Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier: GDD9cOhzyf+YoXP7rD7R1SJ0GPNZyh97CoFFgwIMbVo=
Subject key identifier: 9F:64:2C:41:7F:88:9D:41:79:F2:0C:F6:ED:69:52:F7:BA:69:4B:5F
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial: 0196B2C64CD5A816B6E6F79069A5DDA5B655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number: 11D0
Signing time: Fri 09 May 2025 02:01:02 +0000
Manifest this update: Fri 09 May 2025 02:01:02 +0000
Manifest next update: Sat 10 May 2025 02:01:02 +0000
Files and hashes: 1: Hp2ljcULzg53pBCXbKt3KAlFkVw.roa (hash: qsDz5TZedLiWJnxlNWk1Ko36qqmg6+ybGLmJSNA11KU=)
2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: VJ9eWVe/s5gC5EncOxIdnmOrYn50AK4+HtfzStpqM24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c6:4c:d5:a8:16:b6:e6:f7:90:69:a5:dd:a5:b6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Validity
Not Before: May 9 02:01:02 2025 GMT
Not After : May 10 02:01:02 2025 GMT
Subject: CN=9f642c417f889d4179f20cf6ed6952f7ba694b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:76:c7:ab:82:a3:12:fd:2b:b4:62:f0:71:ef:
d9:3b:10:74:d9:31:b8:6a:b4:70:eb:6b:0c:73:69:
dd:45:be:91:63:a3:fc:9f:00:a5:07:9b:57:4c:27:
77:4d:b9:d1:3a:aa:5d:24:cf:b3:ca:89:97:de:7b:
c5:38:34:38:41:4b:82:e6:e9:80:c2:ca:67:a2:a5:
13:23:0a:75:15:8e:67:71:9f:00:bb:4f:92:aa:0e:
1c:e1:36:2a:c3:12:15:fe:aa:c7:9a:b6:33:24:04:
37:0a:00:98:6b:77:e4:93:21:68:11:61:eb:9c:f6:
90:a9:3b:ab:29:57:82:72:21:bf:6a:a7:92:ba:57:
ef:36:39:db:30:78:b7:d0:3c:ee:a7:82:5f:bf:d5:
2b:61:e3:20:19:4c:de:fa:9d:e6:ba:26:b1:86:c3:
d7:a5:93:9e:fa:23:0f:09:79:4e:ef:54:c6:8f:da:
24:32:18:57:77:70:f9:19:61:f6:95:2e:59:be:9a:
43:7d:96:5b:c0:84:2a:34:3c:5b:59:a2:bc:b9:a3:
68:e3:9a:1b:72:32:7d:d9:8b:7f:67:36:f0:1a:8d:
ca:e5:f1:0a:28:02:e4:38:f6:6f:80:0f:9f:fb:34:
8d:33:83:a5:0b:91:03:fe:0d:19:75:ce:3d:a2:79:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:64:2C:41:7F:88:9D:41:79:F2:0C:F6:ED:69:52:F7:BA:69:4B:5F
X509v3 Authority Key Identifier:
keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:01:24:31:8c:a6:b2:21:d0:f0:17:e8:00:43:b0:7d:80:9a:
e9:08:2d:f0:7f:55:4c:a6:77:bd:c3:87:c7:ba:e6:cb:a1:f6:
6e:a1:4c:5f:b3:85:fb:78:d3:8d:8a:0e:bf:bb:ae:48:23:fe:
c9:2d:d5:b0:bd:b7:e0:63:11:bf:ff:56:0d:d3:a6:2f:62:4d:
5d:d7:6f:06:64:c6:75:f9:97:2a:2c:ba:2c:36:4b:77:12:16:
b6:f9:c6:36:02:00:08:1f:05:c5:77:f3:46:ed:50:70:97:4f:
0a:7b:c7:44:f2:f2:fa:2b:77:28:3c:7b:40:2c:f6:65:42:12:
c4:ac:e3:f7:3e:9f:0f:5f:ae:79:25:c8:71:de:79:a0:ac:30:
af:75:5e:65:c0:c5:67:ea:c4:36:a2:15:a8:78:e3:65:6a:ac:
1d:1f:9c:ee:97:b2:ad:ff:b7:1b:cf:08:93:4d:20:26:fe:d6:
f1:b0:37:9a:b1:11:f0:3a:3b:af:60:83:80:dd:f4:e6:2c:8b:
ea:5b:8f:54:a5:65:b9:b5:90:23:8f:d4:30:90:47:12:f9:35:
c0:15:b7:66:db:9a:aa:33:5a:03:1f:9e:27:d5:d8:37:4d:80:
59:82:19:50:4e:e6:97:8f:5c:cd:f3:cc:a0:1f:af:01:91:98:
4c:3c:49:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:35:42 2025 by rpki-client