Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: hPR0xsotTcfOoW6Oqyn6mEu9AFR+ljqjH/tbMnZsHFU=
Subject key identifier: 46:BF:9D:FC:9F:2F:75:C4:38:63:13:4E:C9:A7:0E:68:F1:D0:AB:4E
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 0196BF6EC4E9915D7B73B7829548E189F5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 13:00:29 +0000
Manifest this update: Sun 11 May 2025 13:00:29 +0000
Manifest next update: Mon 12 May 2025 13:00:29 +0000
Files and hashes: 1: 1-GwxGdQdSDv0GNH37kCGFbw_26Q.roa (hash: 8CUzx4XPAhE8seJ5BK68QhEaKNzFZcIoKPr1Lhqpte4=)
2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: zf66F41Yv1aHVsVL2OPBMh1CggthNOC4UrMn+ornnEw=)
3: tLZE9xN0wEMlciA44LFiADYH8LI.roa (hash: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:c4:e9:91:5d:7b:73:b7:82:95:48:e1:89:f5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: May 11 13:00:29 2025 GMT
Not After : May 12 13:00:29 2025 GMT
Subject: CN=46bf9dfc9f2f75c43863134ec9a70e68f1d0ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:3c:40:98:0d:80:d1:33:05:ff:9c:9e:b1:
76:77:d5:19:73:b5:d5:dc:1e:10:e9:e2:37:eb:3e:
5e:cb:b1:cf:aa:c1:39:7c:3e:42:eb:85:65:fc:1e:
ba:a2:6b:85:e6:a5:04:b0:d6:91:bb:e1:6b:a0:67:
ff:f2:4c:43:17:f2:2a:4a:db:41:e3:4e:f1:7d:8e:
c1:bb:c3:2d:4f:62:05:0c:50:af:4e:6b:6d:b0:e1:
96:ff:6e:dd:b9:a9:02:1f:bd:ae:10:4d:14:5b:f9:
4a:ce:a0:70:fd:a1:12:ce:df:ac:be:14:cf:ec:2c:
71:d0:29:c7:d2:63:28:04:c3:4f:d5:2e:d0:30:e0:
84:51:aa:fd:68:01:c6:a0:6f:f7:73:35:b1:2a:31:
11:4f:0c:5e:41:8d:8a:27:ca:15:6b:ac:1b:d6:c4:
d7:f1:89:0a:c5:31:08:8a:7f:34:2a:98:ae:77:1d:
e0:8f:32:df:a0:df:fb:89:b2:52:d5:fb:76:de:95:
24:68:2b:7d:bd:b5:ae:3b:c3:f5:e0:08:e9:71:67:
62:d6:f1:fe:a5:db:3f:45:e5:29:09:39:eb:33:d2:
eb:de:36:d7:47:61:77:56:f3:25:be:c8:bb:96:94:
4a:76:46:1f:fc:12:59:74:98:7b:ba:97:41:4e:58:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BF:9D:FC:9F:2F:75:C4:38:63:13:4E:C9:A7:0E:68:F1:D0:AB:4E
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0f:46:19:3c:99:60:84:20:82:e7:de:3b:60:85:90:7e:c7:
a0:b7:a6:51:f6:56:1c:af:c2:5a:4b:e1:cf:94:6f:5e:c5:f4:
bf:25:f4:b8:f5:72:b2:0c:44:28:2f:27:92:ab:0e:c3:62:71:
90:bf:21:21:45:e1:c6:57:f4:17:5d:2b:40:23:9d:8e:dd:cc:
bc:12:f3:54:fb:d5:65:26:a5:ea:1e:46:87:f5:48:ff:48:08:
c2:dd:ff:51:82:84:d0:11:ce:31:62:be:79:68:6e:28:89:55:
20:a7:f3:c9:eb:47:86:dc:73:b2:d7:3f:4b:27:f0:fa:43:4b:
cc:5e:56:53:7c:1b:3e:a8:3d:05:43:bc:d3:93:48:b3:dd:49:
d6:15:18:78:4d:a1:ef:3a:e8:3a:dc:cf:57:30:77:fb:3a:70:
3e:fc:02:9f:56:92:87:f2:c4:4a:35:ed:10:1d:8c:56:d5:88:
fe:c8:24:be:43:2f:4d:3f:a2:9d:c0:fd:5a:57:7b:cd:4c:46:
0b:52:49:45:e1:3a:11:54:33:d0:ab:32:d6:d4:b8:e6:7a:ab:
42:be:37:75:98:54:93:d1:7d:c2:dc:a8:78:de:eb:4c:00:44:
8a:10:ee:a4:1b:ce:de:6f:cd:bc:69:b7:d1:9f:11:51:7b:77:
fc:9b:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:25:27 2025 by rpki-client