Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: VJ87poBzjWFriF1c7NlVmU0rVHLKkHDsaLvoImqJuqY=
Subject key identifier: 3B:8B:FD:91:5B:75:A3:FD:22:6A:36:96:D9:03:9B:F5:DC:AE:2A:7A
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 0196BCA4B0ADC5AFA4CA5BD59169A15CAA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 00:00:31 +0000
Manifest this update: Sun 11 May 2025 00:00:31 +0000
Manifest next update: Mon 12 May 2025 00:00:31 +0000
Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: /osOlPB1MFe0tflswqsNIwnm4ADQz4JDd7Ip2zcrBiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:b0:ad:c5:af:a4:ca:5b:d5:91:69:a1:5c:aa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: May 11 00:00:31 2025 GMT
Not After : May 12 00:00:31 2025 GMT
Subject: CN=3b8bfd915b75a3fd226a3696d9039bf5dcae2a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:24:ff:85:16:27:33:53:3e:c0:73:e2:9b:
c7:15:f5:a2:3d:17:82:59:ff:ac:c5:e1:05:a2:87:
40:0c:03:b5:2c:98:65:78:34:b5:4a:6e:42:68:b2:
c1:c4:76:72:07:ea:cd:49:cf:de:c3:e9:3d:35:23:
d5:4b:4a:8d:f9:9b:90:0e:30:d5:c7:ba:7a:2a:33:
36:32:db:34:f5:86:f9:3d:33:88:e7:56:44:22:18:
55:3b:53:a1:d9:5a:da:de:34:02:90:1b:b7:92:96:
bd:36:2b:89:54:86:96:45:55:25:cb:b6:62:ea:dd:
b4:27:8d:70:97:d0:6f:7d:e9:3b:e6:eb:e5:f6:91:
2c:cf:15:35:94:38:05:06:a8:9d:b0:e7:32:fc:c9:
c3:57:98:7c:59:e9:1c:95:eb:09:b2:ee:8d:b5:d7:
a2:b7:b5:24:7f:48:f5:8d:eb:ee:d5:23:64:02:00:
7b:a5:2b:59:38:f2:fe:a7:9a:e0:e8:31:a1:8d:b6:
c9:b0:80:88:7e:4a:ca:38:89:59:63:98:bd:de:7f:
54:05:4a:3f:ad:11:63:39:05:51:ce:da:a7:68:36:
2b:e1:59:97:d9:30:99:3d:7e:fe:cd:66:30:f7:52:
07:b6:3b:1d:3a:95:84:12:8f:81:d7:c0:08:c9:18:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8B:FD:91:5B:75:A3:FD:22:6A:36:96:D9:03:9B:F5:DC:AE:2A:7A
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:69:51:4d:c9:c6:08:9e:40:29:07:37:38:95:33:45:91:09:
cc:92:ec:42:76:fb:df:c5:95:86:88:ed:52:b6:16:b4:8a:64:
c4:d0:7c:73:1f:f5:cd:c3:c6:30:1d:42:3a:5f:78:0a:52:a7:
93:57:55:63:9b:48:19:e8:22:9a:c0:8c:0d:c5:56:aa:43:38:
a9:61:e3:78:79:87:41:c9:77:d6:6c:b5:32:68:d1:3a:ff:86:
69:97:9d:28:ec:74:fe:91:d8:c6:6e:39:19:39:5a:bb:db:e3:
6b:0c:e6:f0:0c:c3:c0:e6:fb:75:5c:48:a7:4a:20:4c:76:46:
66:b2:ae:ed:df:50:54:09:53:cb:33:f4:8d:5c:f2:73:81:68:
ad:75:4c:39:ad:a0:a7:e2:a9:00:24:da:68:07:da:76:c7:ba:
80:3c:8a:b5:97:62:49:6d:71:08:66:bf:40:f9:74:f6:a3:f4:
56:a0:e9:c0:fa:d9:67:5a:48:ac:65:24:0f:de:d7:12:02:ef:
42:63:a9:8f:7e:1f:a9:97:bb:53:ff:c5:89:c5:84:22:9c:c5:
fc:57:37:23:f7:40:77:18:22:41:e0:5f:a7:71:58:4b:7e:93:
43:1f:08:b1:cb:e0:d2:6a:33:95:cc:dc:71:a9:82:55:39:a3:
c7:6b:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:43:16 2025 by rpki-client