
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: K0MeburTEPX4ISpGljj779KmcHML+XGf1yclM4GJAQ4=
Subject key identifier: AB:3A:F9:A4:B8:50:DA:05:BA:56:2A:BF:69:A4:41:CB:C2:AE:90:3E
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 01965E0395E31F859C53E33CC7FB5FE498BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 15:00:15 +0000
Manifest this update: Tue 22 Apr 2025 15:00:15 +0000
Manifest next update: Wed 23 Apr 2025 15:00:15 +0000
Files and hashes: 1: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (hash: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: sPLSMz6xP8108Ka/35lxubsJaddE+C28Rk1Tq7J+Wfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:03:95:e3:1f:85:9c:53:e3:3c:c7:fb:5f:e4:98:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Apr 22 15:00:15 2025 GMT
Not After : Apr 23 15:00:15 2025 GMT
Subject: CN=ab3af9a4b850da05ba562abf69a441cbc2ae903e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:24:1e:9d:da:8c:bf:8c:df:97:b5:0f:00:
a5:5e:4e:8b:c4:20:55:3c:12:0d:8c:fd:dd:c4:10:
e8:8a:4d:99:f9:a4:30:6a:ff:5d:ee:93:3d:ff:f8:
97:03:fe:c1:79:f0:27:ce:f8:c2:d4:48:9a:e9:9b:
75:d9:e9:01:80:bc:10:5c:6f:01:4a:82:21:6a:29:
d7:15:a2:d2:04:36:f3:02:73:47:39:fe:fd:cb:56:
a9:53:19:73:61:d5:c6:97:e6:a6:81:82:0d:92:a5:
d6:75:bd:3b:3d:f1:b8:e3:cd:fe:5b:5f:93:78:cc:
c0:db:36:1f:31:48:75:cf:c6:ee:53:bb:5e:a4:82:
75:00:a1:37:62:7e:4c:87:a1:09:e8:76:03:e8:90:
2d:a7:55:98:21:15:b3:0f:fe:75:41:d9:bd:61:78:
95:eb:2f:97:94:80:b0:0d:26:ee:ef:6e:f9:10:e6:
9f:73:87:40:f5:6a:5b:94:2b:68:50:ad:70:f2:52:
69:eb:7d:85:68:6a:e7:9a:7e:09:53:a4:f3:13:79:
f0:65:1a:ff:f1:19:14:00:3f:48:c8:bc:61:e9:e8:
77:b2:b4:1b:6f:5a:79:90:9e:e4:d8:d8:f4:31:14:
16:b7:0d:9e:06:40:d4:27:ab:44:98:62:46:13:20:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3A:F9:A4:B8:50:DA:05:BA:56:2A:BF:69:A4:41:CB:C2:AE:90:3E
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:80:01:d8:eb:65:2c:94:c7:f8:e3:e7:ce:8b:56:03:4a:7e:
ca:ad:c0:95:79:35:1c:a4:60:20:12:b7:70:9d:15:d9:b9:d7:
32:13:32:a7:57:6e:c5:c4:b1:03:98:f6:13:ca:50:a2:34:58:
de:8a:50:32:ed:1e:56:84:7c:86:58:09:1c:9d:55:7e:b9:1b:
04:87:bb:8d:fd:2d:cd:bc:ff:3b:95:e2:fe:71:52:5d:0f:01:
44:69:40:27:30:ef:1c:c8:3d:b5:ea:dd:6f:19:71:49:0b:85:
2a:34:43:ea:10:d7:61:59:f7:57:c7:b5:75:fa:37:5a:26:83:
47:f3:5c:e2:99:58:60:58:5b:71:50:85:ed:83:aa:17:ba:af:
6b:bf:92:c0:0a:79:c7:8a:b1:a3:10:db:83:a2:9e:63:4c:d9:
1c:bd:10:ef:d9:77:48:23:ff:05:97:f3:cb:c5:ca:66:35:92:
41:11:5a:5d:f0:48:62:2e:a4:43:e4:9e:82:2b:61:48:97:ac:
c4:b7:04:90:f7:12:da:42:0a:b2:70:d4:07:19:35:95:0e:67:
fe:31:40:56:10:dc:07:ad:c6:2a:cc:65:a6:0c:38:3a:5b:41:
58:ce:30:54:8d:5a:39:c7:4a:aa:ed:d9:f7:53:04:aa:f1:d5:
02:d6:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:12:49 2025 by rpki-client