Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: RHlvuFZ/qulbjGU0EbTPWHC0wvzZ6v48mgUcUi7WGi4=
Subject key identifier: 41:0B:B7:50:36:9A:13:38:31:40:30:DC:06:1F:F9:45:B6:8D:C8:78
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 01969DF603F9C2118C779DA5B1A53F188C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 01:01:07 +0000
Manifest this update: Mon 05 May 2025 01:01:07 +0000
Manifest next update: Tue 06 May 2025 01:01:07 +0000
Files and hashes: 1: 41_o2BIwv76TF64VP1DAdfjTxPo.roa (hash: ZsvXvwGlxNqhMT0bqp079C/5ezKY6fiYSiOoxT1NO2o=)
2: 4mRSyOWbS8hQScfHLulGf4Y6ZgQ.roa (hash: o3JSSVtXNFoFrqvnt6XhA+Y0uItKhtMcyPKqriXcd08=)
3: Qw_MgL0jZxAEcUaQV1xqF4PVe2w.roa (hash: K6DZu82eoM3254ECuNlV9U+0ldDohrzL2NCBM61LLzM=)
4: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (hash: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=)
5: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: HsAv/IHIGARyXjdIl1VI0fzDlwbKj3wOLmEItApx0gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f6:03:f9:c2:11:8c:77:9d:a5:b1:a5:3f:18:8c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: May 5 01:01:07 2025 GMT
Not After : May 6 01:01:07 2025 GMT
Subject: CN=410bb750369a1338314030dc061ff945b68dc878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:1d:b0:aa:bf:f6:9b:99:91:bb:e8:59:4e:
11:fa:82:b0:cc:d5:e6:e2:94:47:2d:a7:75:c2:45:
01:ac:68:30:3d:8c:bc:69:67:c8:6c:d7:ed:6f:e1:
6e:65:8a:4a:6d:a1:fb:61:88:20:68:9d:12:29:b6:
7b:14:7a:7b:02:f8:84:ea:b9:40:06:c1:2d:aa:ad:
6f:55:b0:28:10:74:95:9a:e8:81:25:90:ae:28:67:
da:eb:44:f3:dc:24:64:a7:40:50:d1:f1:f5:ae:af:
3c:f4:2d:22:81:09:a8:e4:4b:fc:82:8d:c2:b0:f8:
3c:a6:43:8b:66:af:e1:69:ac:b3:ae:37:49:60:98:
cc:91:cb:40:9f:38:e5:76:eb:3f:68:2a:4f:8a:8e:
71:04:0c:f5:eb:d8:6c:10:12:f2:42:d7:a2:a2:3d:
87:ab:54:3e:f4:f8:71:ac:3c:7c:a7:e5:ac:7b:97:
28:d3:4f:c3:6e:62:e2:58:b0:15:ea:79:69:a8:eb:
e8:84:be:8f:41:2e:6d:8b:86:84:54:09:3c:ac:47:
1e:26:9c:8f:2d:bf:89:01:0a:80:2f:04:05:ad:03:
c6:3e:74:25:c0:39:72:8f:ab:c0:00:5b:2f:e8:7e:
ba:ea:23:eb:02:cd:03:07:dd:78:46:64:12:32:b9:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:B7:50:36:9A:13:38:31:40:30:DC:06:1F:F9:45:B6:8D:C8:78
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:41:f2:39:1a:9d:c3:1e:2c:7c:d7:24:0f:9a:ba:29:37:36:
6c:20:a8:0f:87:78:ed:38:7c:aa:be:72:50:bc:a7:d3:5c:c2:
19:c0:15:3b:b4:d8:50:4e:43:04:35:e6:81:89:63:e9:d2:f8:
2a:db:df:b5:51:76:64:3e:22:f3:83:01:9e:fd:d3:80:e3:85:
57:a4:9e:26:4c:94:ff:f6:6d:78:0d:7d:ce:b7:57:f3:ef:ce:
08:1e:09:38:57:97:aa:1b:46:8c:98:6a:d1:51:be:38:93:0d:
08:f5:8f:c0:9b:ad:54:a4:67:e1:b3:99:af:ca:18:7d:d2:50:
eb:eb:3e:25:e6:eb:24:d3:c2:a3:7b:6d:15:7f:76:06:6c:a2:
e8:51:3e:4e:93:1f:a0:9e:2a:4b:79:37:7a:31:97:65:4b:20:
9f:c1:9e:0b:1f:7f:4e:db:4c:15:1a:93:20:4d:de:f3:ee:a0:
23:c5:b5:10:ea:38:4e:a1:1c:2d:dd:5d:ec:8b:f8:08:b2:20:
90:91:50:7c:b5:4a:ee:8f:4f:eb:50:c5:66:2d:ff:14:d6:7a:
14:79:52:71:fe:38:98:d3:a4:47:23:01:9b:19:55:08:36:df:
29:1e:1f:fa:77:be:ab:e3:c4:4a:4d:77:65:16:84:e2:e0:85:
d0:4c:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:16:59 2025 by rpki-client