Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: kt5J6XGxCAT6JnYR5SOUd8CoVenn7GVMoXTr4VXN6M4=
Subject key identifier: 91:88:07:42:31:F4:74:43:7E:AF:65:F5:F9:E7:55:E6:BF:D2:2D:B6
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 0196C31466915D0B744A1DBBF531A698A73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0BC2
Signing time: Mon 12 May 2025 06:00:16 +0000
Manifest this update: Mon 12 May 2025 06:00:16 +0000
Manifest next update: Tue 13 May 2025 06:00:16 +0000
Files and hashes: 1: RuFROxCqzeIbzpx-h2zhu4XG73k.roa (hash: mYt7O5vyisef0XC7lwr4ZHkct165sZT5ZjyUS4XqL/8=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: 82+ndr/W4BFefXMADs8y55+ncAINPFEgiMGO3ZgIQxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:66:91:5d:0b:74:4a:1d:bb:f5:31:a6:98:a7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: May 12 06:00:16 2025 GMT
Not After : May 13 06:00:16 2025 GMT
Subject: CN=9188074231f474437eaf65f5f9e755e6bfd22db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:7e:f3:3c:fd:e0:a5:50:a9:62:c1:0e:53:
23:d9:16:ed:c3:30:f9:b9:ba:e3:5d:65:ce:23:7d:
a9:cb:d9:b2:43:5b:68:7b:91:f7:3a:25:86:b8:0b:
76:e0:90:07:66:64:03:ed:42:b3:b2:2a:eb:a7:17:
be:83:09:e9:98:71:32:a8:66:e2:ff:ce:33:95:44:
34:68:b2:00:aa:2e:24:c2:e4:44:de:57:4e:93:a0:
08:5c:ba:bc:a0:5c:c1:09:8a:15:4b:55:7a:c1:a8:
31:c2:0d:e4:9a:d0:a4:bc:0c:b0:fa:cf:b7:7b:06:
42:4f:e4:d7:8d:a3:38:67:46:3f:c6:82:1d:e1:c2:
27:fa:86:a0:86:fc:85:9b:d5:a3:58:e5:df:1a:83:
9b:d3:64:53:dc:54:1b:85:4f:ca:c4:69:12:38:9a:
1a:10:6a:f7:da:b0:40:52:d7:02:99:3e:0a:cc:c4:
ca:48:98:04:65:25:78:d8:76:f9:20:6b:5f:41:b3:
be:47:ae:64:fc:d3:0e:9e:64:59:79:6c:65:1a:1a:
bc:aa:b4:98:83:8f:09:38:54:04:9e:6a:b9:c3:ec:
4d:52:c3:1e:7e:25:7d:9a:91:92:cf:0e:2f:e7:27:
31:c8:94:3d:4b:52:b9:0e:8b:ac:d9:f0:72:46:ea:
23:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:88:07:42:31:F4:74:43:7E:AF:65:F5:F9:E7:55:E6:BF:D2:2D:B6
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:91:43:8a:58:8c:6d:c4:8b:07:7e:85:b2:71:ad:65:ea:9c:
80:19:21:9e:7e:8f:2b:57:d7:27:56:e6:5d:84:c4:fd:90:fe:
08:19:59:43:f6:67:8f:4e:96:94:f8:ee:79:9b:b3:19:c9:6c:
2f:6e:a0:9c:19:1c:20:f6:24:94:e7:b3:cc:8f:e9:a0:64:7b:
e7:91:93:67:50:81:fd:62:f1:19:48:2e:5a:f7:76:4a:fc:72:
b8:08:65:5d:0e:d1:5d:09:4b:bd:74:0b:9a:60:57:d0:9a:42:
7d:1c:24:a7:12:42:cd:3d:57:3a:4d:8a:dc:b4:d0:77:a1:ed:
77:77:47:13:2d:af:89:0b:3b:2a:fb:9f:13:47:51:0a:87:ff:
5b:b6:28:e1:c4:ec:32:11:d5:3e:ff:b3:9c:c3:33:a8:12:7a:
39:1c:a0:ab:e0:e2:ae:28:72:ab:8e:c3:28:5b:a1:6d:4a:45:
01:a9:00:73:1d:07:39:96:da:f9:8c:1f:be:b0:9d:71:03:40:
90:09:13:7f:9f:99:44:30:16:74:74:23:4d:68:02:bc:e4:6a:
73:a9:dc:0d:1d:fd:28:ec:05:9e:d6:28:a0:0f:56:68:1e:03:
0e:a8:06:fd:70:9e:3d:42:f8:54:e2:9c:4c:7c:cc:a8:b2:52:
35:46:80:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:56:06 2025 by rpki-client