Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: BWvTkcLnwgPXRFRbyEdM43r3JXYC4ijbsFyq91HOOJ0=
Subject key identifier: 43:5E:04:16:8C:F9:BC:CC:CA:DC:F9:6D:F4:FD:53:5C:3A:B3:94:72
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 01969F76553281B8F55820A13B6F33503B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 14B5
Signing time: Mon 05 May 2025 08:00:54 +0000
Manifest this update: Mon 05 May 2025 08:00:54 +0000
Manifest next update: Tue 06 May 2025 08:00:54 +0000
Files and hashes: 1: o-nYlXPYTvbWycHnP4jG4hys78s.roa (hash: +9u5uc7wAwLvJQwWxklCfmQHya0NysgfSBmasNGP6Yk=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: Ay8SCUmNADyCxO3F/F1qNW3woyqdStPEC5EcftwW+Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:55:32:81:b8:f5:58:20:a1:3b:6f:33:50:3b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: May 5 08:00:54 2025 GMT
Not After : May 6 08:00:54 2025 GMT
Subject: CN=435e04168cf9bccccadcf96df4fd535c3ab39472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:af:ba:61:73:0c:92:ec:11:6b:52:48:97:
4a:a2:bd:84:34:c5:24:02:38:7e:db:7b:ca:28:7f:
45:d6:de:6f:81:79:33:1a:2c:ed:90:29:42:c8:bc:
92:9b:cf:f8:1a:74:55:71:5c:ee:1d:9f:17:ed:5e:
4f:aa:56:d0:bd:b2:08:2b:0e:69:a0:69:50:0a:dd:
04:f5:e1:e9:03:04:2b:4e:76:b9:28:54:64:89:80:
bc:1c:db:93:4c:7b:8c:c0:be:44:4e:22:cd:bd:fa:
84:65:0e:c2:ab:28:1d:7e:f2:d0:6a:ab:f0:1a:8f:
e3:f5:ad:b5:49:3f:e0:0b:37:88:cf:16:52:fe:74:
8d:dc:80:1e:99:be:7b:89:9b:9c:41:1a:00:41:47:
e8:a0:fe:ff:38:74:c4:cc:b6:f1:5a:a1:83:03:aa:
ea:d2:df:16:02:5d:f5:f9:e9:ee:11:c5:63:b8:9c:
2e:c3:d6:f4:2b:8b:55:16:af:10:e3:57:ca:5e:7a:
4f:1e:67:2d:44:31:0f:08:80:e9:1f:1e:ad:08:18:
99:9a:55:49:8c:22:1a:c9:0f:9e:ce:fc:1b:3d:2f:
7e:de:16:00:d1:34:dd:6a:f2:c5:bd:f5:2d:ab:34:
8c:a0:3f:16:27:9a:60:cb:9f:44:1b:5d:b2:f5:15:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:04:16:8C:F9:BC:CC:CA:DC:F9:6D:F4:FD:53:5C:3A:B3:94:72
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0c:92:ca:b4:45:35:82:27:16:8e:ba:2f:09:ea:e4:b2:de:
83:86:9a:4a:eb:bf:c7:58:95:d9:33:91:ae:2e:4b:27:9e:d6:
e9:0f:c3:f6:31:53:21:cd:48:f4:11:0f:b2:29:68:85:c3:9b:
da:0a:9b:0e:6b:44:35:d9:7c:25:84:53:c6:09:8c:2b:54:6f:
44:50:74:89:e8:74:f2:e4:67:ac:9a:32:a1:bd:a4:9c:78:a6:
6c:d1:c2:eb:9b:d3:c2:01:bf:0e:fd:ef:62:e7:7e:57:98:c5:
de:45:3c:f3:7e:b8:95:1c:ab:c6:8c:25:03:e6:5e:9b:9d:5d:
35:e3:5d:f0:2a:58:34:3d:c8:33:ed:ab:c4:b5:96:70:52:c5:
6b:51:5a:12:33:72:61:b6:cc:02:f9:9f:61:79:bf:9e:17:22:
03:c8:ec:24:7a:9a:7e:c9:b5:a8:2b:18:c4:d5:a2:62:9f:23:
82:1d:4b:c3:53:db:52:92:d6:86:2b:dd:f0:42:cc:bb:fe:f8:
d9:6d:0d:1e:99:b5:41:fd:ea:8d:5c:0f:7b:ac:ef:1c:b5:38:
f8:d5:4e:e1:ad:b7:8d:04:54:29:5a:3f:69:bd:dd:79:d3:55:
cf:53:64:88:80:f3:4e:99:3f:10:dc:7b:b9:ad:3d:f0:bf:41:
80:a1:60:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:23:08 2025 by rpki-client