Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
File: pvh89KFbnngiRVs6qK8LXtOimfc.mft (raw, json)
Hash identifier: pLAD7JwyOkxeKutu9IUe1hZAkq5JYmlCijwTbPOMXVk=
Subject key identifier: 44:91:55:3A:E6:39:85:3B:26:54:33:81:A4:62:FD:83:A0:28:3A:06
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Certificate issuer: /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial: 0196BCA4F17EC27D5F86BAE36B3D27ECA69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 00:00:48 +0000
Manifest this update: Sun 11 May 2025 00:00:48 +0000
Manifest next update: Mon 12 May 2025 00:00:48 +0000
Files and hashes: 1: A0AYtzxUnj18_WVT-ZtPo3VQOok.roa (hash: Ky9GG0Y6/3CRG+EZa6gdZtX+mEutz5bg1CsKFSgBHBU=)
2: YoFLZelk0KvVc2c4StbzyHcrvm0.roa (hash: 1/qU4jnzCv1Ym4GrpqvgYqQAdtCVCWo1utnZCleM9zs=)
3: pvh89KFbnngiRVs6qK8LXtOimfc.crl (hash: TV6UbyLmmvDvhfeGmWcE6RPtDQ2/cVrC7UdOA1Bc9yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:f1:7e:c2:7d:5f:86:ba:e3:6b:3d:27:ec:a6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Validity
Not Before: May 11 00:00:48 2025 GMT
Not After : May 12 00:00:48 2025 GMT
Subject: CN=4491553ae639853b26543381a462fd83a0283a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:67:d6:c4:82:6c:b2:78:0a:2a:6f:ce:20:35:
01:21:9e:a4:57:64:f5:c8:30:18:d9:fa:ba:8d:b5:
da:79:d7:f2:fd:3f:b7:d8:82:32:89:c0:ac:47:6e:
69:84:e2:84:99:d4:c7:76:ea:6c:b0:36:0d:c7:6b:
1b:cd:4d:4d:f5:f5:73:ac:b9:cb:78:60:85:a2:7b:
78:d8:b2:43:fb:3f:b0:f2:68:b3:4d:27:f3:44:2e:
18:43:7b:8a:ee:b5:71:0a:63:8b:a4:0d:80:f5:3e:
10:96:e3:ac:5b:e6:e2:b0:2b:95:78:5b:ac:9a:1b:
72:a6:78:29:4d:19:1c:08:11:b4:0a:26:cc:8e:6e:
8f:a8:d5:47:07:e4:ee:0c:54:41:90:29:b9:be:3b:
c8:70:c8:70:ec:74:07:db:eb:cf:8b:a4:bd:cc:47:
ab:c3:2e:e3:46:a5:85:79:45:90:ec:f1:eb:5e:9c:
60:37:26:3b:e8:c2:73:2c:62:bf:43:56:d0:87:78:
74:29:d8:34:87:1d:b4:16:88:ff:6c:41:33:24:88:
41:9e:0e:16:ba:a2:77:7a:33:92:7e:5c:3a:2e:38:
dc:9e:d9:a5:5d:9d:10:c0:85:c9:c7:e8:2c:60:dc:
d9:7c:26:e7:68:50:18:e2:b6:00:5d:32:c9:a8:bf:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:91:55:3A:E6:39:85:3B:26:54:33:81:A4:62:FD:83:A0:28:3A:06
X509v3 Authority Key Identifier:
keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ce:29:44:98:18:50:90:36:9a:65:9b:e7:9d:82:79:84:89:
5b:51:29:ec:87:32:6e:eb:10:a7:7f:8f:62:4f:7c:89:29:a1:
d5:69:41:0c:0a:c4:2c:62:0a:da:10:16:09:91:1e:4f:4a:3d:
bc:9a:8d:51:74:ad:1e:01:59:4e:d2:48:3e:28:ad:d9:d7:50:
26:4b:d4:35:89:50:20:65:39:5c:55:56:ef:26:a7:d4:2c:80:
3e:bf:2f:d0:3d:c2:15:d3:e9:a1:1f:6a:5c:37:2a:51:61:dc:
e7:15:f5:ca:ea:4f:27:89:0a:a3:e4:0a:49:de:f0:5c:87:78:
f9:d6:41:86:36:c2:57:75:55:bd:83:88:77:b2:f7:28:f6:1b:
75:3e:34:1e:5a:47:55:48:3b:6a:ba:2a:1a:9c:28:66:3c:0d:
e0:5d:6a:b1:db:b0:ef:13:ee:72:87:12:a8:ec:7e:b9:4d:fc:
c9:4b:ce:52:33:86:2c:58:64:d7:cc:7e:88:65:45:d4:26:6b:
12:c2:b9:cd:a6:7c:ab:96:7e:23:9e:6e:42:56:2f:22:e3:36:
3f:50:f9:53:e9:3a:49:bc:11:1e:34:d6:ac:22:48:aa:b9:49:
f8:4e:4d:58:07:72:bd:6b:78:ba:d0:70:d3:01:f7:8b:77:0e:
53:71:db:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:58:34 2025 by rpki-client