Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: pPvMgZjH4esfii/b3B3GOQs1eUmIoaTC1wY5k4ck4+Q=
Subject key identifier: B0:88:63:D4:83:74:14:D0:34:E8:4C:DA:D7:C6:EE:2B:FC:CB:C0:DC
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 0196B93599AFD3930824627E8CD9B1A954CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 011C
Signing time: Sat 10 May 2025 08:00:19 +0000
Manifest this update: Sat 10 May 2025 08:00:19 +0000
Manifest next update: Sun 11 May 2025 08:00:19 +0000
Files and hashes: 1: cbfaYBjluJFGRHIZotfNKfL5QOM.roa (hash: hnnwP5hTMZNnGccOJwmbq229la5aF88t7OiSZXiU/mU=)
2: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: Q4ipJ0q82OeTo0zmPJqj1lrbSh69Sk86s4A9egs0X3o=)
3: zwNxRZCXOiLKuZa_7Wmh9NcuOqQ.roa (hash: 6xxBkLaHc1up/veCbZl0eXM5uTf3B1SDA3dM0Oft33U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:99:af:d3:93:08:24:62:7e:8c:d9:b1:a9:54:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: May 10 08:00:19 2025 GMT
Not After : May 11 08:00:19 2025 GMT
Subject: CN=b08863d4837414d034e84cdad7c6ee2bfccbc0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:d8:39:68:02:f6:2e:64:5b:33:dc:c9:b7:
f9:0e:fd:09:38:16:52:af:e7:98:5c:82:c8:6e:dd:
5d:18:35:63:cf:43:40:25:07:a4:41:0c:3b:fd:54:
5e:55:c9:b9:5a:ad:b5:4b:4e:d3:bd:f0:1c:dd:4d:
e2:f3:e1:a6:43:cf:9d:25:b6:79:b5:89:5c:fd:58:
73:a8:51:d2:73:78:d8:62:dc:ec:a5:7d:f4:d2:ab:
16:fe:1d:a2:e6:13:15:1f:c9:16:dc:9d:23:7e:fe:
1e:29:77:f5:3c:fe:fd:90:99:54:e0:e8:53:b7:a2:
5b:69:43:e0:fe:24:92:a1:99:6c:34:39:28:f2:93:
24:c0:5c:9e:25:cf:ef:4f:79:ae:99:74:21:a4:6c:
4f:b1:4e:f9:a9:fe:7a:87:4c:c9:c2:9b:c0:c9:ed:
a9:3a:8a:ec:d9:0c:24:6e:82:d4:de:2f:81:15:c3:
cf:5d:97:90:c3:2b:a8:0a:8a:13:49:ab:53:3c:c1:
b3:48:e6:56:d8:0e:c8:38:65:0f:ea:18:42:5d:54:
c1:9f:36:12:a4:0b:8b:d3:9b:16:09:e6:84:c2:23:
93:d7:9a:df:f7:7d:56:15:2a:be:e7:1f:32:67:6b:
e0:98:e2:33:8a:05:4e:9d:db:da:21:d5:a9:78:02:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:88:63:D4:83:74:14:D0:34:E8:4C:DA:D7:C6:EE:2B:FC:CB:C0:DC
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b5:b1:42:56:d0:47:eb:52:bd:34:17:2d:07:ae:5b:77:db:
00:8b:ab:37:3d:a6:c7:c6:22:85:c3:d4:41:28:74:53:14:01:
7a:6b:4f:89:be:24:8e:71:5c:53:8a:97:5e:33:b5:91:f4:72:
6f:59:37:a5:06:fd:45:84:40:38:29:3c:f5:73:2b:0e:2d:b0:
bf:b9:64:48:bd:5e:b5:32:86:42:29:f1:9b:17:66:49:ca:9f:
a1:d5:0f:d9:07:19:31:b2:70:a4:1d:dc:6d:86:9c:78:e1:78:
27:ba:c1:75:cd:15:12:7d:db:ff:21:15:bc:b4:0d:f9:93:a6:
a8:5e:fb:fc:88:91:41:de:69:5a:d2:9b:77:9b:21:ea:67:a5:
f4:c4:18:a3:8b:96:81:a4:6e:bb:39:8b:27:ce:ec:10:75:f7:
77:b5:1f:5b:ac:74:75:a0:b4:e8:c4:29:7b:6f:df:04:6c:16:
26:b2:ec:57:03:56:5e:d2:42:71:32:c8:3d:9e:b2:f0:fa:44:
0d:21:0c:7a:85:98:ef:ae:6f:98:6c:98:c3:fb:f5:85:5f:98:
e9:91:ea:37:b9:71:34:b1:eb:8a:2a:51:1e:b0:d7:f3:66:a5:
2e:75:71:80:36:e5:15:ef:81:f7:9c:da:00:e5:d4:32:84:d1:
e5:12:71:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:02:28 2025 by rpki-client