Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
File: pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json)
Hash identifier: diegKwtRiMJiAXJoQ4DCheP3AunGkcnYbNqNpzTGJpM=
Subject key identifier: DA:89:3A:40:74:D7:CE:28:C5:F0:31:29:5A:DC:EB:8A:8B:AD:A7:CD
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial: 0196BFDD1256E8F8CA4548F143951ECD9F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 15:00:58 +0000
Manifest this update: Sun 11 May 2025 15:00:58 +0000
Manifest next update: Mon 12 May 2025 15:00:58 +0000
Files and hashes: 1: W8EH6cHJ1jqNd1-fbWQ4302NcPE.roa (hash: 0aNZYoUKp18HEp9H4MaKrqtXZZf4gT5hLWGwRtSFdxU=)
2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: 4nAREz4tPHjOwLgHQS7okj0M9zRlggfSARfFQusFj68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:12:56:e8:f8:ca:45:48:f1:43:95:1e:cd:9f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Validity
Not Before: May 11 15:00:58 2025 GMT
Not After : May 12 15:00:58 2025 GMT
Subject: CN=da893a4074d7ce28c5f031295adceb8a8bada7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9f:17:1e:00:ed:23:cc:ce:4b:5d:cc:df:8d:
98:f8:f1:c0:e4:94:ef:cc:59:9f:a4:81:03:1c:61:
3e:6e:20:d4:3e:a8:10:92:ed:93:ab:bf:c4:8f:44:
1b:92:2d:68:fd:41:9d:b4:aa:65:54:e0:6b:04:fc:
79:ad:33:98:be:fc:73:b1:56:42:a9:41:27:1a:f6:
4a:2a:86:bc:2a:22:6a:1f:b0:40:d7:b9:e2:82:5d:
9c:b8:cc:91:02:1e:d0:69:99:83:26:f8:7e:f0:e2:
3f:da:b7:80:1f:cb:d1:b2:7f:8d:2b:ad:d3:b5:d0:
a5:f5:84:71:b3:d5:16:2b:09:84:c2:24:66:bc:47:
6f:00:3e:9f:c6:73:73:67:a1:62:19:06:9e:f5:99:
79:b1:38:75:eb:54:c8:31:6e:fd:ee:f4:b0:45:3a:
4a:a6:2a:da:ab:be:21:2e:8a:32:47:ec:7c:28:aa:
03:22:f3:cd:f3:84:0c:e5:89:ef:8a:84:8b:34:4e:
eb:d5:d5:f6:5f:b1:77:58:85:7e:78:89:31:68:e7:
54:cb:d0:59:f8:57:ab:32:5d:1f:8f:39:d7:9e:34:
8c:9b:0b:ea:61:f6:73:02:97:0e:86:63:af:3d:3d:
d2:af:07:d7:d2:21:a7:0b:43:e0:21:aa:b6:c0:6f:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:89:3A:40:74:D7:CE:28:C5:F0:31:29:5A:DC:EB:8A:8B:AD:A7:CD
X509v3 Authority Key Identifier:
keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d7:5a:bb:0f:b5:74:bd:b4:59:06:ae:6f:a1:f4:25:a1:48:
55:7d:24:38:cd:ef:aa:d1:2c:7f:1e:bc:ea:e0:5c:94:d6:86:
fe:f9:ba:99:39:8b:61:fd:f0:47:c0:18:fb:e4:2c:3a:8c:2a:
f3:1b:62:97:d5:1a:ee:5e:dd:2b:44:07:f9:48:38:57:3c:03:
57:32:13:7d:d6:e1:95:6a:00:57:95:4a:2e:88:93:78:b5:a7:
a2:fd:9b:2c:b2:a6:69:84:59:2d:16:c9:8b:b1:76:3a:d6:91:
09:db:38:f9:c8:56:b9:f5:d8:7f:c7:aa:3f:e5:ce:6c:d3:45:
54:b3:f0:08:d7:58:7e:40:bc:d2:e6:13:52:bd:40:59:93:b5:
7b:ea:9b:cf:5e:70:d3:3d:c9:df:85:20:04:d2:1e:7a:11:0f:
c8:8c:7f:95:ee:fd:61:f6:43:5c:f6:7f:36:56:88:22:fc:e4:
bd:30:90:ba:1d:41:ce:21:b9:f4:be:35:2e:5c:48:48:1b:61:
a6:cc:8a:a7:11:7d:78:d5:29:15:a7:40:08:6c:13:f7:a7:54:
dd:ec:bc:d0:8a:e1:5a:8e:3f:c0:9d:95:01:f6:7f:df:a4:fa:
39:58:d8:ad:07:60:04:c6:cf:1a:2d:43:43:70:22:9f:b2:86:
20:7c:5c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:16:22 2025 by rpki-client