Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: TAvjlKRAnQQ2BNIrLPz8h9GiBW21cCa6qpeVb7ScPfg=
Subject key identifier: 22:E7:8F:9E:75:29:BF:FD:58:A6:ED:31:D4:4A:CF:7B:25:06:43:CB
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 01969F76758A7ADFCC9A4C2DE7616BA8FD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: E0
Signing time: Mon 05 May 2025 08:01:02 +0000
Manifest this update: Mon 05 May 2025 08:01:02 +0000
Manifest next update: Tue 06 May 2025 08:01:02 +0000
Files and hashes: 1: ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa (hash: IdApViwu1d+gOIrjS2rsEi8/hl56lvmzjtXUhg292sQ=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: y8ctf/037Dt5nctfNePzF7xrOp71J5wc3qSIU/6nNZA=)
3: s_VH1RJUenuP8OvNJaH6yu7OYsg.roa (hash: vyeEoRPPlhaqhjAq4VATA3B5K5D/1bqk7r9/7EELRFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:75:8a:7a:df:cc:9a:4c:2d:e7:61:6b:a8:fd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: May 5 08:01:02 2025 GMT
Not After : May 6 08:01:02 2025 GMT
Subject: CN=22e78f9e7529bffd58a6ed31d44acf7b250643cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:0e:72:de:e7:40:5f:e4:c4:6f:e2:7a:81:
df:7f:05:77:2a:79:8c:9e:4f:74:4e:81:62:48:75:
32:46:ce:66:f2:4e:28:27:aa:93:14:36:0b:0a:38:
32:bc:db:11:09:00:6f:34:3c:29:9d:c5:16:b0:5d:
43:25:0e:76:fd:04:5b:e0:7e:9f:20:51:2c:ee:4f:
31:df:5e:cd:e6:a8:d7:03:f9:88:cc:6d:82:b7:08:
e5:ab:bb:2f:28:38:47:70:35:fd:94:2a:12:81:16:
67:c1:bc:68:84:c7:fc:28:90:21:c8:c7:71:ec:83:
9e:f1:75:e4:db:15:01:41:49:89:e6:39:1f:ad:36:
8f:dc:d8:6f:90:f2:88:ed:fb:24:33:3d:9b:e0:94:
bd:f3:82:37:48:19:3a:03:75:54:a9:db:b9:4a:31:
53:4b:cf:89:fe:57:2c:78:00:b0:a5:d6:f7:ad:99:
28:c1:9c:6b:ac:35:23:9e:35:58:ee:9f:1a:aa:52:
06:1e:61:56:42:54:c1:80:80:d7:dc:bd:b7:cc:c8:
d4:f0:7f:cd:d5:71:5e:f0:1a:d5:88:6b:46:eb:b2:
10:d5:8a:53:7c:a8:7d:f2:75:e0:4c:2f:c4:3e:ae:
88:01:ed:78:bd:b2:36:2c:ae:92:94:9a:ce:c3:67:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E7:8F:9E:75:29:BF:FD:58:A6:ED:31:D4:4A:CF:7B:25:06:43:CB
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:53:66:55:57:41:a6:5f:af:75:97:32:55:c5:b2:17:42:36:
9f:95:a3:98:ad:33:be:ac:1b:46:7f:21:59:a2:42:4a:4a:75:
d0:df:1c:2a:77:b1:3c:f3:d2:56:88:71:79:39:d7:57:0d:f2:
99:a6:fe:c5:2d:3b:ea:5b:53:aa:ec:d2:8f:f6:42:7b:38:89:
86:e6:7e:b1:9f:0b:b4:1b:f1:64:79:c8:a7:2d:f0:30:e4:28:
ab:1d:3d:dd:6d:81:19:f4:7a:f0:51:db:7e:14:2c:5b:6b:76:
d2:7b:af:29:c5:70:86:85:81:a7:12:05:b2:67:aa:45:66:24:
8e:1c:d7:fb:b8:ad:a2:99:9f:2a:00:ed:e9:99:a8:1c:3e:3a:
11:50:71:4d:67:93:c6:6d:66:23:46:b9:06:3c:08:e8:95:a0:
ab:72:38:e4:99:0b:e4:15:24:9e:45:9d:f2:80:61:4e:b4:11:
5c:3f:8e:9a:87:0a:83:0c:4a:45:93:c2:7e:d5:23:66:18:cc:
62:1f:14:45:c6:92:79:8c:1c:9b:4d:80:02:5d:3e:7f:fc:19:
c3:4e:05:69:23:f6:57:e4:d7:46:4f:0f:dc:0f:73:a4:0d:57:
d2:94:63:89:e8:62:fd:76:cc:a0:c8:d9:01:73:e2:f7:bc:e9:
3a:29:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:20:19 2025 by rpki-client