Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File: pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier: OZEoOTnP2XAcUTP80GRMZ2xeW80gLDaTLXlclUZJCZA=
Subject key identifier: B1:08:C0:56:9C:B7:7F:6E:64:E0:47:BB:4B:80:EC:93:C8:E1:84:D0
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer: /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial: 0196C26FA1D7D3CB763479C444957EC64940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 03:00:17 +0000
Manifest this update: Mon 12 May 2025 03:00:17 +0000
Manifest next update: Tue 13 May 2025 03:00:17 +0000
Files and hashes: 1: _fFHOJoXpOrY_um7x7QB-vvO3bk.roa (hash: p/LewBD8vsUMOUJR34qULDasx72iNLAz4cIqUSFI+5E=)
2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: RKrDDsn52fhOz65/F5WOF468HY/LmpAF4+6Ysk23xLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:a1:d7:d3:cb:76:34:79:c4:44:95:7e:c6:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Validity
Not Before: May 12 03:00:17 2025 GMT
Not After : May 13 03:00:17 2025 GMT
Subject: CN=b108c0569cb77f6e64e047bb4b80ec93c8e184d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:c3:35:d0:20:b2:50:63:91:86:ca:fb:17:
ce:14:7d:7d:1e:70:3d:7f:b8:70:d1:03:e4:8a:d0:
b8:a8:3c:4d:9b:33:3b:b5:9f:c6:19:be:35:77:4b:
e6:f3:05:8e:e2:bc:72:df:e7:09:c1:6b:97:52:ac:
65:9c:d9:e9:3a:53:f9:e1:af:ca:22:e1:cf:07:a7:
05:25:b8:39:98:98:20:f1:33:88:08:bf:2b:a8:0e:
30:40:d8:17:35:3f:2b:13:aa:2b:a4:90:14:62:0e:
5c:d8:44:0e:38:3e:3e:79:96:d6:7d:f2:c8:28:e6:
8c:80:15:3d:8c:ea:17:1a:c1:65:8b:c3:f5:cc:b4:
6a:12:27:81:8d:d6:70:a6:f6:00:7f:f8:d9:37:9b:
04:5c:64:86:01:42:a8:ef:59:94:93:ec:d7:6b:4b:
46:a4:52:2d:15:01:11:2f:f0:f8:e0:94:45:17:f6:
86:08:5e:79:a8:92:66:8e:79:67:27:a2:80:bf:f2:
a4:37:97:d1:55:55:ed:95:de:1e:0c:2f:73:c4:55:
55:0b:6e:9c:88:3d:08:be:00:02:34:16:ff:69:41:
0e:dd:e1:13:b6:dd:38:20:6d:0f:79:ea:11:94:d6:
49:57:b4:de:c4:0a:6f:f0:a6:1f:19:91:0c:bd:23:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:08:C0:56:9C:B7:7F:6E:64:E0:47:BB:4B:80:EC:93:C8:E1:84:D0
X509v3 Authority Key Identifier:
keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7f:1c:35:fe:ff:23:df:3e:86:2c:aa:23:96:5d:cb:a3:00:
8b:3a:59:e9:11:78:1a:6d:6e:c3:29:68:b7:61:69:80:5e:bc:
ee:8c:dd:7d:be:90:bb:3c:77:fc:16:6a:1e:79:ee:6f:83:da:
fb:a7:45:8b:e7:60:b7:92:39:ed:c6:09:f1:de:3c:95:98:71:
6b:d7:d0:8a:b4:a7:df:b1:69:5a:a2:14:99:bb:ee:72:09:1b:
71:75:69:15:55:fa:0c:01:e4:70:36:4e:f8:61:43:89:4f:1b:
e6:d0:21:29:e2:4e:5c:92:54:0f:4e:4d:4d:e5:01:82:1a:93:
24:0d:3b:ba:31:e2:b7:cf:2f:4a:a6:a0:1f:8e:a9:7f:27:e0:
3c:38:cb:6f:06:4d:17:fd:9c:7d:b2:b1:3d:ed:1e:35:ed:87:
65:d7:5e:1c:45:3d:82:96:a8:01:ca:f3:67:44:2c:07:bb:b4:
93:25:3e:a0:5d:87:ab:d2:d8:6a:04:8d:27:dd:1d:c5:5b:52:
b9:cb:a1:ec:b8:9c:4d:f8:57:80:dd:2f:10:fb:54:a8:c9:8c:
b9:f4:af:e9:ec:20:de:d6:3b:4f:a3:02:6a:f0:6e:36:1d:cc:
a1:b4:be:b7:97:57:ea:60:87:65:d7:1a:d7:c7:7c:52:ea:85:
90:21:35:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:32:05 2025 by rpki-client