Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json)
Hash identifier: n4J5kJjsuXnmQcoOualI4E1e4E0LDYtIuNRgqW0R0Vs=
Subject key identifier: 0C:9A:76:8D:23:29:4C:AA:67:9B:28:09:53:6C:8B:86:81:B8:AF:FD
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 0196BE5CD75B9491800AF62747DC0AFDED3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
Manifest number: 0FD0
Signing time: Sun 11 May 2025 08:01:17 +0000
Manifest this update: Sun 11 May 2025 08:01:17 +0000
Manifest next update: Mon 12 May 2025 08:01:17 +0000
Files and hashes: 1: CufUT2fMUqvz9LGxO18OZgdQp_g.roa (hash: G2fcMqhZShi/pIW7MbvdKjfohzkmwJAvDqVZX+1pdMQ=)
2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: lPKPldQ5H4vQMsizqJNkun4l1qz2XOVAlvTodmY1dHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:d7:5b:94:91:80:0a:f6:27:47:dc:0a:fd:ed:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: May 11 08:01:17 2025 GMT
Not After : May 12 08:01:17 2025 GMT
Subject: CN=0c9a768d23294caa679b2809536c8b8681b8affd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:e0:4c:a3:42:45:d2:38:24:a8:58:e2:1a:
e1:dc:b2:5e:88:5f:b6:ee:c3:46:b4:a5:da:1c:56:
5d:c3:e0:bc:4c:67:a3:c9:e1:c7:13:b2:7b:c7:d9:
4e:5f:b5:95:9a:a9:27:f7:3d:38:9f:8f:af:ac:6f:
b1:72:27:44:03:6a:bb:4a:4f:1d:59:f7:38:9b:eb:
0e:59:d2:f4:50:ff:a6:9a:e2:ac:10:a1:27:43:0f:
97:8b:b3:4c:37:e3:45:40:61:6c:75:75:d3:9b:56:
61:3d:4d:d7:fc:b3:ab:88:bb:eb:99:4d:97:a9:77:
15:c3:98:54:f1:88:49:99:9b:37:ae:fa:5c:84:88:
1e:77:f4:f8:54:1e:3b:6a:c7:b0:86:f7:7e:57:a3:
6e:22:3a:ab:c0:37:31:1e:39:fa:cb:a1:1f:c4:0a:
85:c7:3b:cb:bf:7c:8a:c1:7e:9d:9a:19:35:0f:9b:
c2:d1:f5:9e:a9:a8:6a:c6:5e:37:a7:86:1d:c9:ed:
2a:09:cd:83:a9:cc:41:38:f3:32:f1:89:45:e9:02:
52:8f:07:04:28:0e:c1:ab:13:28:e0:b0:14:36:96:
bd:35:49:5c:78:23:da:c4:98:13:86:7d:4e:c0:db:
7e:b4:87:b9:fb:0c:ff:27:82:05:b8:f6:b3:22:f7:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9A:76:8D:23:29:4C:AA:67:9B:28:09:53:6C:8B:86:81:B8:AF:FD
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ee:59:e5:3b:e7:2c:85:26:17:a1:3a:c6:1a:de:b0:db:40:
09:c5:81:11:59:ae:fc:6c:30:68:64:f0:7e:d3:82:0b:ac:a2:
0d:20:ef:3e:48:64:7b:18:23:11:4c:62:92:0a:19:77:f4:83:
8b:f3:ac:6b:85:ee:03:a8:4a:6c:c2:d7:ef:76:01:88:0b:b3:
f3:e4:08:e0:31:f7:ef:e6:f9:e8:b4:4d:5f:84:61:a2:1c:a4:
eb:63:50:e6:72:62:c4:6e:98:7b:71:3e:4a:bc:d7:2d:43:71:
5d:56:1e:d0:7c:ff:5a:32:10:af:e0:33:58:5b:2f:85:63:6b:
0c:44:92:e4:56:08:f5:cb:86:3b:53:a5:03:30:8b:2c:1f:c2:
4e:5c:17:ca:d2:b1:0b:29:13:3c:87:59:e9:c6:8e:3a:b3:44:
ff:1b:c2:95:5f:90:ea:16:f5:73:56:41:11:f8:f4:40:d5:17:
8f:13:cf:d4:ab:62:4d:94:ee:32:f7:b8:a2:88:9e:e7:5d:27:
a8:d6:ae:88:6d:2c:58:bd:3f:c3:35:66:ed:7c:f8:be:34:b2:
4b:71:16:66:c9:df:1c:71:eb:ba:5b:51:78:96:08:e9:b9:63:
47:13:dc:ad:9c:5c:17:b5:ce:e2:cc:62:f8:5a:bc:82:f8:25:
0c:8b:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:34:22 2025 by rpki-client