Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
File: ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json)
Hash identifier: xhBk/kqZCqv+0+t1GGw2FN/ALgDqLmI1I5E0PbtCy2c=
Subject key identifier: 29:48:B4:DC:BB:C1:BB:D2:64:53:E0:26:65:58:CF:02:87:58:9A:8F
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial: 0196C53A42E0C84B9D62355274E4A9B173F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 16:00:51 +0000
Manifest this update: Mon 12 May 2025 16:00:51 +0000
Manifest next update: Tue 13 May 2025 16:00:51 +0000
Files and hashes: 1: La2Bx3Kg3yNgjzXlOayck9yYHYs.roa (hash: RlSJSM6obvvJNVAHyjc4ol2rPsLp9JSNr1eJ2DwTo2Q=)
2: Zt9BdmMIpkw0MIyHiOhuungStoE.roa (hash: L7P2p04wT0zw3+4RreSfPUQp7foJhVeuqfmP5tYHfcQ=)
3: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: HOa2uCMfFjXExuW8J5MdCqcgRT3yO6o9pbIuPpC3hBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:42:e0:c8:4b:9d:62:35:52:74:e4:a9:b1:73:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Validity
Not Before: May 12 16:00:51 2025 GMT
Not After : May 13 16:00:51 2025 GMT
Subject: CN=2948b4dcbbc1bbd26453e0266558cf0287589a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:3c:02:0c:85:34:d9:69:aa:ac:76:72:d7:
ed:7b:c1:7f:4e:e8:b7:61:82:8b:83:1a:cf:97:40:
92:c4:89:07:07:36:d1:6a:f6:94:23:cc:89:6e:c5:
69:7e:e1:6d:e3:d7:11:5b:21:28:3c:b9:c0:c1:3c:
b0:46:72:d9:60:0c:d1:99:9f:4d:ad:e8:14:ab:eb:
34:e1:08:4e:21:f9:47:b0:b7:4a:c0:89:41:c0:e7:
86:b9:e4:3d:72:9e:8e:0d:64:60:25:97:d4:b6:10:
52:29:32:58:ef:ad:fa:1a:26:c4:a1:9b:bf:a3:ac:
2a:5b:38:c8:b9:3e:39:c8:13:9f:42:61:bf:30:e5:
d9:97:7a:30:3a:cf:05:0d:18:f2:97:68:38:4a:cc:
c3:b0:17:9e:f4:bc:27:c1:20:35:ac:c8:cf:02:a4:
c4:d5:c6:ce:d3:3e:9f:b9:dd:f2:e1:3c:72:52:2a:
dc:cb:bd:93:74:e4:9b:65:59:20:37:6a:18:99:e1:
a9:36:1b:39:b6:7c:78:d7:fe:bb:f2:84:6a:66:bb:
53:58:c0:15:6b:ca:d0:05:19:0f:0e:d6:c7:2a:53:
6e:94:98:18:0c:32:c8:a2:a8:7c:61:df:94:6c:7d:
19:48:fb:b7:7f:df:a2:5a:d2:db:af:a4:f3:3d:a0:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:48:B4:DC:BB:C1:BB:D2:64:53:E0:26:65:58:CF:02:87:58:9A:8F
X509v3 Authority Key Identifier:
keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fc:04:ac:26:07:07:17:2e:be:5a:7a:bb:cc:6d:39:98:57:
bf:18:cc:56:67:34:c3:07:b9:0a:bf:34:b2:46:10:90:82:02:
7c:e9:22:5f:f6:1f:ee:b5:69:d6:7e:58:10:3f:1a:c7:e5:a9:
c3:ff:ad:06:be:95:c6:e2:64:eb:1c:f8:4b:94:9b:40:b2:87:
29:d7:b3:ab:ed:31:a0:d8:9c:9f:4a:5b:72:39:4e:22:15:d1:
5f:ca:2f:b3:cd:13:e1:02:eb:0c:2d:d5:4c:45:de:84:1a:84:
8c:d7:0c:33:df:ae:8a:47:fd:e6:0b:f5:cf:23:93:24:0f:dd:
e7:43:95:46:cc:db:7c:9d:69:14:47:9e:3e:48:34:cd:09:c4:
7d:d4:f5:cf:35:b2:c1:a3:3d:6c:0c:58:24:d5:76:42:1a:00:
98:c9:b4:fb:d8:68:7b:65:91:fb:4e:57:08:f8:32:6d:f9:ac:
25:84:c1:42:79:73:f9:2d:be:00:60:bf:51:bd:fa:df:9f:e4:
ed:32:76:94:b3:db:8b:88:ef:56:ce:19:b6:b0:45:54:4a:13:
60:b0:90:84:17:3a:d2:aa:8a:62:8a:0f:95:2b:ff:ba:90:71:
f4:cf:22:a0:f1:36:b0:bb:83:40:1f:7f:c1:d8:27:fd:47:4f:
6d:98:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:18:48 2025 by rpki-client