Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier: wAutEdPlIkHNMxZEzhwLq4ATEJ3xxajN6e02TDFPUqU=
Subject key identifier: 0E:8B:13:83:27:F9:0C:58:E9:6E:3F:96:6E:C9:2C:B0:0B:1B:DD:5A
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 0196BF6FBF70C4A393E0BC2EF937D8E74369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 13:01:33 +0000
Manifest this update: Sun 11 May 2025 13:01:33 +0000
Manifest next update: Mon 12 May 2025 13:01:33 +0000
Files and hashes: 1: SMwI-Rnmis2eePW_F_GRyzsQVwc.roa (hash: tdRLxodAQZWX8dKW9xJOxhOQI+ocU2apdjVD9eeaSWc=)
2: jHM5InJQV_3L354P4EcDRlzLqQg.roa (hash: YagEFBVsay86X4xOyFCoWFnHQNGB7P3cKZT9Ojcer8U=)
3: p60T_9BRDnROvd9U0mIYWu3JYG4.roa (hash: CASmZCb6AimtCFSZaoN9/6dcpSXZ9rOo6eQFeAX0PBw=)
4: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: KziFi4IZZXrHkRSDX0JORmezYIbEJ0ZkK4OdR12RRNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:bf:70:c4:a3:93:e0:bc:2e:f9:37:d8:e7:43:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: May 11 13:01:33 2025 GMT
Not After : May 12 13:01:33 2025 GMT
Subject: CN=0e8b138327f90c58e96e3f966ec92cb00b1bdd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:b2:16:41:80:80:aa:e6:27:d7:8a:56:c0:
fd:c5:b1:ef:ed:7e:dd:22:ff:e2:70:5a:17:c9:b7:
fd:7d:45:f6:3a:40:f5:81:19:46:71:8f:b9:c3:fd:
ef:3a:db:61:28:49:70:bf:09:de:1a:6e:d5:e0:d0:
e9:b6:2d:b3:24:92:32:67:6d:91:7c:b8:c0:4d:24:
ec:95:d3:4d:bb:22:34:e7:b9:c3:3b:8b:fd:0e:3c:
24:a5:71:2f:29:d4:0c:f6:7a:52:16:09:25:1e:c6:
52:f8:dd:02:5b:4c:e7:e5:38:7d:3e:4a:ff:de:77:
7d:84:25:4e:98:2e:39:e7:66:37:a7:57:86:2f:7a:
df:96:b8:71:1d:e8:89:52:c5:02:9c:13:a1:6f:f4:
f9:87:17:44:32:a7:10:06:72:26:50:12:26:f8:85:
78:5c:24:78:6a:ce:78:77:8c:c5:01:3b:06:40:70:
ea:c1:9a:81:29:53:8f:24:f7:15:32:fb:65:5a:c2:
83:ac:8f:8c:3e:17:e3:3d:4c:2b:fd:75:58:32:78:
0d:33:f5:d9:f6:06:b4:63:e5:6c:84:bd:4b:2b:5e:
26:2e:cf:ba:17:5c:e2:28:cf:74:ae:20:fc:77:4c:
26:64:e7:8f:6a:b4:62:2a:1d:96:38:a9:ed:74:fa:
c0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8B:13:83:27:F9:0C:58:E9:6E:3F:96:6E:C9:2C:B0:0B:1B:DD:5A
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e4:73:68:3b:30:7e:ee:6d:90:1d:bd:a8:43:12:33:f2:e5:
be:bb:bb:eb:d4:b9:57:fa:29:95:80:c6:d3:2d:57:f2:40:4c:
c5:34:59:9a:7d:05:b9:cc:a4:9a:ba:25:53:1c:66:b4:96:4f:
15:16:88:fc:e2:ed:1f:33:39:b0:f9:72:e3:c4:56:f0:a7:75:
cb:a1:aa:a7:eb:8a:fd:c4:e5:b6:35:fe:c7:04:28:69:bc:27:
f9:35:17:6f:dc:da:68:21:90:fc:8d:7c:99:7e:5c:b1:da:dc:
09:4f:f0:fc:01:6c:22:99:8d:c8:31:d2:c8:1a:c5:ff:fb:0e:
3e:23:fc:31:e5:c5:75:c1:aa:67:f4:43:eb:36:4a:fe:ff:fb:
a7:5c:18:a9:38:3e:05:f6:7c:b0:4f:b6:a7:75:80:00:0c:b3:
ba:a2:58:e0:05:d7:19:09:2c:49:a6:6a:af:31:d1:42:f7:f9:
c3:db:a1:85:e7:b3:42:de:69:ed:32:dd:52:d2:c8:50:6c:fc:
d8:28:ff:87:82:2f:2f:14:bc:55:5e:6e:f9:90:51:7f:8c:1c:
96:30:9b:6b:4e:18:17:cb:67:7f:bf:9d:37:5a:5f:c7:a5:d9:
3b:09:27:b2:3a:f4:7c:42:e1:79:cb:68:52:ef:dd:1a:e7:e8:
91:24:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:42:40 2025 by rpki-client