Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: WxtvVwHGAQ+mNsemdGv1cwALrTyJFEAGA/UaPbkRtZI=
Subject key identifier: 71:5F:D4:8F:A1:29:63:72:41:EA:9F:30:93:AC:B2:D4:7B:8C:9C:E5
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 0196DA0A56FD3CF21C3F7286C709758770FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 1543
Signing time: Fri 16 May 2025 17:00:32 +0000
Manifest this update: Fri 16 May 2025 17:00:32 +0000
Manifest next update: Sat 17 May 2025 17:00:32 +0000
Files and hashes: 1: LfvParklu0gxciTOgFZh-BpaZYE.roa (hash: fxMbCosgtYcMMEyUONm7A6ez+akqjsDq1R4iKueGkms=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: Z1quk/Px98wYV901KoH680lh0NS0l80kdhQK9sPYJ7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:0a:56:fd:3c:f2:1c:3f:72:86:c7:09:75:87:70:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: May 16 17:00:32 2025 GMT
Not After : May 17 17:00:32 2025 GMT
Subject: CN=715fd48fa129637241ea9f3093acb2d47b8c9ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:e1:dc:63:aa:77:bd:58:f1:cb:5c:55:1f:
cc:50:b8:51:9d:cf:e5:27:1b:42:23:03:b7:f0:8a:
59:16:b4:b5:6a:87:44:b2:62:76:a0:2a:36:2e:de:
c8:e1:1e:a2:5e:26:4f:52:0f:c7:63:71:d5:43:93:
0e:70:9c:37:b2:eb:82:00:30:6a:d4:d4:14:6a:d6:
54:ec:52:08:a9:44:9d:53:33:d5:06:5d:66:08:45:
fa:5f:da:f4:4f:73:3a:3a:26:01:d5:17:5c:ea:37:
12:d5:89:e8:2a:8c:31:15:8c:bc:a5:24:b9:84:01:
3c:16:9d:f3:61:7d:b7:a7:41:2b:1f:21:b6:d0:44:
e7:a9:ab:b2:7b:fd:44:29:73:81:fb:af:10:b3:78:
68:97:e5:4a:49:a6:20:52:16:71:1f:05:01:c8:b6:
78:5d:85:14:41:38:e6:a7:78:13:9e:36:c5:6a:35:
9c:a4:8d:49:6d:f8:3b:1e:01:6b:02:3d:83:37:3e:
ae:4f:d3:25:a1:8f:97:d1:a7:fa:19:06:a3:a9:44:
df:ed:84:a3:41:7a:a8:08:30:03:01:cf:ab:cc:52:
ec:19:55:11:ef:98:10:aa:1c:68:2e:14:9d:d6:b0:
ef:44:7b:73:7f:48:29:20:47:16:bc:4c:c1:a0:60:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5F:D4:8F:A1:29:63:72:41:EA:9F:30:93:AC:B2:D4:7B:8C:9C:E5
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0d:e1:82:d2:67:d3:ed:26:b5:00:de:08:c9:13:dc:ce:78:
51:e1:ab:36:90:c8:0f:e9:87:32:16:fa:96:5e:75:1e:0e:85:
e5:dc:86:1c:63:3b:3e:43:53:77:b2:14:2f:d7:81:aa:86:3f:
e4:2d:36:ab:63:40:72:96:b9:2f:9a:48:bc:e7:60:ed:1b:89:
5f:4c:46:c1:71:1e:e1:ee:70:56:c3:f1:f3:9b:c2:32:39:32:
46:cc:57:ca:32:41:a6:6f:1b:18:00:82:5b:86:33:b7:49:8a:
b4:4f:14:f2:34:33:89:c4:9e:d1:32:6a:9b:22:40:f7:36:01:
e8:3f:46:88:3b:bb:10:c0:ab:18:6c:75:a2:d9:14:63:f7:ef:
66:2c:2a:a9:18:e1:ab:d2:64:a7:05:49:dc:28:a4:c7:e0:01:
6b:83:70:e9:c8:b4:e3:78:fc:25:11:1d:0e:d4:6a:29:6f:58:
0c:88:bc:7a:e2:40:8f:f9:64:b4:24:7d:dd:dc:0b:f3:91:55:
bc:4c:3c:24:9b:89:20:ae:a5:f8:55:d3:fc:4e:0a:2c:15:f8:
20:ce:b7:fe:9a:8e:67:ff:c1:c0:61:ea:6d:7d:36:ba:4f:63:
14:25:d9:37:c4:ae:29:05:72:07:d8:bb:29:41:b2:42:e5:64:
da:21:9c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:30:33 2025 by rpki-client