Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: EUG3hX10vZAWnHk06X9KgIRisFlyXa/IfcpsgQbM2RY=
Subject key identifier: D1:20:B8:FF:A8:55:49:66:17:41:41:0E:4D:C6:CB:A8:13:E7:F7:84
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 01969D510FFC4E81CABAE757C6EED77780E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 03E9
Signing time: Sun 04 May 2025 22:00:57 +0000
Manifest this update: Sun 04 May 2025 22:00:57 +0000
Manifest next update: Mon 05 May 2025 22:00:57 +0000
Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: 2Lduhjxh2x3itQXMWmH7J3xde63kr3zp/luxlOQLwT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:51:0f:fc:4e:81:ca:ba:e7:57:c6:ee:d7:77:80:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: May 4 22:00:57 2025 GMT
Not After : May 5 22:00:57 2025 GMT
Subject: CN=d120b8ffa85549661741410e4dc6cba813e7f784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:93:36:5b:5e:b1:d3:85:48:4b:74:2d:0c:
92:88:dd:f7:4d:8f:15:f7:15:30:62:c0:0e:ba:0b:
75:b9:d3:19:d8:52:de:7b:97:d1:33:6f:bc:40:0e:
c1:d7:19:10:b7:2b:a8:59:71:b7:bb:8c:2e:50:37:
e6:33:45:eb:e8:28:60:db:0d:22:b9:36:bf:00:90:
3b:4d:a1:e7:0d:48:69:a3:ae:48:c3:cc:d7:57:e0:
0c:16:c8:21:3c:cd:f8:ed:1f:e4:bf:4e:c6:04:39:
7b:2e:4d:dd:c7:fa:56:59:89:5a:7c:5a:7b:2f:4d:
38:e7:b9:4e:4d:28:5f:74:56:99:19:21:bd:f8:28:
43:92:4c:39:2a:ea:79:e5:6c:44:fc:c4:73:54:ce:
01:a1:7a:4e:e5:ed:96:dc:82:c0:34:d2:cc:27:6e:
a3:5b:59:8d:0c:b0:12:28:67:d6:2e:4d:d9:da:d6:
9e:13:b7:12:cb:c0:b4:d9:6b:45:ff:75:65:a2:87:
4d:53:61:6e:5d:7e:4c:79:e4:8d:ab:46:76:e5:2b:
d7:fa:6d:88:63:b1:0a:46:e9:fb:f8:3f:e7:16:86:
be:d8:d4:eb:20:11:d8:2e:0c:a6:40:56:04:3c:05:
a9:18:3e:82:0f:58:c6:14:db:10:e1:b1:73:0b:8a:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:20:B8:FF:A8:55:49:66:17:41:41:0E:4D:C6:CB:A8:13:E7:F7:84
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:93:aa:1a:87:67:00:e5:3c:d2:50:b4:84:a7:23:f2:bf:da:
65:42:dd:50:7f:31:0a:a7:e1:0a:1a:d1:5c:b5:15:cf:c1:6c:
7a:a8:03:68:a1:2d:89:2e:bf:e1:ba:58:d8:01:02:97:8f:b9:
85:47:d5:5c:e7:17:f1:d1:5e:6e:15:02:75:46:c8:9e:93:f7:
7e:1a:0e:22:f7:1d:27:4c:1d:c7:76:bc:f9:9e:79:a4:eb:73:
b7:78:d9:39:97:49:99:5e:77:11:b5:d9:fa:18:36:f2:7e:c0:
0c:56:f3:68:db:74:e3:8e:3d:44:55:88:25:b9:9a:f6:7c:b9:
97:c0:28:cd:66:87:9a:c6:fd:04:f2:e5:8a:6b:e9:32:1b:b5:
35:70:1d:b4:84:90:59:08:62:35:a4:8a:b8:68:08:06:84:8c:
0d:11:e9:5a:94:ab:14:ab:5f:9a:17:b9:fc:e4:47:52:d2:fc:
66:53:c4:c3:7f:1f:0b:c9:35:23:db:c6:b8:02:3b:d6:5c:7a:
33:3a:86:2b:2c:2f:a7:cf:a7:cd:41:49:8a:a9:de:cf:ea:b9:
10:1e:bb:08:6a:41:00:0e:75:e8:f4:6a:5f:f0:43:92:0e:ca:
4a:61:81:8b:37:79:74:a6:1a:65:d8:fb:dd:3f:cf:de:f8:a8:
85:58:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:40:51 2025 by rpki-client