Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
File: p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json)
Hash identifier: sEXVlaO/YIwriEI62VOocH09k005Yz8xVhkQqKOm+Z0=
Subject key identifier: 2C:67:15:82:E1:0F:BA:48:3A:1D:E8:CC:70:B3:6C:69:FF:85:47:21
Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
Certificate issuer: /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Certificate serial: 0196BB92C495BD4A6D2F17F4DF041D740059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
Manifest number: 034A
Signing time: Sat 10 May 2025 19:01:20 +0000
Manifest this update: Sat 10 May 2025 19:01:20 +0000
Manifest next update: Sun 11 May 2025 19:01:20 +0000
Files and hashes: 1: IZ6vDZjMHwfmvRBOdfcy5i9E3QM.roa (hash: uS025afpY/Jz9tEZKMABnGMw3AujzF5/XTw1sc/dgNo=)
2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: S5LZenD79erRiZhvLmag7JLmrpetRl0T67CHzKLvwhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:c4:95:bd:4a:6d:2f:17:f4:df:04:1d:74:00:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Validity
Not Before: May 10 19:01:20 2025 GMT
Not After : May 11 19:01:20 2025 GMT
Subject: CN=2c671582e10fba483a1de8cc70b36c69ff854721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:cb:23:88:17:31:3c:96:c8:dc:7f:ce:19:
85:e8:43:be:a9:8d:7c:27:66:39:42:18:fd:6c:f2:
e1:4d:a6:52:8b:d7:6d:ec:0e:3b:9e:32:ab:38:ec:
c4:00:b6:8d:63:1f:64:25:a3:4f:bb:ab:1a:56:48:
65:5c:9e:bd:00:a6:84:45:d6:86:37:dc:22:b6:3d:
5b:5c:9b:6f:69:df:da:50:3a:a1:0b:ac:d7:eb:16:
89:00:b7:e8:37:4f:2f:44:07:3c:72:bc:90:a1:2c:
36:c6:bb:86:37:8b:f9:d9:c7:a3:d3:23:f8:37:f9:
6d:2f:c1:d4:6d:9e:ca:0b:c9:d1:58:2f:5c:6a:1c:
02:07:6d:ae:20:38:f5:a6:ce:49:27:57:80:61:d7:
07:2a:45:22:37:e3:83:c6:d3:4b:ca:cf:8d:a5:90:
57:3c:89:16:6c:b5:9f:c4:92:f1:0a:76:3f:1a:81:
90:92:d5:bc:61:de:6b:c9:69:71:40:18:89:bb:0e:
06:b4:80:93:bb:1f:eb:18:33:0c:46:ce:60:ff:42:
16:3e:34:ea:7a:e1:6e:d0:eb:52:21:e2:87:29:80:
f2:29:ec:2d:07:65:6a:a3:bf:d8:bb:48:be:eb:ce:
94:04:41:31:13:1e:cd:2d:05:d6:d5:d6:56:4f:23:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:67:15:82:E1:0F:BA:48:3A:1D:E8:CC:70:B3:6C:69:FF:85:47:21
X509v3 Authority Key Identifier:
keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:92:0c:17:24:0a:3a:45:20:31:ac:41:c3:56:55:f0:06:f0:
84:38:57:a1:1a:3b:7f:4d:54:8b:5b:a9:f6:20:28:28:53:db:
68:01:c7:c3:f1:b8:e0:55:f1:f0:51:86:f6:3a:ac:fe:b9:93:
76:f2:f7:c4:cb:32:5d:3b:42:4e:52:4d:70:85:97:d3:1b:76:
e4:3a:e6:7b:d8:55:8f:c8:ef:51:29:49:3c:65:3c:ca:37:3a:
ee:9e:25:c7:96:1e:5a:58:1b:af:e1:b9:37:16:2c:8e:05:fb:
1d:62:89:82:ce:f1:96:73:94:99:cb:10:9a:d1:90:1a:22:fb:
cb:d5:f4:ba:5f:fc:4d:ae:aa:4c:ed:28:3b:0b:0f:6a:5a:80:
4c:c8:1c:b2:14:6d:ef:24:96:70:f4:d4:7c:0a:4a:8c:be:5f:
6e:c3:32:9d:12:d1:4f:5a:f5:ce:2a:0f:4f:4d:b4:6e:cc:13:
50:ec:7e:2d:9a:cd:28:75:b1:40:60:82:cc:2d:7a:e3:fd:d7:
d2:05:84:74:2d:54:8c:4d:38:c7:7c:87:19:8e:bd:92:9d:4e:
45:5c:30:71:48:b7:30:9b:aa:8b:b4:3b:9a:b9:b8:e8:e3:f9:
ba:22:ab:cb:63:c2:a8:f0:92:93:f2:d5:26:c0:4c:64:81:1e:
5f:8b:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:34:02 2025 by rpki-client