05jqHG074BeOko=)
3: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: 3edOoK2JpotQlTr13Imw8YH5mz8w8mbl1sEVtuUgtbg=)
4: s9Phn4LRxq3qJKp5WG1zCsRMWlc.roa (hash: 5LFQTKOZRBYzOCfam8/FRn4XdqXt/6yCH7PjQq7YFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:29:43:b0:40:46:be:a2:50:7a:1a:4f:ae:93:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Apr 19 01:01:00 2025 GMT
Not After : Apr 20 01:01:00 2025 GMT
Subject: CN=7e0e7f2e42cb046e096953f2b0e3ef84c554a40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:da:2e:a5:f3:53:dc:f6:10:de:de:73:57:
f2:37:d2:a0:22:b5:b5:ec:fb:1f:88:44:ca:11:36:
6c:32:89:c5:6d:07:e0:d8:b5:f9:99:3b:4e:49:2a:
e9:8e:f7:45:a2:7a:7f:f0:f2:71:11:44:73:a1:bb:
71:69:89:21:14:2d:8d:41:1b:27:ad:ad:7a:c9:24:
70:48:01:2e:f1:27:88:97:94:12:2a:ad:ad:a3:ad:
6d:56:ed:81:b0:c5:d7:30:38:1e:be:0b:f2:54:74:
ad:6e:d0:e8:1b:db:f1:d6:84:36:ef:f4:8c:d3:54:
07:cb:4a:3a:90:e5:a5:96:fb:26:d0:a8:db:7a:a1:
ac:c3:79:0b:7e:7c:68:f9:17:6e:ae:59:cb:1c:31:
97:e1:f7:9e:1c:e7:a3:28:d8:99:a3:5c:1d:41:2c:
7f:ee:a7:e1:a2:d0:54:ec:f7:4a:54:be:9d:f4:90:
a9:55:f3:73:d9:b3:15:3b:4e:a5:08:44:f9:f2:0d:
ad:08:e8:c2:ea:ab:96:fa:34:e3:08:f3:eb:f4:6a:
77:2c:c2:67:6a:69:4a:ed:a9:96:c1:81:9a:03:3d:
bf:cf:14:32:fe:a0:dc:a1:0c:4a:b2:58:37:ee:d1:
e5:9d:10:49:a2:91:6c:88:6b:b9:a0:66:c2:49:d1:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0E:7F:2E:42:CB:04:6E:09:69:53:F2:B0:E3:EF:84:C5:54:A4:0C
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7e:61:fa:e8:38:0c:37:c8:94:fd:a8:94:01:fc:b0:35:6c:
9a:ad:fe:7c:6b:85:6f:c3:b2:0f:53:e4:dd:ac:c7:c3:f1:6a:
f1:b5:50:69:c2:86:48:c0:c0:20:21:b9:35:64:c6:cc:44:f5:
bf:b8:ca:9c:d4:79:02:00:df:5e:85:fb:95:31:5a:7c:db:45:
73:9a:e4:3f:d4:d9:50:11:0e:d5:96:3e:4f:c0:2f:ed:21:d1:
b3:86:e9:74:0d:25:89:18:d7:ef:38:10:d2:a5:17:14:08:d9:
0b:12:46:9b:c2:b6:5f:8d:15:a5:a5:c0:d6:ab:4e:c3:92:b7:
a1:53:c6:c0:52:3c:80:42:da:ec:da:1d:13:4f:9a:c8:08:78:
b0:33:04:90:32:d4:fb:3d:c1:10:ce:2b:6f:a5:d8:4d:b0:aa:
7a:be:f0:0e:5c:11:87:26:7f:4e:dc:4a:f5:89:5d:39:16:2a:
5f:60:95:51:ee:cc:23:55:f3:58:4e:f3:8d:6f:c6:3c:13:49:
25:bb:be:00:eb:10:d0:f2:65:0d:4e:22:d3:93:8b:2c:4b:ce:
ae:16:04:b1:cf:f1:28:c2:9e:f9:bf:9d:ed:59:b8:74:d9:cb:
5c:c6:88:5a:84:b9:a6:32:98:c8:6c:b2:43:51:6b:1e:f6:1b:
89:b6:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:06:02 2025 by rpki-client