Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: LxgZZAnhfV8UCIlXcLi0k9mydqqykCj/evl96bHnYDs=
Subject key identifier: 99:84:6B:AF:BB:84:BB:AA:FF:6F:26:8E:39:C0:9D:7E:E9:3D:CC:5E
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 0196A465C5878627187B9D357101F47894B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 07AD
Signing time: Tue 06 May 2025 07:00:55 +0000
Manifest this update: Tue 06 May 2025 07:00:55 +0000
Manifest next update: Wed 07 May 2025 07:00:55 +0000
Files and hashes: 1: 2JNRo-dtGNGJcp7kMDpk5VpUcF4.roa (hash: sJo6COvD7U5zSVoX5aZ2ujJN+R6hvJF0qpAtUrijnZ0=)
2: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: cuJ78eQtDsqdNTXBc0RopxPfRdafszJNPVSiXCb6PaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:c5:87:86:27:18:7b:9d:35:71:01:f4:78:94:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: May 6 07:00:55 2025 GMT
Not After : May 7 07:00:55 2025 GMT
Subject: CN=99846bafbb84bbaaff6f268e39c09d7ee93dcc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:63:69:92:0a:c4:27:ee:be:d8:69:27:35:
25:f9:df:c3:b1:bf:e1:13:47:71:10:c8:d8:1d:c5:
c0:3d:90:ad:57:13:2d:9e:7e:6d:b1:66:db:a2:47:
cb:ba:3d:2c:47:9b:b7:2b:99:ad:cb:bd:c1:05:a1:
29:e6:bf:f9:41:97:74:03:ec:4f:ae:ff:23:ca:22:
40:98:77:ee:60:17:70:d5:c9:da:d5:9f:a7:65:c4:
e5:a0:b0:6d:d1:6d:57:bf:73:ef:1a:64:cf:ee:86:
47:7c:f8:5c:13:92:7b:3b:4e:9a:9f:47:33:6a:dc:
83:c5:46:da:1f:4d:bd:16:1a:c1:ca:99:1c:39:01:
90:9b:d9:2a:4e:a6:6d:fe:56:80:24:9f:6f:3e:7b:
eb:ec:c1:53:84:ad:7e:81:63:0b:07:c2:c0:24:fd:
8c:21:c3:e6:5a:5d:1e:9f:da:fc:c6:03:f4:27:31:
bb:26:0a:35:96:01:c6:5c:8b:99:07:44:f7:81:97:
7e:8d:b8:df:88:47:58:6c:ee:58:2c:d9:82:04:9b:
d6:3c:65:0a:8b:a6:fd:f6:1a:d8:88:1d:06:87:d7:
a8:96:b3:61:05:21:c3:1a:fc:af:84:16:3c:89:be:
e0:81:c6:57:e8:23:45:62:3e:7b:3e:92:9d:4c:ce:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:84:6B:AF:BB:84:BB:AA:FF:6F:26:8E:39:C0:9D:7E:E9:3D:CC:5E
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2c:8d:eb:37:db:6f:56:e4:0c:e0:b9:1a:07:f3:4a:39:96:
fb:f0:2e:64:8f:7e:f2:88:d3:d5:65:ea:68:9e:2d:6a:ed:55:
ce:e9:9e:f3:bf:f7:67:83:34:c0:0b:c6:f8:49:60:cd:d8:95:
82:8e:b3:30:16:38:ec:d1:72:2f:0b:2b:d6:9f:e8:fe:08:7f:
5d:cd:c3:2e:47:fb:f9:2c:85:0e:ef:d8:52:84:a3:01:02:ca:
26:18:63:76:c2:7b:b3:04:db:cd:85:2b:ff:e0:42:96:1c:dc:
50:74:22:8c:44:95:31:14:ea:78:ea:45:42:4e:4d:54:72:3a:
6f:1f:30:5b:a4:1f:a1:9a:0e:8b:cd:6b:20:7b:5c:52:6b:14:
98:be:ed:21:5d:99:60:80:16:11:5e:f0:f2:8e:b6:f4:95:79:
46:f2:32:e0:45:7d:2b:a7:b4:ab:5b:a2:69:20:ee:2c:1e:49:
19:5f:40:14:e8:3d:e8:b6:40:10:00:6f:66:81:68:8a:9b:1f:
10:64:f0:e0:0e:d2:b6:b0:45:61:90:3c:94:b1:00:0e:bc:45:
ab:38:6e:2b:7f:92:91:6d:6e:99:12:1b:98:94:19:2b:39:ee:
b3:96:69:81:d6:af:a7:5a:45:46:96:42:e6:5e:d5:75:67:b9:
c9:c2:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:04:47 2025 by rpki-client