Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: Mi2gecJaq07zuNEmJ1OfOmI5owHQ0+g1wTHpcQkfvYs=
Subject key identifier: 24:DD:3A:0B:6A:58:3A:15:B4:B1:4D:C4:EE:3A:7B:28:15:CB:45:35
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 0196CC85924C08A63F17C8ACF2DD6C6873D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 1229
Signing time: Wed 14 May 2025 02:00:27 +0000
Manifest this update: Wed 14 May 2025 02:00:27 +0000
Manifest next update: Thu 15 May 2025 02:00:27 +0000
Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=)
2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: 0GP/aq7ssspH86FbSEv3Zi8nUrxlpE4s+fZeP7OJpP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:92:4c:08:a6:3f:17:c8:ac:f2:dd:6c:68:73:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: May 14 02:00:27 2025 GMT
Not After : May 15 02:00:27 2025 GMT
Subject: CN=24dd3a0b6a583a15b4b14dc4ee3a7b2815cb4535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:8b:d7:f3:dc:7f:15:f9:43:79:22:ca:0e:
69:58:6a:46:b2:8c:e7:36:64:98:23:13:93:de:4b:
6d:9b:9a:67:d9:f0:30:fd:ad:75:19:d5:cb:2f:86:
cd:6f:d3:c0:4e:ea:cb:a0:f4:d5:3f:20:74:80:de:
c9:c9:15:6c:a3:bf:01:15:54:85:38:d7:bb:3c:7d:
71:13:c1:a5:ef:de:d5:1f:41:2f:cf:21:79:e5:46:
f6:58:34:fb:68:6b:dd:e7:4d:91:71:53:34:48:11:
6f:de:29:33:a5:fc:33:76:38:65:42:53:df:c7:5e:
cb:06:00:fa:4c:b8:48:90:31:8c:d5:84:26:38:8e:
86:02:07:1c:9f:80:b8:32:fe:46:90:78:82:68:a6:
b1:60:d7:94:3f:41:1c:38:30:54:e3:28:13:b7:d2:
4b:c8:9d:d5:9d:05:af:dd:f7:fa:f4:d8:13:b6:bd:
ba:9d:b6:77:95:e8:41:aa:65:08:2b:12:38:f5:ec:
d8:69:94:91:bc:2d:12:19:64:74:17:67:13:39:a8:
79:6c:2f:ad:87:99:1e:86:bd:91:d8:c8:0b:4a:9f:
fa:f0:75:0b:76:68:96:eb:64:e9:33:91:5b:cf:c8:
f5:92:46:eb:8f:c8:a3:74:27:88:0c:5d:63:ab:6f:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:3A:0B:6A:58:3A:15:B4:B1:4D:C4:EE:3A:7B:28:15:CB:45:35
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:65:d6:7c:9e:70:bb:53:f8:4b:0c:e1:f7:38:e7:90:a4:ce:
0a:e3:0f:45:33:2a:90:04:8e:84:3b:5a:c7:42:4c:fa:8d:af:
19:b9:79:17:00:95:96:b2:b8:f6:89:62:87:2c:ca:df:60:0e:
4b:29:ed:47:df:af:f2:64:b7:f8:87:7d:80:0a:f7:f5:63:8c:
f3:f3:a3:f9:76:f0:ad:96:80:5b:18:f9:6e:34:e7:73:23:c2:
b0:9e:f5:a4:a3:34:54:5a:f0:90:1b:52:db:26:93:30:3c:9d:
3f:b4:98:58:20:e8:1f:6c:ca:c4:09:f4:f4:b6:79:c1:ac:e9:
93:5f:00:42:e2:cb:ce:ca:de:a7:47:46:27:9b:4e:3a:9f:86:
8a:19:ff:91:55:f4:77:2c:b1:9a:75:78:ec:d4:af:56:b6:a9:
6d:b0:4d:46:c0:b6:58:a2:aa:76:dd:a5:ec:d9:62:55:e4:2e:
9b:dc:48:86:e0:26:89:a1:c1:83:42:c9:29:3e:0d:80:f3:a6:
8f:70:1d:40:6b:3f:b3:16:9a:6b:5e:d9:54:ac:e8:bb:54:d9:
9d:a7:a7:3a:2d:94:dd:7a:33:3c:a6:3d:02:b1:d8:ab:3d:0d:
92:6a:ba:fc:64:dd:85:51:3f:42:50:1c:9e:c4:32:7b:16:4d:
a3:07:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:17:33 2025 by rpki-client