Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: +tZg9WPdHdsvAbRsAcskfI/urQIhXeInCGUM90pRutE=
Subject key identifier: 83:B2:AE:74:0A:34:E8:29:5A:AD:C1:8E:C9:C4:AD:85:8C:B9:AE:AE
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 0196BFA568B0A8F49BA4D6C5B0C1404B110B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0AA4
Signing time: Sun 11 May 2025 14:00:10 +0000
Manifest this update: Sun 11 May 2025 14:00:10 +0000
Manifest next update: Mon 12 May 2025 14:00:10 +0000
Files and hashes: 1: 3jGH9AQ5aWB2kYRZEpoWn64dzqI.roa (hash: mK77SHrTSUU+2PPMNJ5ZxTHh7M0JMXsgDTv7jrMi+AM=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: zH+vjKbXYHdbWOk0S76qN7sj50ggProjVM71E1IwUk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:68:b0:a8:f4:9b:a4:d6:c5:b0:c1:40:4b:11:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: May 11 14:00:10 2025 GMT
Not After : May 12 14:00:10 2025 GMT
Subject: CN=83b2ae740a34e8295aadc18ec9c4ad858cb9aeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7e:38:bd:4e:ac:c4:4e:93:25:35:ad:a1:40:
7b:2f:69:70:c9:4a:59:71:a7:1c:dc:b4:f6:1c:51:
c2:52:29:f2:cd:18:d8:9a:44:90:5e:5d:6d:b5:20:
e9:90:8e:02:75:b4:d0:86:ce:1d:18:05:9b:81:bd:
5d:a9:13:96:e8:33:a5:17:0f:66:8d:79:27:f0:56:
8a:98:dd:96:a1:ec:1c:54:bc:14:3a:6e:15:3a:96:
46:af:49:51:24:f2:5d:d1:c7:75:72:f2:f4:06:bd:
e9:4e:c0:7e:b0:55:9c:f5:aa:7e:39:a1:77:ca:78:
57:84:30:b6:fe:fa:02:a2:54:ba:64:0d:1a:da:21:
c0:70:43:f3:e7:68:f0:b2:41:ed:77:02:79:6f:11:
36:fe:9d:52:ee:88:ae:71:8f:fc:f4:aa:f2:65:07:
4e:d9:43:e0:b5:9a:e4:fb:e2:3e:e7:77:d0:23:3d:
81:ee:ed:75:ca:1f:8e:c9:20:c5:0e:ad:69:c1:48:
60:fc:f5:ad:4f:29:9e:81:21:1e:e9:74:56:a7:93:
5a:8a:58:11:5d:aa:dc:6a:ae:39:21:d8:db:9e:08:
57:65:d2:cf:ab:cb:f7:2a:0a:5d:3c:d3:ed:ad:97:
22:e3:3d:60:8a:32:a8:c2:77:c5:30:15:f8:7a:4f:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B2:AE:74:0A:34:E8:29:5A:AD:C1:8E:C9:C4:AD:85:8C:B9:AE:AE
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7f:58:48:eb:f9:8d:aa:2c:6b:62:9b:0d:03:f8:57:d4:3a:
c3:a3:9c:17:ad:9e:fa:a3:1b:98:e3:0e:87:7f:08:1a:ef:29:
7e:11:97:12:13:61:8d:19:a4:b4:4d:02:73:df:8c:ef:c1:1b:
b8:63:f8:70:7e:ed:d1:4f:da:5a:fc:f4:ca:b1:26:c6:53:ff:
1a:41:5e:5e:b0:a8:cc:4b:9c:71:68:e9:17:24:ed:ce:f7:56:
55:76:c8:dc:ff:e9:49:c8:ae:29:06:9c:1a:50:8b:95:3f:b8:
6f:b9:30:0e:16:81:9f:45:56:95:db:ff:3b:e1:ec:4a:12:11:
e2:aa:33:60:43:0e:59:f5:80:c1:8e:aa:39:d7:ca:c9:60:0d:
9d:57:05:e6:75:30:d9:fb:db:19:5d:a7:1c:eb:d9:2a:d0:e8:
13:5d:aa:63:73:b6:ad:ee:e4:39:16:20:28:a0:dc:2d:62:56:
18:98:96:d1:61:df:8e:d7:e8:69:8f:6c:a3:7d:67:0a:6b:ef:
e3:d9:dd:81:13:09:29:32:63:e4:ad:e0:5b:e0:e1:8a:c5:ca:
27:88:1e:a4:a8:39:dd:3a:3d:6d:82:b9:53:52:9a:07:e7:a1:
eb:0c:30:10:4e:43:3b:52:95:28:64:bb:33:1d:bf:b1:d1:c1:
b5:d1:a6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:17:02 2025 by rpki-client