Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier: LpxPL9sHEraNvQiosV/eSm36GPi0GvKSF7SPxrv+qWU=
Subject key identifier: D0:70:AA:98:9B:63:A5:8E:4F:6C:F3:3D:5E:6B:A3:89:84:8D:E0:37
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 0196B1EA928277C1A208DB2DFF0436B9144D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number: 0615
Signing time: Thu 08 May 2025 22:01:02 +0000
Manifest this update: Thu 08 May 2025 22:01:02 +0000
Manifest next update: Fri 09 May 2025 22:01:02 +0000
Files and hashes: 1: lZ0k4HCeYgJ0Z--pVxoJOUL75A0.roa (hash: Eir5xG3bxnWZXnAYjpN3gzblSfPJDFtKlMunMUTHMBs=)
2: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: 63UcjevW9fcE3qVhLWXWbNK44T0eFSk5HkDhHIROhog=)
3: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=)
4: vi8z9iHTOaB2FWHQdJejTeAcw5Y.roa (hash: TDy4p0/0R2wjKaBRPb/eq3sprSVIkaJesmw7dyJ2VEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:92:82:77:c1:a2:08:db:2d:ff:04:36:b9:14:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: May 8 22:01:02 2025 GMT
Not After : May 9 22:01:02 2025 GMT
Subject: CN=d070aa989b63a58e4f6cf33d5e6ba389848de037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:76:b1:45:62:d5:88:e5:16:67:cc:01:c7:
77:42:52:86:68:d0:60:96:93:8c:2c:87:55:a5:96:
20:33:b4:72:f9:3b:17:0b:1d:13:57:a0:0e:ab:16:
64:60:78:f3:26:bd:d6:1c:61:55:68:e0:81:11:71:
24:62:76:d4:14:d5:6b:e2:5e:e0:22:1e:4c:9d:82:
8e:4e:fd:f8:16:a4:58:70:ff:55:df:0e:e2:ef:7a:
d7:5d:85:1e:0c:3d:56:22:57:2c:8f:e0:a4:fd:29:
9a:57:7e:ec:4b:23:46:39:e4:69:88:2b:f5:64:46:
6c:ad:65:a2:b9:b3:36:03:2d:04:6e:3f:22:86:14:
2d:3b:b2:e0:60:93:5f:2e:51:e9:38:43:59:d8:91:
cd:4c:3d:bc:ad:cb:c5:aa:26:21:88:c2:53:38:ef:
fa:91:58:37:c8:f5:dd:32:be:25:77:54:52:51:83:
be:2f:88:e5:61:e5:18:18:e5:04:4c:12:c3:91:3e:
07:f2:21:a0:a4:2f:de:ff:33:06:3b:be:0c:ed:8c:
4a:f1:22:cf:ac:d4:a0:e1:54:b4:0a:63:6f:8d:1c:
69:98:96:2c:fb:f8:fa:d2:cd:ea:7f:72:f9:d8:32:
87:de:88:dc:46:f1:80:7b:fa:9b:95:89:2a:17:64:
8c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:70:AA:98:9B:63:A5:8E:4F:6C:F3:3D:5E:6B:A3:89:84:8D:E0:37
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dd:55:2a:d3:c5:7b:c3:07:de:fb:00:2b:5e:7f:2b:71:c0:
9a:03:d0:83:ba:a1:f9:62:c0:54:f4:2c:b8:4d:f6:9b:bb:21:
e8:12:d4:31:b1:6e:3b:af:24:b0:4b:5a:4d:ef:a2:de:f6:f3:
38:6c:05:1d:b8:43:b7:4e:b0:d6:62:96:1a:b7:36:89:cc:06:
a8:a0:a1:aa:16:33:82:56:82:14:48:55:79:91:03:75:c2:59:
03:06:b4:5a:ed:f9:8c:b4:89:fa:60:d7:a2:11:6a:17:2c:95:
04:c4:38:48:7b:fa:52:2f:1d:ab:ef:42:d3:0c:02:ea:30:55:
de:4a:1b:9f:31:ef:90:58:c7:e1:56:9a:ca:77:25:a9:d5:90:
56:d3:60:56:e8:64:40:83:06:be:ba:90:31:37:01:71:88:22:
88:e1:c0:c8:39:e4:21:4a:46:44:56:9f:45:57:54:25:83:e7:
87:da:74:4e:0b:0c:00:cb:b5:41:15:f2:81:c1:a6:4d:df:83:
ea:3b:8a:91:73:e7:d1:96:b0:e9:22:19:31:5d:2a:a4:24:98:
f5:d3:16:47:70:e5:14:d8:42:eb:bc:8e:4f:46:f3:91:f2:25:
ba:1f:42:30:d1:a7:30:69:4a:57:f2:53:6c:60:77:a2:d2:72:
f4:7b:71:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:13:48 2025 by rpki-client