Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: ije4X0TuoYAJaNNl7h065YJFyhPAYqpIizZEJFPbAqs=
Subject key identifier: 53:DA:73:40:8A:FD:EA:4D:58:3C:C8:02:AE:8B:4F:A5:FE:FB:DF:21
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 01969E638E01AB826A8BE1AF9C86F7699A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 03:00:46 +0000
Manifest this update: Mon 05 May 2025 03:00:46 +0000
Manifest next update: Tue 06 May 2025 03:00:46 +0000
Files and hashes: 1: CqoX7DJIz6T-m3NHJ01LCtyGJFE.roa (hash: 32gG2ZUMfd1jjxqZY90ktdKNZmqWxjZXungJm+FeL3s=)
2: ZCRNSq91ZKzRcSK6x3pKdZV_4Rw.roa (hash: SLb/dN4BABY7//UWc03uIXxQcoqVDd7HnpJMkhWH2bA=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: ENijB2sbweJlyBx3MZaKUzLP8HhswH9Wr1IJ1j3EOW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:8e:01:ab:82:6a:8b:e1:af:9c:86:f7:69:9a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: May 5 03:00:46 2025 GMT
Not After : May 6 03:00:46 2025 GMT
Subject: CN=53da73408afdea4d583cc802ae8b4fa5fefbdf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:26:0a:52:3a:34:86:41:ed:3e:e8:34:c8:
05:f3:37:09:a2:2e:86:ac:c5:ae:64:fa:27:c0:fd:
ed:16:e3:b6:71:1f:0c:14:f5:fe:8a:dc:44:8d:b7:
f5:51:2d:72:e4:f3:5c:2a:6b:4c:19:52:41:e5:23:
b9:2e:f5:b3:86:1b:00:93:81:c7:67:97:22:86:c9:
1a:cc:fb:ee:85:a7:5d:1a:56:bc:5e:b7:81:6b:c6:
60:51:fe:14:e0:f4:ff:cb:1a:0b:c8:b0:26:85:72:
7b:88:30:0c:1c:17:07:1d:b5:4f:01:6a:bc:33:48:
80:8c:97:62:d7:b8:89:57:e2:ec:c9:31:06:50:5e:
f2:c1:04:33:4a:d6:b8:3b:78:93:22:f3:1d:7a:bc:
a0:3d:72:32:68:4a:10:58:6e:b8:07:80:69:81:2e:
c3:6f:34:78:a3:84:02:00:f9:32:cb:ed:a6:56:cf:
67:b0:bf:cc:25:9c:d3:4d:ea:2a:08:22:cf:b6:eb:
ff:ba:00:1c:bb:a0:79:27:7c:b0:ba:7f:85:39:e0:
49:2f:21:62:2e:41:a0:52:b9:d2:3d:b0:a8:d1:cf:
ad:10:7f:16:bf:2f:b3:73:ae:a2:19:bd:24:37:f8:
b8:d2:87:51:d8:ff:f4:36:77:a7:c6:fb:d9:e7:a9:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DA:73:40:8A:FD:EA:4D:58:3C:C8:02:AE:8B:4F:A5:FE:FB:DF:21
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8f:c3:62:5b:2a:5d:59:4b:fe:c3:57:18:80:3e:c9:70:dd:
88:0b:8a:17:87:a0:32:8a:4e:70:30:73:d4:e5:c7:8e:49:ce:
61:dd:b2:53:32:94:60:11:c8:b9:f2:26:46:42:25:4d:16:8e:
9a:8a:75:12:69:bf:6a:64:b9:bb:8c:9d:f5:c8:75:c3:4d:18:
77:ff:21:57:86:64:2b:da:d4:7d:10:ed:5a:60:de:c1:56:f3:
c2:e6:01:49:6e:37:5c:50:0a:fc:b6:a2:4c:c7:a7:a1:b3:a6:
d4:e4:15:27:49:4f:0c:21:72:d6:48:db:a6:42:5c:9b:64:8e:
bd:d8:49:09:12:cd:ad:10:82:54:c4:55:bd:1f:25:cc:5e:ef:
15:4a:d0:d4:58:09:d8:42:b4:43:ab:45:62:23:74:7a:e6:62:
29:98:04:c9:3e:f4:59:ce:ad:cf:6f:e2:fc:20:b6:cd:c0:c0:
ac:3f:19:25:8d:90:56:6a:87:2e:2e:15:f0:1b:3d:88:aa:14:
fc:f0:6b:f8:57:5a:fa:c9:18:c6:c4:dd:85:dc:df:2f:55:4f:
23:b9:4f:34:4b:4f:da:9b:b4:1b:c4:51:46:28:7d:8e:4f:06:
10:0e:da:a2:4e:21:19:2f:1a:1c:b6:49:7e:36:f0:a1:f3:34:
9b:07:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:43 2025 by rpki-client