Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: 5NQXOeUWWRV3kr74kVqwCjE4byqnqY48HniAkHaO8Rs=
Subject key identifier: CF:A3:CE:1F:79:5F:DB:BF:80:28:01:16:57:D6:93:6E:32:E8:2B:34
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 0196B9DACDC37CAC3E27728D9C44B592F69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0BC7
Signing time: Sat 10 May 2025 11:00:46 +0000
Manifest this update: Sat 10 May 2025 11:00:46 +0000
Manifest next update: Sun 11 May 2025 11:00:46 +0000
Files and hashes: 1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: uuNXUZou2C/UGFCaiCB09YwDwZ0LmIH6YCu3s8HLcMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:cd:c3:7c:ac:3e:27:72:8d:9c:44:b5:92:f6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: May 10 11:00:46 2025 GMT
Not After : May 11 11:00:46 2025 GMT
Subject: CN=cfa3ce1f795fdbbf8028011657d6936e32e82b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:5c:17:47:bf:e7:8d:0e:78:05:22:6e:49:
9a:8b:76:45:2d:cf:9e:cf:f7:79:cf:0d:23:6f:e1:
9a:55:40:7e:a3:86:37:4b:29:75:10:86:5a:48:c6:
dc:ed:59:97:87:84:b7:9a:e6:ec:59:3e:75:1b:63:
c9:d9:58:53:85:63:a0:12:1a:4a:84:9b:3b:9f:bd:
22:59:d0:84:99:79:c3:4c:e8:bb:16:5a:ee:04:3a:
73:ff:9a:30:08:86:ca:e6:05:aa:ca:50:bd:a4:9a:
c8:0a:09:f8:fc:7a:e9:ea:5f:2b:5d:0c:9d:e4:0b:
14:c1:83:39:0f:f1:0c:3b:9a:cb:1b:29:be:b8:46:
89:3b:1e:ec:3b:82:58:4a:0a:49:5d:5d:c1:6f:b1:
6b:e0:b2:ff:47:29:2f:5f:18:49:cd:f5:0a:bb:ef:
93:4f:f9:e5:c1:e9:c7:21:18:a3:24:84:6b:28:c3:
fd:42:e7:61:86:4e:94:64:fa:cf:39:7d:0a:4b:86:
e8:16:bc:86:5e:0c:35:85:0a:ff:ca:06:66:54:49:
3c:62:bf:d7:a0:0d:12:a8:da:96:de:23:85:ae:3f:
5c:c0:73:69:ca:8f:e4:55:3f:89:ff:76:cc:4e:8f:
9b:0e:c4:e2:94:f1:a8:cf:1b:ce:90:db:3e:e5:72:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A3:CE:1F:79:5F:DB:BF:80:28:01:16:57:D6:93:6E:32:E8:2B:34
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8b:22:6a:a3:6d:fa:e5:76:5d:ef:4e:6f:d8:66:23:4d:b4:
14:e7:8d:15:c6:32:9f:34:05:9f:4b:8b:f8:08:f1:33:d7:73:
ab:c8:8a:9f:75:54:36:ef:7c:ce:52:ee:a7:7b:e2:d2:5a:b4:
76:a3:4b:48:16:9a:06:4d:70:dd:96:28:2c:da:97:84:6a:b3:
b5:3a:48:be:c4:42:14:79:22:5c:52:8e:13:82:5a:60:23:39:
c7:3a:be:0c:05:94:1e:ec:84:aa:24:9e:40:6d:70:ce:d8:e9:
d8:f2:96:00:8d:f5:1f:a0:bc:63:61:93:72:41:e9:0b:0f:b4:
51:48:1e:eb:2e:f0:08:26:a5:99:3b:ef:78:f2:b5:68:4c:12:
9e:a6:8b:ae:1c:7d:21:d3:41:52:a8:36:5f:dc:df:ea:ba:54:
8e:1a:f9:d3:5a:aa:8b:09:8b:2c:d4:d5:73:37:9d:73:6c:ee:
da:9f:65:9e:c3:0a:42:e0:1c:5e:f2:7c:a1:1b:f2:31:1e:38:
b1:56:03:8c:bd:8d:de:2e:5a:28:56:39:12:53:3a:d1:9a:9f:
89:8a:c8:ca:47:46:9b:2f:7a:5a:ff:34:29:f5:a4:e0:83:28:
5b:f1:2a:08:30:34:c3:0d:66:c2:14:ed:e0:1d:ae:45:14:18:
d7:6b:7c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:52:56 2025 by rpki-client