Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
File: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft (raw, json)
Hash identifier: 0SJaAA7OLeyTbeR7jkwYkl0HW9W5w6r4dn/o8eaksC0=
Subject key identifier: 59:0A:DB:76:01:14:E2:04:AB:A1:6B:86:49:9B:19:6D:F5:3D:4C:12
Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Certificate serial: 0196B82324A3A4B4EA3F304936F8F9B3BFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
Manifest number: 0CAB
Signing time: Sat 10 May 2025 03:00:32 +0000
Manifest this update: Sat 10 May 2025 03:00:32 +0000
Manifest next update: Sun 11 May 2025 03:00:32 +0000
Files and hashes: 1: 9-fbWWjNC4mOvVefigl9UV2UFJs.roa (hash: tWgz0w4Sqnk4S40gqRVMtTMDJNe1eyYOZFDB5oZ2xOA=)
2: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl (hash: 7sv75jqETvUn2oUwfhOt8fXSFRQyM9TRNOPxDC9L1rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:24:a3:a4:b4:ea:3f:30:49:36:f8:f9:b3:bf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Validity
Not Before: May 10 03:00:32 2025 GMT
Not After : May 11 03:00:32 2025 GMT
Subject: CN=590adb760114e204aba16b86499b196df53d4c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:b0:96:c0:9c:93:d8:bf:8a:d5:57:7a:c3:
a3:a5:33:b6:01:ee:bc:09:6a:e9:e9:25:b6:f3:5f:
e9:83:cc:6b:d2:87:ae:91:85:b2:49:90:e9:6e:dd:
92:a1:83:0a:f2:96:e7:f6:17:4b:75:8a:93:f1:88:
3e:29:c6:89:85:f0:bf:14:74:15:3f:ff:d7:cd:ce:
d2:58:4e:16:10:f3:f1:fc:76:94:38:21:e5:d9:a7:
9c:ef:f4:6a:c0:b3:64:9c:2d:0b:cd:c1:cf:bc:69:
13:53:4b:62:63:36:93:5a:4c:4f:b1:69:6a:f8:9a:
91:c0:26:80:ff:96:1d:74:7d:fc:6b:f8:7e:4d:91:
fc:87:03:1f:ac:89:bc:d7:63:79:91:ef:f1:00:21:
fe:af:df:7f:07:c5:24:b6:ad:91:9f:48:de:b8:46:
2c:49:7b:13:66:29:99:18:06:47:3d:c8:46:b5:63:
4d:3a:4c:8e:30:85:eb:5b:0d:b8:0a:70:08:13:8b:
16:59:cf:8e:67:c2:24:78:0c:cd:06:f3:54:93:25:
94:58:4b:58:91:71:9e:8d:48:a6:23:a2:52:70:1d:
bd:9b:5a:ec:32:56:dd:ed:da:8e:49:4a:92:cb:50:
e2:ce:c8:be:c3:77:d3:e1:35:22:a6:26:3b:7d:3f:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0A:DB:76:01:14:E2:04:AB:A1:6B:86:49:9B:19:6D:F5:3D:4C:12
X509v3 Authority Key Identifier:
keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f2:59:66:8d:2e:8a:48:80:4a:eb:1d:af:fa:c5:5b:ae:40:
f9:0e:a6:9e:9d:03:50:a3:f3:26:c2:03:52:60:b4:4c:52:e3:
f4:62:58:a7:ff:46:c2:54:81:f9:07:9b:1c:8d:0a:52:d6:c5:
4b:a2:67:c1:8c:0c:c8:60:33:35:7d:8e:2b:49:1e:83:6c:ca:
c4:8c:b2:14:c0:49:fc:33:0e:d8:4d:88:01:05:36:1f:d3:ea:
81:5d:f3:fe:ea:e2:8b:3d:29:4b:42:db:8f:ae:80:80:d2:2a:
38:8b:44:a4:a9:55:df:0f:1e:e9:a3:7c:ce:ec:1e:c6:94:a0:
41:f6:55:9a:01:73:d8:a0:8c:f5:94:aa:44:bc:27:95:6f:2f:
2f:9a:45:d5:f5:b0:15:22:eb:49:32:bc:09:3c:7f:79:8d:a7:
5f:5c:cc:09:06:d3:25:d1:53:3c:94:e2:76:6f:e4:98:90:18:
89:3b:40:b4:05:1b:17:c2:a8:3c:e1:8d:1d:55:1a:08:a7:47:
e7:24:5d:f0:d3:ce:6a:a6:7e:58:0f:6b:73:5f:70:07:6e:5a:
35:23:7f:4b:a7:76:ed:e5:08:8d:01:c8:4c:13:ed:80:e4:1c:
ed:6e:3f:b5:6d:69:cd:94:f8:d9:ba:21:cd:fe:87:6a:50:ab:
fc:e9:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:24:45 2025 by rpki-client