Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: ZqvQ4PfjPpYGVnMr7W29+tQvZKuZriM9ZCCCxd718BA=
Subject key identifier: 6B:5F:A0:08:0A:FB:AF:07:DE:39:0C:AE:2B:CA:A5:54:6B:AF:BF:7A
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 0196C3F09F24F36CAC83B360B4212D849FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 10:00:48 +0000
Manifest this update: Mon 12 May 2025 10:00:48 +0000
Manifest next update: Tue 13 May 2025 10:00:48 +0000
Files and hashes: 1: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: n4JSgs/K0xGNBp6yLPYt2yT3gc+qWttgErqvajiot2k=)
2: qjNgLrezTzPzPZHoRa0PyC-9c_E.roa (hash: gjQzNWtyWkBxUXT4We5fyARX6Waght/4yDMrIeCr6j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:9f:24:f3:6c:ac:83:b3:60:b4:21:2d:84:9f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: May 12 10:00:48 2025 GMT
Not After : May 13 10:00:48 2025 GMT
Subject: CN=6b5fa0080afbaf07de390cae2bcaa5546bafbf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:62:1e:77:ab:f2:60:e2:0d:8f:f8:28:a9:
9d:c7:b1:29:ae:b7:1c:40:4e:4b:c4:04:b2:ac:a1:
7b:d8:53:de:5c:f2:37:1c:52:49:6e:f7:07:e0:95:
1d:84:12:bb:64:65:77:25:6f:55:c2:bd:b3:f4:d8:
00:c3:ae:43:53:23:01:0d:5b:23:b4:65:f1:ed:9c:
b8:41:dc:ba:2a:c5:dd:c7:c3:ab:f7:4c:0b:df:0b:
dc:a1:7f:2d:68:22:b7:a2:24:4a:31:00:75:f3:b7:
4f:f4:ca:6e:2a:35:ac:02:36:d3:a9:a3:43:11:37:
f6:10:af:8a:35:31:73:ec:a6:de:6a:17:d8:66:48:
e0:fc:2c:8b:bf:f2:a0:54:60:a6:36:c0:10:7c:6d:
4a:92:6c:01:95:23:0f:ff:f2:56:26:5b:9f:15:b7:
ae:68:5c:23:b5:54:dc:f4:41:42:c0:41:1f:60:8c:
c1:85:b7:e1:fa:73:e0:36:44:1f:b5:d9:7c:7e:af:
8a:d9:8a:b2:c7:13:52:ef:ee:5e:11:1f:23:10:96:
86:df:4b:ed:6e:62:cd:67:77:49:c4:09:43:5a:fc:
d4:a1:66:8d:30:23:49:7c:13:37:49:b4:d5:56:5b:
36:7c:c3:5a:a9:0c:14:41:6f:cc:d9:d3:01:c5:22:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:A0:08:0A:FB:AF:07:DE:39:0C:AE:2B:CA:A5:54:6B:AF:BF:7A
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:60:38:36:6c:98:a1:91:16:20:fc:fd:ba:e4:cc:08:eb:50:
09:42:c3:51:da:53:08:9a:84:b5:20:a2:ed:1c:7f:20:e0:cc:
46:ac:d0:2d:67:6c:b7:b5:ff:ae:20:b7:d8:64:de:2a:fa:28:
93:a8:72:ce:3a:19:3d:c0:82:d5:d5:83:b5:ca:67:bc:a4:e5:
68:3e:c5:8c:2c:40:01:7f:51:be:11:ef:f1:6a:e0:49:22:05:
4c:be:3d:6c:d2:18:d2:69:50:fd:66:6f:3f:b3:1e:a5:1f:59:
71:89:7a:9f:65:54:41:7b:1c:65:bd:ab:c3:c6:b9:3e:8f:c0:
91:bb:87:1e:ed:9b:77:10:6d:3a:7d:42:9a:7b:e8:4b:c1:15:
e6:20:e0:e3:d4:a2:6f:f6:71:71:31:62:44:0f:3d:50:1b:cc:
c6:7e:a2:ec:83:4b:28:d0:d2:a9:b2:ca:07:84:29:92:f7:34:
f1:3a:c0:65:a2:91:30:09:db:f3:b1:41:bd:2b:db:cb:67:da:
bd:9d:70:a4:4f:19:4f:63:b7:67:f9:61:bc:93:31:a7:79:60:
01:5a:2e:52:1f:b5:96:fb:ff:dc:bc:4c:a9:22:9d:3e:22:5b:
30:bf:a5:ea:e8:d7:0c:68:38:4c:a4:de:da:69:43:9f:4d:be:
0c:c3:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:24:46 2025 by rpki-client