Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File: pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier: UIJbgUY8kCCvr/rBAMeR6nTYV6sMAq8slvzebNuFvGQ=
Subject key identifier: CC:4E:62:27:8D:6F:3E:94:BC:9D:27:23:51:87:D6:BA:74:7C:1B:30
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer: /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial: 0196B935FC97F1BC2A69E01ECFC9EAE6817D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 08:00:45 +0000
Manifest this update: Sat 10 May 2025 08:00:45 +0000
Manifest next update: Sun 11 May 2025 08:00:45 +0000
Files and hashes: 1: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: oW9UL0JsMlFsmXF8GemAue6w87CbPYm0MsuxSK7YpSQ=)
2: vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa (hash: tQbWOVu74034awYo0QKVFApUcQf9SPwefFwA/Lt3iQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:fc:97:f1:bc:2a:69:e0:1e:cf:c9:ea:e6:81:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Validity
Not Before: May 10 08:00:45 2025 GMT
Not After : May 11 08:00:45 2025 GMT
Subject: CN=cc4e62278d6f3e94bc9d27235187d6ba747c1b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ce:4b:56:11:a5:d5:c9:b6:d8:3f:d1:ac:f2:
e2:cd:d1:af:e5:48:51:12:bd:bd:e8:e3:ea:dc:cd:
3c:7a:6f:61:cf:0b:dc:66:5a:d3:4f:74:06:07:66:
0d:c1:ab:08:c9:f3:61:c9:6c:0e:9f:b2:ce:fe:91:
d0:15:58:43:9b:b4:a7:aa:f7:fc:a4:12:9c:9f:67:
d5:84:ee:d2:aa:7c:66:05:5b:4b:bc:ab:ec:08:0c:
c0:2a:0d:1d:01:e4:eb:ec:b0:9d:f7:f8:3d:84:7c:
4a:e1:b4:29:fc:84:45:5d:b0:aa:6e:64:ca:d9:26:
44:20:e0:ff:f2:f5:0c:63:28:ea:3a:c5:c7:cf:bf:
95:e7:cd:9e:31:35:2b:ee:66:8d:78:52:2a:18:78:
70:18:49:f9:4b:bf:5e:ec:ae:0a:41:8f:9d:a7:41:
bf:b0:fa:93:e2:b9:fe:98:0d:13:64:a6:94:54:c1:
49:c0:02:8e:11:d0:f4:50:70:be:f1:4a:c3:e7:a0:
49:ee:ec:bd:31:9e:8d:dc:14:22:08:b4:17:28:cb:
7a:80:2e:77:7b:68:0d:56:f2:6d:83:20:cf:15:ff:
33:1a:ed:00:07:11:3b:55:d7:df:24:43:cb:61:de:
e6:cf:54:56:31:56:53:f5:f3:f6:94:c4:d9:10:87:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4E:62:27:8D:6F:3E:94:BC:9D:27:23:51:87:D6:BA:74:7C:1B:30
X509v3 Authority Key Identifier:
keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:16:f1:dc:47:78:c7:c2:4e:d5:d4:5e:d4:d2:20:50:02:0b:
42:19:a7:1d:ba:b0:19:5e:0d:27:80:99:14:fe:f5:f6:59:18:
0e:88:c1:13:18:f4:7d:ec:d6:21:60:c9:86:b7:70:7c:16:36:
53:a6:ec:38:dc:e3:96:08:6b:ac:54:e3:7a:04:50:70:bd:84:
e7:a9:da:c5:8d:0b:aa:b5:b1:b9:03:a4:af:07:b5:69:e7:41:
de:85:cf:f3:aa:96:13:25:77:15:0b:cf:72:e5:b2:90:70:eb:
c5:c5:fd:4b:8c:8e:3a:ca:90:e6:1e:dc:ef:46:ad:4c:6f:7b:
3c:11:20:5b:09:0d:7d:92:1a:fb:00:8c:2f:fa:c6:36:71:47:
5f:47:13:af:43:4d:6a:26:78:d4:56:e5:9b:41:79:a9:6a:9c:
01:a8:46:4d:5a:3e:a4:70:76:0d:c4:a4:cd:d2:ab:e3:cc:e3:
2c:94:34:dc:5f:3c:8b:bc:28:77:a7:83:8d:d5:8e:ad:d9:d0:
11:64:00:6a:ba:cb:f9:30:df:bb:0b:b2:f4:00:08:c4:a3:df:
54:20:8a:d7:7b:e2:0a:2d:23:f7:74:df:50:d0:49:ac:cd:44:
5e:27:a3:1c:10:87:72:bf:a3:99:fc:fd:eb:b7:90:a7:10:e4:
13:bc:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:53:53 2025 by rpki-client