Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier: rWOX5NNG4M3edsdKi4U44plds3UUPKTfPpMK4kjgoZc=
Subject key identifier: 86:D3:01:47:BD:71:A6:64:35:EA:75:C2:FA:36:DB:98:2D:B9:03:8B
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial: 01969E9B2FC5E2DE8198CD5A59EBFD464038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 04:01:32 +0000
Manifest this update: Mon 05 May 2025 04:01:32 +0000
Manifest next update: Tue 06 May 2025 04:01:32 +0000
Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: 32NJOI9TJSs6NNFB28qtnlStyDl6LBk8YDzEUf1tQWE=)
2: t403LtXkOSW8w7w_vK-2ppXvWVA.roa (hash: kUS7ckaNEkh4qS4uYt0WI3yhqZiJYbt1KK2dO98adJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:2f:c5:e2:de:81:98:cd:5a:59:eb:fd:46:40:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Validity
Not Before: May 5 04:01:32 2025 GMT
Not After : May 6 04:01:32 2025 GMT
Subject: CN=86d30147bd71a66435ea75c2fa36db982db9038b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:b5:07:22:fc:3b:2d:e7:34:3d:bf:c7:15:
63:64:fb:ef:a0:7d:b4:68:6a:dc:54:3d:99:37:ad:
c6:d2:a0:f0:31:85:9b:05:f6:91:66:05:de:85:8d:
8c:85:7a:b2:1d:01:a1:4b:5c:7f:48:45:f6:a8:45:
42:66:e6:27:91:55:81:7c:95:b1:3f:bb:12:b1:be:
e8:43:da:9f:76:31:cb:2c:9e:d5:b4:2c:e6:d1:73:
05:b7:1e:ec:2f:c1:1b:6a:ea:25:d7:2b:e4:45:c9:
2c:3d:4e:70:e8:95:c0:e6:da:a6:7b:04:cc:82:76:
36:be:34:72:8b:74:4c:c4:3f:99:57:eb:09:82:7d:
7b:50:b4:ab:97:9b:cc:ac:23:46:26:df:63:c7:9e:
8e:ad:77:46:a3:cf:e1:af:fc:3c:01:5e:ca:c6:cb:
99:53:91:f2:a5:8b:46:e4:78:8a:3d:27:08:88:64:
36:30:b5:3a:0a:74:7c:80:bf:73:c3:91:d7:9d:e9:
1e:e1:58:73:48:65:75:7e:55:12:ae:e6:7d:c5:71:
b6:47:8f:70:ff:99:d6:f9:f2:6c:df:53:5e:4f:44:
61:06:e3:a9:4d:24:0c:a0:7d:06:e4:e5:c8:95:b1:
4f:39:11:ce:1b:7c:0a:e2:82:22:c7:33:ae:42:d6:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D3:01:47:BD:71:A6:64:35:EA:75:C2:FA:36:DB:98:2D:B9:03:8B
X509v3 Authority Key Identifier:
keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:23:7c:02:11:05:be:64:f1:b5:0b:34:29:2c:0f:08:14:2c:
00:16:ba:d2:ef:66:48:b2:f0:8c:9d:40:cc:76:26:16:64:01:
68:d0:20:04:c5:b2:11:5e:8d:5a:1f:6a:3d:06:68:88:4e:cd:
be:20:c6:74:aa:2f:d2:08:ba:0c:44:54:6e:6e:a4:30:6a:78:
75:b1:9d:9c:85:b6:58:fd:f9:76:a9:fc:50:3a:43:29:23:4c:
41:c1:58:97:05:96:f5:5a:f7:58:65:40:07:c4:c0:ec:16:97:
e2:4b:17:6a:8d:50:1d:41:33:f2:2b:26:d2:94:ff:da:df:31:
bc:a8:bd:9f:aa:75:f3:33:71:23:02:3a:7f:a9:ec:26:2a:1f:
4e:e3:da:4d:77:dc:7f:6f:02:95:00:23:2d:36:ba:2f:b8:f9:
cc:e5:51:7a:48:17:8b:9b:81:54:29:c9:0e:3d:03:ed:63:cc:
01:13:49:01:91:81:62:0b:3f:6b:85:44:28:62:32:86:27:70:
d8:4f:8d:03:94:65:12:ab:eb:72:95:7b:7a:6e:01:9e:4e:b4:
1b:86:e8:93:2e:45:ac:09:b8:85:f6:f4:28:4a:20:e2:c5:77:
38:18:10:b7:84:10:d7:63:f8:8b:36:b4:d8:80:6b:ec:61:d1:
0f:f4:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:10:55 2025 by rpki-client