Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
File: pPC-25eOGSjR6XDKLtlpNxGP_2g.mft (raw, json)
Hash identifier: ai3YCRmZ1wmschjttkylPjvY1aITMRPjDmLC9rFtqGw=
Subject key identifier: C7:31:AA:AA:53:6E:4F:06:97:38:97:E0:EA:4C:9F:F3:66:73:F3:9B
Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
Certificate issuer: /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Certificate serial: 0196A5E5C349E66A4CA326C44A9D7CA3EFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
Manifest number: 0EA9
Signing time: Tue 06 May 2025 14:00:20 +0000
Manifest this update: Tue 06 May 2025 14:00:20 +0000
Manifest next update: Wed 07 May 2025 14:00:20 +0000
Files and hashes: 1: 9p8e9WoA4C2DPVeIchZFPcz6XaE.roa (hash: 08xeCtquw3Dlp/xIPaCDCsu7UXWt+ysM9TiqCqTDfRY=)
2: pPC-25eOGSjR6XDKLtlpNxGP_2g.crl (hash: cIig06Q81Eu2390pcS2MZASwdmxx363/YkCsqtAEoi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:e5:c3:49:e6:6a:4c:a3:26:c4:4a:9d:7c:a3:ef:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Validity
Not Before: May 6 14:00:20 2025 GMT
Not After : May 7 14:00:20 2025 GMT
Subject: CN=c731aaaa536e4f06973897e0ea4c9ff36673f39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:fd:ac:09:d8:b0:71:c6:87:87:f3:7a:3a:
b8:e7:8d:b2:f4:f0:65:4a:a6:7a:3f:74:23:04:3d:
67:d8:fe:71:db:e8:54:c4:25:6b:6c:76:4e:74:c2:
51:38:82:9e:a9:c0:e4:1c:5b:31:0c:54:27:6f:c4:
47:5a:2f:dc:6f:ad:2a:a1:30:b5:25:95:43:cd:db:
e3:f8:20:9f:6f:35:01:ed:cd:0e:07:1c:1b:fe:93:
b0:59:36:4b:64:51:9f:f9:59:43:0d:72:8c:d0:47:
62:b7:fa:24:20:51:71:92:83:cc:d8:71:21:d2:57:
bf:da:15:42:51:95:48:4e:1c:cb:c7:78:85:be:e8:
d6:d4:01:14:60:24:5c:53:84:4c:d2:5e:c0:a0:bd:
2d:e7:90:91:31:fc:de:a8:ae:bc:9f:2c:34:a9:ed:
db:e1:fb:81:3a:dd:fb:ee:03:d8:10:fa:07:7a:3d:
52:ec:dc:e4:14:29:a8:12:f8:96:f0:92:50:c0:11:
e5:a0:93:c3:d1:8a:4b:37:a3:2a:04:1e:bb:41:2a:
07:1c:ae:ce:ba:bb:18:79:be:18:b2:f5:75:d0:56:
7b:f2:1d:1c:51:a0:bf:3e:18:2c:35:3a:3d:ed:a2:
55:ae:77:fc:c5:bb:a4:c1:7c:dd:54:ea:0f:e0:c5:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:31:AA:AA:53:6E:4F:06:97:38:97:E0:EA:4C:9F:F3:66:73:F3:9B
X509v3 Authority Key Identifier:
keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2c:09:a0:4a:8e:d6:9c:57:e7:56:cf:6a:f6:5b:94:19:02:
4a:85:68:e8:fa:2d:65:a6:c2:4b:89:1d:ad:e5:3b:07:3f:56:
62:d1:88:80:75:f7:84:fc:83:83:21:99:77:95:5a:ab:38:0c:
37:ba:ac:2c:ac:75:e5:9a:42:00:38:94:6c:a2:6d:43:db:0f:
0b:be:c2:6e:dc:b3:3a:ce:c7:df:c1:2f:2a:4b:7b:1a:0f:c8:
ef:5f:f4:f8:19:b1:bd:3d:39:24:01:8b:23:ba:c8:b7:28:36:
60:d9:f7:ac:ac:48:52:54:cb:b2:fc:9c:43:3a:ee:c4:79:89:
17:a6:ec:15:32:19:83:11:85:87:6b:9e:3f:b9:45:3c:1d:18:
ce:f6:05:3f:f4:e5:36:56:b8:2d:8c:4d:e8:40:95:ac:43:95:
bf:41:2d:da:e8:36:15:be:d9:c7:6e:29:ff:6c:41:6e:b1:5b:
98:bd:d2:06:9c:2a:98:a9:d6:74:0a:8e:30:49:89:a5:ee:7d:
a0:16:f7:7a:62:c7:c5:91:11:de:57:16:fe:5e:79:19:91:c6:
b5:a1:cc:04:f7:88:12:09:d4:f4:b9:46:64:d6:60:3a:62:3a:
eb:a3:a2:f4:6d:b3:0f:d0:da:eb:bd:34:62:dd:a1:8c:1d:ff:
61:1c:ca:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:34:41 2025 by rpki-client