Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
File: pRA1bcClIYlc5h-FSV4G2vehKzs.mft (raw, json)
Hash identifier: 8VslLFLOmkATL7vGqGItFYGwA8m31K7bAA7tMSHpMzY=
Subject key identifier: 58:03:72:D0:00:DC:5E:B4:34:A4:F6:10:10:D0:78:A5:22:94:79:CA
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial: 01969DBEB9FF71312BF46B9BAB6A57B77D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 00:00:44 +0000
Manifest this update: Mon 05 May 2025 00:00:44 +0000
Manifest next update: Tue 06 May 2025 00:00:44 +0000
Files and hashes: 1: PyDzr8WmYcRo05FGb5UzcWZdKls.roa (hash: IYIt11a1r2unTfjZQuVOMhykI3XsxsOfurke5JUMHZc=)
2: pRA1bcClIYlc5h-FSV4G2vehKzs.crl (hash: L1rKYbIzimpGx8JMewikAOivOyrXgitbV5shIIr8Wds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:b9:ff:71:31:2b:f4:6b:9b:ab:6a:57:b7:7d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Validity
Not Before: May 5 00:00:44 2025 GMT
Not After : May 6 00:00:44 2025 GMT
Subject: CN=580372d000dc5eb434a4f61010d078a5229479ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:a6:68:b3:31:17:ce:03:d1:a6:7f:2c:37:
1d:5b:83:81:28:c2:12:be:dc:3e:20:ea:1c:e0:0e:
93:45:d2:72:72:6d:1d:47:fd:16:f1:1b:a9:0d:ae:
76:f7:2c:3b:7e:15:99:6a:df:e6:1c:65:a7:2b:09:
ff:36:89:5b:a8:ff:64:2a:aa:0b:91:25:29:d1:ca:
17:53:0b:2f:72:e5:07:c3:21:1c:42:f3:1b:63:6a:
57:7a:a8:e6:20:d9:7d:35:80:dc:c7:02:11:56:e3:
39:5a:12:3a:59:5f:bf:91:68:9d:1a:3b:3a:ce:8a:
4f:29:f5:38:d8:5c:92:10:05:27:5d:a5:21:b3:a1:
74:07:62:ee:cd:a1:dd:7e:b5:86:22:9b:eb:ef:ce:
60:9c:34:1c:ee:f4:63:40:02:81:1b:49:89:78:81:
3c:13:64:d4:14:8c:78:6f:dc:c2:41:b4:f9:1c:d6:
74:a0:6e:a3:91:56:a8:f4:e3:10:79:2c:36:ae:e6:
b3:f9:76:9d:71:41:3a:48:ac:df:f4:fa:99:7a:b4:
37:99:d9:c5:fb:27:cb:4e:d9:85:2c:aa:e0:87:7a:
79:be:59:10:77:9e:8e:93:60:e7:98:83:64:3a:a1:
3b:da:10:cd:5d:b2:39:56:62:82:06:f6:c0:66:4a:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:03:72:D0:00:DC:5E:B4:34:A4:F6:10:10:D0:78:A5:22:94:79:CA
X509v3 Authority Key Identifier:
keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6a:91:de:3a:e6:55:60:36:a5:17:57:96:b3:c0:57:e3:0a:
83:2d:94:8b:c7:05:12:d6:01:7c:c3:eb:f8:f6:87:34:1d:7c:
5c:c9:72:ac:16:bd:e6:37:9f:c2:45:85:a2:35:66:88:30:44:
78:11:6e:a7:63:d1:53:3d:53:b9:38:d2:61:f7:bc:ae:bd:f1:
f5:54:7a:6b:63:0e:30:bc:22:f6:e9:fe:6a:e4:d5:b6:66:0c:
e2:d8:3d:8a:8f:f9:71:86:c4:91:41:03:04:f6:d5:7b:bc:fc:
9e:67:63:80:00:ca:d9:2f:62:90:37:60:6e:d4:91:3f:f9:13:
56:31:3f:5f:bc:04:a4:68:ba:22:41:00:42:44:7f:c1:82:7e:
87:8e:42:5a:7a:86:ed:c2:26:10:d5:7e:16:83:29:8f:06:65:
3b:87:46:ff:67:b2:c4:fc:2a:39:e0:9b:29:51:b2:60:b5:55:
af:79:3b:e2:64:be:f5:b3:8c:6a:7d:ec:17:a2:7a:ef:2a:f4:
4e:49:36:1d:ad:f5:64:b4:6e:8d:87:0b:27:dd:74:d0:27:5d:
4d:3a:67:89:21:1b:f1:5a:1e:ac:92:69:50:b7:f0:d9:1e:d9:
a8:65:98:65:52:b7:14:3a:15:e8:66:d3:91:bf:06:f8:ba:89:
db:ac:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:09:28 2025 by rpki-client