Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier: CE2ZVGyH8TJHHJr6tRYk2Rg+4PU4delnwSrsGJOr6kg=
Subject key identifier: 04:B8:07:4A:09:FC:9C:4E:1C:72:38:DA:6A:DD:F8:4B:EC:56:B3:93
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 0196BFDCBB00C93DC01A3C8469BB1F20C337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number: 09B5
Signing time: Sun 11 May 2025 15:00:36 +0000
Manifest this update: Sun 11 May 2025 15:00:36 +0000
Manifest next update: Mon 12 May 2025 15:00:36 +0000
Files and hashes: 1: AdJqJvlWVSQ_2sjUlxPnhKVvXgE.roa (hash: rvwXexvACQ2KWhkVUmfkFIN6qH1hFBVmtLOZa/tj5cA=)
2: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: M3oeFPCo8cAm23CJAPmEKZwve0c4WMGqOD0BuMnwXrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:bb:00:c9:3d:c0:1a:3c:84:69:bb:1f:20:c3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: May 11 15:00:36 2025 GMT
Not After : May 12 15:00:36 2025 GMT
Subject: CN=04b8074a09fc9c4e1c7238da6addf84bec56b393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:e4:d2:81:b5:d9:3b:24:6b:fb:5b:d1:95:
fe:5b:ab:95:86:50:dd:2b:67:df:ef:2f:26:58:94:
3d:b9:4d:56:09:f8:74:e8:93:77:ae:7b:b3:ce:ca:
e9:de:f7:b8:47:82:b6:4d:50:00:cb:dd:06:1f:f8:
6f:44:60:d4:d3:7d:b2:25:08:b2:71:68:34:2e:62:
76:8f:aa:29:ca:65:a9:c3:fe:4c:6d:bc:7c:3c:b2:
18:d3:13:dc:fc:57:e0:04:ff:28:86:a5:1d:c4:03:
e2:89:85:ec:c4:54:57:35:66:11:1c:af:34:05:2b:
dc:1a:34:d3:5f:7e:0a:77:5f:24:bf:89:39:c5:44:
37:10:26:46:4c:0f:6c:89:70:4f:f1:64:22:c6:f5:
b3:76:ef:6d:e1:50:25:d2:ae:32:37:84:09:1b:1a:
56:67:a4:d0:27:02:e6:c8:27:fe:0c:04:72:18:31:
16:ec:fa:6d:67:55:54:c5:6a:38:18:0c:fb:ad:90:
b3:46:e6:5c:c0:d3:31:59:a6:f2:41:c8:77:a2:82:
fa:d1:57:d2:2f:5f:10:60:e2:e1:e2:d0:07:2a:ce:
99:97:3d:23:f8:0a:d0:72:ed:74:8d:91:8c:a3:93:
6f:36:98:a4:4f:d1:e3:a5:43:e2:16:80:4a:5f:d5:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B8:07:4A:09:FC:9C:4E:1C:72:38:DA:6A:DD:F8:4B:EC:56:B3:93
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:12:d2:e4:46:e7:f7:36:95:98:6a:33:20:57:35:08:ad:29:
53:5a:9a:e9:60:a2:4f:11:70:12:e4:0f:ca:66:0f:ea:f4:12:
52:93:43:c6:20:ff:cc:1c:bf:2c:61:79:1a:bd:1f:50:88:a2:
8a:38:c0:26:9a:45:ba:18:e5:1b:34:cf:3a:56:7e:1a:f8:47:
4e:77:45:0b:f8:0d:98:16:83:85:e6:81:42:2e:c6:d6:15:08:
a9:7e:c9:92:87:cb:b6:3b:36:73:73:ba:15:f1:9c:f6:65:ff:
51:85:0c:29:a6:35:9d:e5:64:16:2d:26:59:f7:62:28:4c:59:
a7:6d:59:57:e2:8e:f8:53:78:de:24:a5:89:6e:46:9c:3f:71:
55:1f:c0:58:0f:cf:bf:3b:ee:4a:7a:61:60:19:31:da:0f:1e:
dc:e8:31:9c:c1:94:52:74:46:8e:bb:f0:38:3c:f8:3a:6a:e0:
89:98:f3:1f:f1:b8:9e:e8:b7:b6:0c:e8:c9:1c:15:d7:d3:29:
66:97:6a:42:0e:97:86:47:40:2a:d6:06:87:7b:73:09:86:ff:
6a:db:35:f8:c9:2a:37:48:47:d8:2c:71:96:2e:8f:69:e0:5e:
9b:9d:5d:01:65:5e:cf:04:47:f5:fe:c1:4d:29:1f:c2:99:84:
47:78:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:57:07 2025 by rpki-client