Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: s1k8e/AujA+/UQ1XulGZWrbZcDGdx2PaIsdkU294UH4=
Subject key identifier: 59:AD:76:3B:68:2E:77:AA:04:44:38:EB:84:A9:EF:B3:9F:03:81:C5
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 0196AC8D05E13F73DCE69601CDA2F4FADD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 62
Signing time: Wed 07 May 2025 21:00:45 +0000
Manifest this update: Wed 07 May 2025 21:00:45 +0000
Manifest next update: Thu 08 May 2025 21:00:45 +0000
Files and hashes: 1: ArxWoIoACVsuecj6oH-B8iFComg.roa (hash: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=)
2: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: 4gH1CKbbvSkbBJPGyB/YxGdfZd4VvIZEE3SK2J/8xdU=)
3: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (hash: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:05:e1:3f:73:dc:e6:96:01:cd:a2:f4:fa:dd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: May 7 21:00:45 2025 GMT
Not After : May 8 21:00:45 2025 GMT
Subject: CN=59ad763b682e77aa044438eb84a9efb39f0381c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:8c:b9:d9:ae:f2:44:a9:19:5f:6e:1e:25:
11:47:ec:bf:8e:9f:68:3a:2f:62:50:eb:f6:0f:17:
e6:dd:17:16:96:66:b2:61:8e:2e:15:12:03:fa:67:
06:7f:ba:f4:e7:81:29:e0:18:5d:11:a7:e1:69:68:
df:c0:bb:a3:8a:bb:3b:91:33:2c:bc:07:33:1a:19:
65:a7:66:3a:cb:fa:33:46:33:d4:13:58:fc:5b:6b:
48:22:36:9b:06:0c:eb:c8:2b:bd:1f:0c:af:37:17:
ba:a2:b8:77:9a:81:b5:0d:e1:f9:4e:17:23:56:a2:
f2:29:37:e5:d3:13:4b:cc:c4:df:3f:99:a2:2d:17:
70:b7:f5:9d:c0:70:b9:d3:c4:7c:4f:9b:67:cf:d2:
8d:c6:34:6a:d4:e5:98:69:93:68:33:36:fb:13:39:
80:81:4c:8f:0b:09:20:32:01:8f:7e:81:f6:ca:8f:
61:01:8f:29:c4:22:3f:3d:42:f3:a2:d6:0b:d2:8d:
3d:cb:5f:63:d7:94:1b:b6:e4:9f:49:97:24:3e:47:
b0:e6:ce:54:2f:20:33:77:b7:1d:ce:7f:b0:54:38:
7c:e8:d4:46:67:26:a7:53:9d:f1:86:5b:9d:05:92:
71:6e:98:3e:fd:d3:ca:12:cc:e6:cb:fd:e5:1e:e8:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AD:76:3B:68:2E:77:AA:04:44:38:EB:84:A9:EF:B3:9F:03:81:C5
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c4:03:d2:68:2b:4b:17:53:b6:7f:67:86:e3:63:dc:61:7a:
7a:06:6c:36:fa:f3:47:c5:d0:65:0b:ee:ee:fb:29:e1:33:33:
e2:82:a4:34:b2:4a:06:f3:ee:61:f7:2d:a2:8c:21:50:af:f5:
cb:69:f3:2f:23:e4:8f:8d:31:cd:f5:6b:f0:9c:3e:05:7d:9f:
21:5d:45:c8:e3:70:6e:9d:74:b0:ec:2f:de:3c:f9:79:24:11:
46:82:ca:6c:fc:1b:cd:54:8f:21:83:69:15:a2:62:11:ef:19:
bc:9d:cc:1b:50:53:22:9b:4e:b7:d7:74:ab:8a:a4:82:2f:fb:
0e:9e:83:3e:57:92:a1:5c:4e:43:82:1e:d5:af:42:04:00:36:
e4:7f:d9:c6:3e:13:3d:ba:8d:6d:30:e4:f3:99:d5:f0:13:5c:
07:81:72:eb:4e:9e:35:52:48:04:c4:e4:64:0f:01:8e:90:ed:
70:0e:9f:41:33:2a:11:ae:75:56:60:a6:18:24:d8:0a:ba:9b:
6c:04:5f:c9:e4:f4:4c:ee:61:19:9d:3c:d1:a3:23:c9:7e:47:
18:0a:6a:7b:48:41:df:a2:90:bf:c6:db:49:59:48:d2:ca:ea:
b5:f2:9c:88:fa:0b:68:37:d7:4e:e0:7e:da:e2:07:3e:26:a4:
93:66:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:19:24 2025 by rpki-client