
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier: FtM5GlmidnH5POyPZTkLQr95gJIk4MgxMcg79N1wJ/o=
Subject key identifier: 02:86:69:A4:0B:F6:D7:CA:8D:AE:C3:E0:5F:D0:68:10:CC:C2:16:1D
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial: 0196C2396C6A0D9C595F057A1D5D756CEBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number: 150B
Signing time: Mon 12 May 2025 02:01:04 +0000
Manifest this update: Mon 12 May 2025 02:01:04 +0000
Manifest next update: Tue 13 May 2025 02:01:04 +0000
Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: MtmOkloFuIJklXWrzPC0sEQfLSPeGVTgINHsVNBIiHQ=)
2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:6c:6a:0d:9c:59:5f:05:7a:1d:5d:75:6c:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Validity
Not Before: May 12 02:01:04 2025 GMT
Not After : May 13 02:01:04 2025 GMT
Subject: CN=028669a40bf6d7ca8daec3e05fd06810ccc2161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:05:93:75:32:8f:bd:9d:34:57:79:25:cd:
e4:64:2c:e6:65:26:a1:5a:e5:8a:f6:a4:53:c5:c1:
d5:40:07:a2:d0:2d:88:a7:73:1b:ff:e3:ce:2d:e0:
b0:73:9c:3b:8d:1d:2e:37:bb:7e:13:d3:42:9b:04:
6d:90:cd:b4:67:01:92:42:17:84:e4:ab:98:54:db:
d7:86:9d:cc:67:2a:96:40:d5:9d:d8:78:02:ed:1c:
13:b7:54:bc:46:83:af:e9:a1:22:de:f3:f2:ff:87:
44:48:0a:70:f2:05:cd:b5:56:cf:ca:4a:d8:fb:84:
da:ac:18:6e:5b:ce:d8:7d:9f:cd:74:5f:b5:28:59:
b4:6f:c8:8e:c4:ec:f2:fe:15:4c:48:be:29:04:ce:
52:42:4f:88:05:74:5b:16:f7:5d:e7:71:72:e3:e4:
b6:d8:03:52:8b:43:65:59:87:bb:c2:e1:21:19:62:
3b:f8:d5:6a:8f:08:4b:33:c1:79:40:3c:79:e0:1a:
fc:ea:90:f3:88:f8:02:d4:d9:62:8f:ec:53:5a:0f:
c4:fe:62:eb:44:8b:b5:8d:df:2d:59:86:86:ae:30:
97:d1:48:af:c5:a7:74:5f:52:9c:56:e5:0a:aa:02:
96:e4:b8:fc:cc:5a:c2:90:f3:1e:d9:6d:06:b4:9e:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:69:A4:0B:F6:D7:CA:8D:AE:C3:E0:5F:D0:68:10:CC:C2:16:1D
X509v3 Authority Key Identifier:
keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ac:24:f4:c2:53:57:b1:f2:40:1f:7f:02:eb:59:ae:69:f7:
03:42:85:83:82:30:5a:aa:9a:76:be:3b:7f:fe:d2:8a:fb:ef:
26:3c:d3:49:ba:1d:7b:37:48:06:60:ee:0a:d4:ce:a8:5a:93:
cb:a6:f2:58:6b:b2:5e:4c:aa:da:4e:06:2c:52:8d:c6:ae:20:
e4:6a:8a:ec:53:89:5b:19:44:fb:00:66:70:3a:b4:2d:40:9e:
7c:6f:01:32:94:29:7e:ae:9b:74:85:20:2e:1f:4f:de:d2:ea:
ec:01:6c:c9:dc:3b:1b:7d:36:73:32:69:e7:af:d9:31:68:76:
b3:3e:cc:ce:07:0b:4d:56:f3:fd:11:eb:35:76:04:a5:df:c5:
52:f0:a9:a7:6c:46:be:c9:70:ca:6c:e9:19:40:7d:07:84:5b:
db:c0:70:3a:4b:13:2c:65:e1:23:fd:62:a2:66:94:35:9c:e8:
84:c1:55:46:ed:be:d8:7f:5e:34:5c:a6:71:03:b6:cc:db:d0:
31:46:b5:6b:68:1e:9f:bb:c1:6f:d7:6e:5d:6e:ab:42:43:57:
34:1e:8b:52:39:20:0f:25:a7:c6:d6:29:af:c4:7c:89:4e:89:
bc:11:de:cc:1c:2a:42:61:32:50:a2:81:2f:c6:46:55:59:d3:
8a:82:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:19:31 2025 by rpki-client