Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: YddXizMXBaf5ILHc0+fQs1MQNT0Ertho9/KYZoZkl9g=
Subject key identifier: 1A:F5:F2:76:2D:F8:D1:3E:72:65:CD:98:AF:93:86:4C:5C:BB:1F:2D
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 01969E2C8E7F65013963AFC01DCEC594190A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 0A80
Signing time: Mon 05 May 2025 02:00:42 +0000
Manifest this update: Mon 05 May 2025 02:00:42 +0000
Manifest next update: Tue 06 May 2025 02:00:42 +0000
Files and hashes: 1: YA2knZBu4eCfckA4blXB6sNuHgY.roa (hash: shDh2slGwfDF1H72vnxsQTQ+XE9meHhIbU3+zi7hhrg=)
2: da6BAAfAoBTasYkztEyeFbO3dYM.roa (hash: svpwmdWuctN25b8D5PcCmhJa0TO40FFmvswQDucJFfQ=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: 4vz2lfIeaNsF5/L3kOEaQDloCZ1pS0j5ilKyke1DPvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:8e:7f:65:01:39:63:af:c0:1d:ce:c5:94:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: May 5 02:00:42 2025 GMT
Not After : May 6 02:00:42 2025 GMT
Subject: CN=1af5f2762df8d13e7265cd98af93864c5cbb1f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:9a:b3:02:cb:3d:b9:e8:ea:5b:ca:b1:5b:
63:cc:e7:a6:2a:a2:31:39:d2:97:66:73:42:22:62:
dc:e9:f7:ac:8f:08:b1:13:1e:95:21:9d:3f:df:64:
39:b2:24:d3:b5:2c:08:d4:06:f7:79:fc:6e:74:6b:
09:ef:49:fc:2c:7a:13:69:0e:0d:37:2f:56:42:97:
a0:c0:cb:f4:88:9f:f7:92:ec:9c:51:1f:4d:bd:90:
ac:5b:94:2b:47:f4:f9:0e:b7:e8:21:68:75:c9:37:
81:f1:a8:dd:a3:1d:17:40:c6:b2:96:c7:38:6f:c0:
5c:41:69:9b:5f:44:88:60:5f:8d:51:9c:c9:0e:82:
4c:d1:dd:42:cc:02:f5:59:a2:b6:26:2f:07:c4:cf:
99:27:a1:be:87:c5:f7:59:6c:b1:b7:36:9e:a3:a0:
c7:fc:de:72:3c:6b:bc:f3:97:9c:c6:d1:15:28:cb:
f6:1d:b9:69:41:4b:87:f7:ad:8a:20:2e:e8:52:7c:
23:ab:94:bb:d4:af:b4:29:1a:8a:5d:72:ad:cf:14:
f6:f9:1e:1e:83:03:04:b8:60:4c:4e:e4:8c:d0:7a:
fa:cc:05:61:aa:f6:47:57:5a:f0:20:dd:8d:17:a4:
76:31:bf:69:2c:1b:3d:f7:09:ec:d9:5e:a8:4c:82:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:F2:76:2D:F8:D1:3E:72:65:CD:98:AF:93:86:4C:5C:BB:1F:2D
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e1:af:60:41:8d:f5:bc:90:13:b7:fe:04:60:26:2a:77:4e:
cd:fd:ce:5a:6f:59:ad:18:26:87:f0:d6:82:cd:26:da:7b:d5:
e1:6a:63:f9:9e:2c:cb:1c:24:b6:85:ee:a0:bc:5e:98:eb:fb:
1c:ab:19:e0:d2:af:84:a7:1e:60:cc:a0:ab:07:d9:71:88:74:
58:74:5e:ad:0c:b1:00:5a:33:46:41:5f:d9:65:11:82:08:be:
56:c7:55:0b:5a:a2:a7:3f:36:58:2a:a7:1c:1f:59:e1:da:ea:
88:08:a7:52:3e:17:6b:ae:29:ec:cf:a4:c1:67:11:6d:1f:82:
5f:ab:78:14:25:94:ed:0a:de:15:19:33:aa:29:81:2e:70:af:
fd:30:db:22:0b:e7:84:d6:3c:f2:2e:7a:0c:b7:95:95:07:73:
cb:7b:ca:c2:3e:d4:e1:81:39:89:63:af:86:53:43:da:b3:41:
29:9c:84:b5:ac:d9:12:c5:bf:0e:03:95:f4:74:7d:b1:89:f6:
69:c6:9d:ae:ad:e0:39:4d:28:82:84:cd:07:f0:b5:9d:eb:07:
0c:f1:06:cd:c5:88:77:8c:36:ab:ac:ff:10:45:af:be:5e:d0:
3b:d0:93:7b:83:c2:19:7d:f1:d1:a1:d5:65:b9:8b:68:6c:75:
53:b4:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:12:30 2025 by rpki-client