Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: X5ALG09t2TX2N598B/lajxGSJwMumWieK9jLZuS64KA=
Subject key identifier: 3E:FF:12:A2:66:C7:9B:63:AD:07:76:CB:97:9D:42:AA:33:2E:33:E0
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 0196A98C1C87F4313E993D50A39B0C249A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 01F5
Signing time: Wed 07 May 2025 07:00:53 +0000
Manifest this update: Wed 07 May 2025 07:00:53 +0000
Manifest next update: Thu 08 May 2025 07:00:53 +0000
Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=)
2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: P98mN4jFskag0bO6r+90meFk0UznRtalM/fHi5QCfp8=)
3: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8c:1c:87:f4:31:3e:99:3d:50:a3:9b:0c:24:9a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: May 7 07:00:53 2025 GMT
Not After : May 8 07:00:53 2025 GMT
Subject: CN=3eff12a266c79b63ad0776cb979d42aa332e33e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:cc:18:9a:05:e3:b2:48:f2:e1:34:be:9a:
57:39:47:12:ae:0e:cc:e1:33:c9:55:6c:37:4d:2c:
93:c1:08:a9:4d:7a:65:d7:10:8e:d8:d2:57:55:22:
73:2e:fb:48:34:49:58:51:ad:79:0c:f0:97:47:73:
58:25:ae:e3:cd:12:5d:c6:b3:95:70:b2:82:21:e6:
66:82:e5:6e:f4:13:4d:0f:a9:70:6f:5f:dd:d1:e5:
13:a2:48:f9:d8:c4:d8:82:39:9a:97:9e:5f:a4:0f:
d8:86:9b:f7:20:03:11:56:1a:03:32:d8:b9:bf:3a:
87:c8:cb:f8:76:dd:46:7f:e8:dc:7a:d0:62:fc:c3:
4a:80:a6:f9:7a:93:1e:34:95:24:d1:c5:79:38:8c:
63:b9:cd:b3:b5:e1:62:98:af:2a:c3:2c:c6:77:e8:
f8:b6:ea:cf:e7:35:58:e4:6d:97:41:e4:86:dd:4e:
7d:56:6e:c6:11:e9:57:fd:c5:03:54:59:c9:c9:92:
b0:f3:1d:a9:95:2b:55:79:31:89:56:1c:9f:3f:42:
7c:62:87:1e:50:bf:ec:a2:a6:aa:cc:b3:62:69:cd:
e5:19:92:80:c2:2f:3a:75:19:f4:9a:15:e9:6a:18:
6e:d3:fb:6c:8d:bf:9d:72:b8:88:57:21:24:75:1c:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FF:12:A2:66:C7:9B:63:AD:07:76:CB:97:9D:42:AA:33:2E:33:E0
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5d:b7:37:12:59:22:2b:66:d7:3c:fb:99:4f:b7:bd:f4:3e:
d4:b3:3b:14:03:e4:5e:b0:6b:a4:27:1d:51:50:5f:a5:37:9b:
5e:49:15:56:4e:4f:0d:71:c8:04:7c:c3:91:ce:37:b5:3b:59:
1d:b9:25:f3:22:c7:d0:89:be:45:4c:ca:97:42:18:10:8f:d9:
e9:26:66:fa:1d:89:36:5d:fc:34:b3:d2:fb:71:ab:f8:f5:b4:
d3:63:08:b8:b5:64:73:78:79:80:af:05:df:f3:e7:57:85:c7:
9b:aa:da:49:29:a6:ad:0f:ee:20:34:2c:bc:dc:f6:44:09:61:
9a:42:41:b7:94:25:47:f9:c8:88:37:0f:75:2a:8d:72:1b:36:
e9:75:4d:21:68:60:f0:85:66:8a:b3:d3:77:84:64:f0:09:94:
4a:2a:c6:47:54:33:a2:c7:b0:7e:cf:58:65:6c:95:f9:00:ac:
04:d2:1a:2c:df:22:41:05:62:51:7c:08:53:91:40:b5:30:22:
74:e0:b3:dd:d5:a3:95:4d:12:63:c5:25:5a:53:34:8a:82:ad:
04:2d:61:c1:04:5c:06:4c:fe:93:b8:6d:22:db:95:df:43:28:
ad:06:68:b7:7a:23:f5:b5:4a:9d:c9:82:32:a0:c9:e8:d5:6a:
76:c7:0b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:32:55 2025 by rpki-client