Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier: JZVjeNpqh3MVkrs0mlnNdCGWIeZWA8L1RlcNXSgXrgU=
Subject key identifier: 16:17:14:18:B3:FA:FE:47:0B:1F:FE:BE:97:93:9C:DC:69:D1:9D:5F
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial: 0196C872222F635BB7E393DFB701F3CA1672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number: 087B
Signing time: Tue 13 May 2025 07:00:45 +0000
Manifest this update: Tue 13 May 2025 07:00:45 +0000
Manifest next update: Wed 14 May 2025 07:00:45 +0000
Files and hashes: 1: cGGNHHL2taAbcfw5rMUB84kQw_k.roa (hash: J56YjCbrct/bNrc5fidg1pLfrEEsu9MaAGzXOMhbxY8=)
2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: C1MeTHhFMfZ/IGiicpedAA+d6RCXQO7tfnGBljhGJzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:22:2f:63:5b:b7:e3:93:df:b7:01:f3:ca:16:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Validity
Not Before: May 13 07:00:45 2025 GMT
Not After : May 14 07:00:45 2025 GMT
Subject: CN=16171418b3fafe470b1ffebe97939cdc69d19d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:c6:77:c2:a5:62:d9:a3:89:5c:23:f9:3f:
d8:3e:20:ab:c8:fc:e5:30:85:5a:af:48:3c:58:d3:
ae:b9:25:94:bd:10:5f:2c:1e:c8:e5:bb:c5:1c:4d:
99:36:a8:f0:3b:d1:29:0e:80:e4:d1:77:3f:2d:36:
1c:c1:c5:b2:d1:47:9b:d5:75:40:97:32:43:da:20:
ae:db:6f:17:e0:51:92:77:9a:ef:08:62:fb:a6:0a:
a6:9c:c4:b8:df:dc:24:58:08:22:fb:ca:05:36:59:
c1:11:4d:bf:1d:9b:07:fa:30:26:21:64:4d:8e:67:
5b:d8:2f:16:2c:b2:3a:5f:1e:aa:91:38:21:f9:f6:
15:22:16:0d:83:6d:0e:48:dc:be:fd:a4:97:17:fa:
52:8a:87:41:8e:7c:d3:49:85:79:9e:6e:a8:6f:fc:
86:47:08:d0:92:72:af:7a:e5:6d:c0:aa:66:20:a6:
c3:d4:c8:b0:0d:a7:ca:ed:a1:d6:ee:5e:09:a4:6f:
09:b2:9a:ec:7c:f1:0d:4c:64:05:44:6b:3b:5f:f5:
e7:f5:87:05:8e:62:18:d7:bd:a9:35:46:8b:a7:f9:
1e:71:51:a1:c2:84:73:9a:d0:18:4f:2f:36:e2:4d:
b2:73:43:46:f6:ef:86:f1:48:bb:a0:1f:d3:2e:1c:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:17:14:18:B3:FA:FE:47:0B:1F:FE:BE:97:93:9C:DC:69:D1:9D:5F
X509v3 Authority Key Identifier:
keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ae:27:de:42:9c:cc:c9:cd:06:8a:f5:c7:02:bd:37:d7:e7:
36:c9:f4:d2:a2:72:f1:f8:cc:03:bb:b7:85:1e:36:36:a6:2a:
1c:16:cb:9d:c4:d6:5e:5d:aa:c4:e5:52:89:74:69:08:ce:34:
59:41:01:b2:03:2d:68:ad:4d:e1:b3:cd:4d:0d:9b:6a:38:d2:
26:ab:ba:64:7f:75:8c:1a:fc:33:19:49:53:94:df:72:68:4b:
fd:54:35:8f:51:88:f6:54:12:75:c0:45:8c:5a:ca:d2:40:cc:
37:ba:2b:ee:70:6b:fe:a1:8f:c8:01:bf:89:2c:01:a6:82:2c:
ab:89:73:8f:1d:d2:14:a5:19:c7:9a:0a:72:71:89:95:e0:7e:
d8:3e:2f:86:d2:ba:8e:c1:ad:d9:84:b5:98:8a:e4:93:86:8a:
1f:58:46:5e:90:f0:97:86:16:ea:2d:de:a7:44:38:dc:95:86:
6f:a0:88:19:dc:40:2a:67:0e:56:cd:ed:82:98:81:c3:08:79:
b1:4b:7f:ff:81:61:73:eb:8b:b6:11:47:b6:47:c3:e6:bf:aa:
12:6d:41:6d:ef:d5:00:50:45:64:07:5a:22:fc:ae:9e:36:76:
8e:46:09:a9:b1:ce:bf:bd:e1:c3:2a:19:39:e6:b0:9f:b3:ba:
da:23:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:33:50 2025 by rpki-client