Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
File: pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json)
Hash identifier: h9x9xwCIlF5BdjfVDzs9mpXSfKd9FBYj69B0Z6zUI4U=
Subject key identifier: C7:40:DF:A6:4C:78:C3:23:04:16:56:7F:41:F9:41:F4:E6:81:47:B3
Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
Certificate issuer: /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Certificate serial: 01969F08498DA694E46298012BF48FCD2ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
Manifest number: 020C
Signing time: Mon 05 May 2025 06:00:42 +0000
Manifest this update: Mon 05 May 2025 06:00:42 +0000
Manifest next update: Tue 06 May 2025 06:00:42 +0000
Files and hashes: 1: 3zuNm_rolfFNztpZzjMDGM_7wOs.roa (hash: 6DVW+skCd5kOszHOwiH8v1Z8QoCm6yJygVbagRePo+4=)
2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: 3N5vhn0FUYdVouUlMLt681/k0wkiWe0Z7rtwaPawOqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:49:8d:a6:94:e4:62:98:01:2b:f4:8f:cd:2e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Validity
Not Before: May 5 06:00:42 2025 GMT
Not After : May 6 06:00:42 2025 GMT
Subject: CN=c740dfa64c78c3230416567f41f941f4e68147b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:97:f6:86:86:21:d5:23:68:eb:e0:e7:04:
2d:0b:d0:f1:75:22:73:4f:a6:ee:d8:7b:65:df:ff:
62:5d:0d:26:83:cc:b9:d1:06:96:e6:a5:84:ac:fd:
8a:fd:b9:06:ae:e9:ae:cb:d7:65:b7:3d:8d:e0:a9:
1e:1e:2c:15:e8:85:d9:cd:ce:f8:ba:5f:1c:d1:6e:
e9:8f:78:42:3a:e4:0d:12:d0:1e:b8:a1:6a:89:52:
8d:8e:ef:6e:1f:2b:9e:ea:4f:09:10:6a:44:b4:0e:
c4:70:60:f6:4b:89:4e:36:4a:7e:88:af:bb:0a:e0:
f4:ef:05:c9:0b:b6:ab:26:5d:dc:94:c6:85:1f:c2:
96:b0:a6:82:22:a1:c9:66:a5:b8:86:90:e6:bc:26:
14:19:d2:6d:90:25:4c:70:dc:3e:9a:bf:4d:e3:a9:
6d:c0:bd:9d:51:dc:50:c9:cb:87:27:c3:64:b9:e6:
39:ee:2a:80:e0:35:db:a9:43:45:a8:8e:00:72:d4:
cc:fc:71:9e:44:82:1e:22:36:12:fe:fc:a1:48:aa:
1a:df:1e:96:9c:90:03:af:c7:9c:01:02:8e:38:c9:
c8:a0:51:55:08:1f:c9:71:4c:f3:dc:0c:5d:f1:92:
26:c5:c5:37:84:52:37:5e:c3:d8:db:35:df:08:26:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:40:DF:A6:4C:78:C3:23:04:16:56:7F:41:F9:41:F4:E6:81:47:B3
X509v3 Authority Key Identifier:
keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9f:91:f1:3d:29:2a:37:17:58:25:ca:d5:2c:94:48:c5:52:
f3:77:a1:e1:46:2f:61:b0:6a:f6:8c:15:5e:19:b2:a8:7a:e0:
e7:ab:ec:58:1f:8d:db:bf:92:59:8a:52:5b:c2:db:34:c1:99:
13:ed:28:05:03:57:cf:99:99:d6:5b:7d:a8:4c:8e:b9:b0:b5:
5a:e8:1e:e8:58:1f:c8:90:6c:4d:97:be:91:2d:87:77:2d:a2:
cf:36:2b:82:5b:a7:fa:8a:a2:7f:02:96:25:01:b3:0d:c3:a7:
2d:bd:36:ff:90:d0:bd:b6:5c:f5:27:08:6c:e1:39:42:24:a1:
9d:99:28:32:e8:83:56:b6:d9:53:95:41:65:94:88:58:5a:f8:
d7:cb:1b:a5:21:46:93:90:df:89:92:e9:85:62:47:9d:51:f9:
24:c2:05:80:9b:57:f6:b6:01:7c:86:82:c0:94:67:21:1a:e0:
b2:4a:7a:ff:5b:df:ce:62:e3:22:3a:04:a2:a7:58:36:dc:4c:
3e:9c:a5:74:a6:6b:c3:c6:8c:9a:1c:28:e2:a5:5f:3f:64:bb:
35:5c:40:d8:c8:33:a4:c6:e0:23:56:ac:6b:11:08:14:97:e6:
e5:96:4f:30:b7:01:db:ef:01:ab:74:fb:83:7b:fa:e3:8f:00:
92:01:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:50:59 2025 by rpki-client