Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: issg5AA0UkMBPj1nFAOs11SrafUnCTZzzQMClGXXREU=
Subject key identifier: 7F:75:33:A0:89:1A:55:1C:25:AF:73:6B:0B:F8:06:8D:EC:7E:4D:81
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 0196B85A1A274EF39E22A86BE5A8F21C3F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 04:00:34 +0000
Manifest this update: Sat 10 May 2025 04:00:34 +0000
Manifest next update: Sun 11 May 2025 04:00:34 +0000
Files and hashes: 1: V4fEP3mKAgRZldstTINNuk_J6BQ.roa (hash: 8GFsD/JurXta37HamqakliSVJtpBqW+/i/sWeLhcYfE=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: e/8Ick9kRwHKqNqhSx01G3HVDn2ikaLieOpTADeouuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:1a:27:4e:f3:9e:22:a8:6b:e5:a8:f2:1c:3f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: May 10 04:00:34 2025 GMT
Not After : May 11 04:00:34 2025 GMT
Subject: CN=7f7533a0891a551c25af736b0bf8068dec7e4d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:48:bf:bf:22:4a:09:a1:19:a3:45:8f:65:
ea:26:31:fb:0a:64:58:08:5f:46:19:77:34:f0:e4:
40:a6:70:fe:24:47:9a:d2:67:49:3f:18:bb:5c:60:
af:aa:04:5b:a6:3e:22:8a:7b:3d:75:4e:5f:7f:0c:
0c:08:ad:3f:7a:f1:ca:ec:36:5a:cb:97:80:e5:f6:
e9:25:c7:0c:91:6a:53:65:ae:6f:90:ef:c0:c1:7f:
58:a4:2d:6c:49:e9:71:1e:a0:02:cc:37:2e:35:af:
39:1b:e2:8a:35:da:19:52:80:97:35:bc:5a:71:5b:
3d:96:35:d6:f2:c4:2c:3d:eb:fe:43:1e:2e:b7:d7:
f3:53:76:4a:fe:07:04:1c:fc:ea:78:d2:49:2a:17:
5f:6f:bb:83:64:2b:b3:74:d3:83:fa:f3:e2:87:3e:
1e:a5:18:46:6d:6c:97:5d:24:d2:86:e3:be:a4:53:
08:08:e4:25:44:47:88:34:af:4b:3b:a4:81:fc:c5:
f8:7b:f4:0f:27:56:22:67:38:19:46:be:95:d9:f0:
af:09:2a:9a:a6:b3:d5:c2:87:6d:dd:24:7b:47:28:
a2:c3:4f:b0:e0:a2:1c:b5:a5:aa:f5:bb:e0:0c:16:
74:a0:fe:bd:af:70:50:45:c0:40:a0:f8:d0:e0:07:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:75:33:A0:89:1A:55:1C:25:AF:73:6B:0B:F8:06:8D:EC:7E:4D:81
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:50:af:e9:08:b3:14:36:c6:b3:9b:e6:8d:bd:71:41:b8:b2:
0f:42:29:40:b2:82:f2:85:96:6d:6a:a2:07:58:7c:5c:7c:29:
02:f1:2e:bb:9b:c6:55:af:69:c9:82:86:20:e2:fa:d1:b9:09:
e0:af:3f:f8:f5:71:be:e3:04:db:5c:38:7c:5f:d8:b9:4f:c1:
53:ff:ab:34:a3:fd:d6:fc:f5:42:a9:79:62:e4:96:3a:a6:4a:
73:c8:bc:2c:07:05:dd:26:ba:5b:07:49:7b:7d:fd:63:d8:61:
94:c1:c0:71:f2:cc:e6:70:19:d3:49:43:97:5f:f0:6a:77:b6:
92:e7:ed:1b:82:7d:59:1c:16:db:fe:f3:87:28:f1:92:7d:43:
67:eb:a6:64:f8:4c:12:d0:3c:6c:46:8d:22:b7:90:85:68:1b:
4f:1d:62:fa:c1:f2:62:18:c8:23:15:af:30:a1:95:4c:d1:e8:
b6:de:21:87:81:cf:47:f5:2f:2c:71:ed:bc:29:13:05:41:9d:
3a:9b:a9:06:ca:7d:80:5e:da:b8:a4:e5:7d:23:38:aa:2e:56:
81:30:ec:d5:f7:02:34:4a:77:1b:8a:02:7e:34:26:4c:ac:01:
12:03:8a:5b:3a:39:a5:16:ea:0c:cc:22:89:32:93:09:a7:d2:
78:68:bf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:38:44 2025 by rpki-client