Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: 46XKT1CNDnDZRl3ztwzK6evFxJ2rX9onN3Ih04Y6ABY=
Subject key identifier: A3:02:F7:88:0C:B8:A7:B4:E1:DB:0E:EE:57:BE:4C:29:C3:AB:B5:8C
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 0196B1E9FC4886382801DD602F412B67C6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 1535
Signing time: Thu 08 May 2025 22:00:23 +0000
Manifest this update: Thu 08 May 2025 22:00:23 +0000
Manifest next update: Fri 09 May 2025 22:00:23 +0000
Files and hashes: 1: iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa (hash: gM1ZjnX5a45F3g+DHFf4ROLZzbrv4Z9zB/pBieJvcD0=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: kSywXOlBPpu80FVc461+tkGn42BoEKi2FzQBAahf6g4=)
3: uSjPkHVrQGEYzySpy8LO3vhOhQk.roa (hash: 7CsfbkRbBqND0q0gdzh2M/F8+y9Oj0uA6RZKZkPuiPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:e9:fc:48:86:38:28:01:dd:60:2f:41:2b:67:c6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: May 8 22:00:23 2025 GMT
Not After : May 9 22:00:23 2025 GMT
Subject: CN=a302f7880cb8a7b4e1db0eee57be4c29c3abb58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:26:d4:f6:ce:bd:e1:8b:96:14:a6:ac:fd:
92:1c:d3:db:c3:60:40:cd:40:f7:f4:5c:5d:67:fc:
47:8b:ec:e5:94:7e:75:c8:44:d4:cd:59:e7:8f:34:
10:7f:cb:ff:6d:b4:f3:82:f6:c9:7d:bf:3c:76:15:
c1:5b:5d:c8:9d:a6:70:7d:07:24:7b:5e:8d:8a:38:
93:86:55:31:c2:d8:bb:9a:6f:1c:27:cc:63:12:ee:
bf:d5:dc:48:d2:16:8d:82:0e:1b:7e:76:68:da:12:
5f:ff:a5:fd:ec:7e:8a:58:00:82:82:4f:d9:45:34:
81:e3:7d:a7:03:8d:e5:b4:d7:3f:aa:ad:f9:a9:8e:
44:7d:3c:78:39:7e:ad:e6:e7:cc:56:a0:76:dd:8b:
52:58:87:3d:41:5e:cb:17:af:68:4a:77:2b:91:90:
43:de:cc:50:cc:ca:0d:47:09:fc:30:60:96:ef:a8:
a1:ba:c9:7b:c0:45:17:51:18:d0:ca:c8:1a:14:25:
20:81:1a:ed:a8:9b:d3:18:1d:0b:3b:e7:1b:cd:66:
0b:66:7f:0d:60:66:ae:16:08:04:0c:c0:c2:46:2a:
26:3b:88:44:bd:bb:78:1f:59:ac:72:55:83:96:da:
d4:3c:6f:32:57:38:d3:59:34:8d:7a:6e:4f:c3:80:
0f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:02:F7:88:0C:B8:A7:B4:E1:DB:0E:EE:57:BE:4C:29:C3:AB:B5:8C
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:66:52:ff:a9:15:01:f1:b1:ff:7d:17:c5:87:77:f6:7e:4b:
54:21:61:6a:2c:d4:d9:c5:bb:b7:06:5f:ae:f2:ac:00:69:56:
79:e5:7d:62:d6:d3:3f:f3:9e:e7:01:d9:36:a3:74:c0:00:53:
32:25:af:0c:96:0c:2b:8f:38:a6:38:33:1d:bd:13:95:c5:42:
ac:a1:b2:4d:7e:f6:9f:50:9f:fe:6d:7d:ce:4e:8c:9a:26:11:
61:63:fa:83:c5:20:7f:26:50:9f:bd:98:c5:ec:e8:9f:b1:81:
00:81:9a:f4:48:43:4f:a4:52:b2:ec:d3:84:15:f8:db:ed:94:
93:b6:46:05:2d:c1:52:88:9d:87:29:50:16:8b:57:be:89:b8:
ed:8a:08:ef:27:be:88:cb:ae:4b:7c:b4:68:f7:e1:ef:4a:8a:
84:26:31:c0:43:82:a8:9c:e2:14:52:c9:03:75:d9:80:99:3c:
ad:41:60:a8:60:b4:0a:77:13:4b:e9:7f:a8:71:bf:2a:d2:13:
1e:bf:c9:b8:37:8e:ee:bd:11:65:53:85:56:2d:94:fb:ee:de:
bb:4f:7e:66:4a:a2:a4:e9:cf:e8:74:c8:76:02:59:de:e1:48:
1c:ff:a3:79:7b:e2:c8:ad:07:8b:04:23:c8:71:50:6e:ce:6a:
67:85:3c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:33:50 2025 by rpki-client