Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: PpEfdqV221EBcwA0JHNvPqcBB86ssTTO0wRVOJDfGL4=
Subject key identifier: 9C:87:7B:EC:F9:A9:BD:33:4F:8D:7A:22:52:7A:4C:53:29:1C:5C:C0
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 0194C350E76FDAE4E7D840327FC3AFA5256C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 142F
Signing time: Sat 01 Feb 2025 21:00:46 +0000
Manifest this update: Sat 01 Feb 2025 21:00:46 +0000
Manifest next update: Sun 02 Feb 2025 21:00:46 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: d+Wl6TKD/x7Gk+t84oqyhkz2gmjzmGJhu6jQFg28h8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:e7:6f:da:e4:e7:d8:40:32:7f:c3:af:a5:25:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Feb 1 21:00:46 2025 GMT
Not After : Feb 2 21:00:46 2025 GMT
Subject: CN=9c877becf9a9bd334f8d7a22527a4c53291c5cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:ff:db:da:c5:3f:18:15:26:01:99:11:9f:
44:ff:48:f5:57:93:86:4e:df:ef:51:16:e4:b9:0f:
28:52:87:6d:8d:52:6f:3a:a1:1f:01:50:0b:50:dd:
fd:b3:86:92:c5:ec:95:e9:85:6b:d5:bb:31:2a:48:
a8:07:5c:96:f5:7e:a9:6c:8a:96:4e:24:fc:dc:e1:
59:b5:b3:1c:5e:c8:74:16:30:74:df:d9:ff:a9:dd:
b8:79:86:62:1e:03:4e:7b:33:e2:89:dd:40:4d:0e:
a2:21:af:d7:2e:34:53:46:03:88:6a:66:97:50:59:
d6:6a:f1:e1:e4:7d:f3:f9:ca:bb:a5:ed:e9:d4:56:
2f:fe:67:ba:9b:5e:7b:ca:a1:bb:6a:a4:6f:d1:c1:
c0:f0:90:f0:9a:08:26:48:27:cd:21:fa:a2:b1:bb:
75:a8:0b:ee:9c:63:ea:3a:10:14:82:20:75:20:3b:
92:14:2c:10:4c:b4:d3:44:43:af:2c:24:d0:3a:4d:
15:4a:62:15:ad:39:05:8f:d3:7a:92:aa:c1:37:4e:
db:b4:db:cf:b8:b4:e1:c6:97:b3:55:2a:1f:8b:8d:
26:ed:83:0a:9f:fb:1e:45:02:3f:2b:56:85:d4:2d:
cc:03:7f:cc:2c:0a:ae:80:cf:e6:f2:99:38:e3:f9:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:87:7B:EC:F9:A9:BD:33:4F:8D:7A:22:52:7A:4C:53:29:1C:5C:C0
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:12:b5:3d:09:88:f2:c0:36:bb:68:e7:06:fd:6d:e9:7b:52:
80:6f:a7:99:42:e2:77:1b:a4:1c:b8:76:7f:14:97:7b:d0:91:
41:ac:4c:1d:92:f6:3a:2e:7f:01:98:1a:c7:bf:4a:e6:0b:93:
46:83:e1:3b:f9:41:12:6d:c4:69:0e:ad:f0:c1:ae:47:52:bc:
69:8b:03:14:fb:7f:a2:42:58:dd:72:6f:37:a2:f2:9d:b9:b3:
ad:9c:70:82:04:6b:c0:d8:69:2a:75:74:e2:33:25:ce:e3:6d:
6a:32:0c:53:a1:8b:ad:3c:33:94:e5:75:16:a4:be:6e:92:bb:
cb:6a:80:71:27:98:ce:89:bd:a3:46:7c:94:d5:2e:b9:5c:fd:
4d:08:5c:87:40:e2:e5:33:4b:14:bc:ee:08:eb:56:45:b3:90:
15:ae:1c:49:5b:5a:d8:a9:25:f6:1b:82:b1:22:fb:01:f2:89:
62:9f:c4:23:e3:27:4e:89:d5:e4:fc:03:09:e7:e3:ce:38:62:
c6:bc:ef:4d:12:ac:ce:9f:e5:07:78:0e:14:42:c5:9f:71:de:
ab:87:58:cf:2f:66:c3:d4:08:39:68:21:de:92:9f:2f:4f:c1:
27:1d:9a:ee:b4:5f:f2:2d:b6:32:3f:4d:9e:e2:97:13:bb:b5:
45:3a:f8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:40 2025 by rpki-client