Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: E9CaGjvFFSvTSmOhlcb9bdQxQQuTEVwYB0uohWyZ7qY=
Subject key identifier: B8:00:32:2D:10:74:FC:6F:BE:47:DE:1B:40:1B:3A:B0:8B:DC:3B:55
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 0196B890EB0DC631F9D387B69F76F70EA19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 01C5
Signing time: Sat 10 May 2025 05:00:27 +0000
Manifest this update: Sat 10 May 2025 05:00:27 +0000
Manifest next update: Sun 11 May 2025 05:00:27 +0000
Files and hashes: 1: aU9nU6J43VKML7pOttC9ZY6jQ98.roa (hash: FbRy0Mzafv2hiOEuNsxPoMw70K3GoSJZXHuz7LnmQeE=)
2: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: EXLf6sZlGWk9jTatWFxLLLKNiAOak+6S9UE4iuApKkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:90:eb:0d:c6:31:f9:d3:87:b6:9f:76:f7:0e:a1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: May 10 05:00:27 2025 GMT
Not After : May 11 05:00:27 2025 GMT
Subject: CN=b800322d1074fc6fbe47de1b401b3ab08bdc3b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:28:11:15:46:0b:f6:c8:d6:bc:b0:cc:f4:
b5:cb:5f:6a:ac:8b:09:24:c3:f3:fc:c8:6d:4b:cf:
3f:69:ca:10:c3:41:05:93:5a:40:e7:d6:c9:7a:25:
8f:64:84:eb:94:1e:e0:96:c5:5f:d2:c0:a6:57:22:
be:63:c2:af:a5:ad:49:05:c3:84:70:3f:1f:b0:2b:
30:d4:ee:3d:93:be:ef:92:0a:7e:a1:65:b3:af:46:
a0:15:0e:01:60:37:f3:c4:94:8c:16:44:16:44:45:
24:db:55:3b:53:11:b9:d5:cc:3f:88:b3:fd:d4:2f:
e3:ee:9c:37:88:fb:bd:4b:c5:50:99:8a:64:aa:35:
f2:94:a5:13:83:88:3a:3e:5e:3e:8a:02:66:8b:a5:
11:ab:98:5b:20:13:5f:11:78:e4:9b:e8:5a:62:5c:
07:dc:77:02:a5:f8:ea:fe:ce:a0:09:e8:af:52:5a:
f3:69:e1:17:00:80:ae:f6:6d:d5:5e:74:48:8a:1e:
0f:dc:91:38:00:c5:d7:cc:d5:c5:da:02:5c:75:8d:
57:50:6a:6e:c1:48:38:76:6d:39:8a:76:6a:11:76:
bc:c4:92:7f:4c:68:e0:cd:1d:dd:02:c5:6a:dd:86:
82:18:ef:60:4f:a4:ea:f4:c7:1a:fa:95:02:bc:19:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:00:32:2D:10:74:FC:6F:BE:47:DE:1B:40:1B:3A:B0:8B:DC:3B:55
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e9:9d:33:22:e5:13:e9:9c:cf:5d:eb:7c:b8:22:a0:1d:63:
d5:68:b1:77:1b:0c:a2:62:10:77:bd:7e:9c:64:70:4d:32:88:
e6:b6:a1:ce:98:6a:be:29:35:1c:6b:a3:f8:f3:d2:f2:11:92:
19:50:22:e8:3f:86:08:f8:12:ba:98:85:ca:47:65:e1:7c:3e:
fe:44:78:95:3a:d0:a2:5e:19:b1:d7:f8:df:3f:49:83:5a:56:
c4:77:e0:79:b1:eb:d0:eb:eb:6f:88:41:09:bb:6a:31:ee:ac:
c2:a9:31:1f:af:a2:bb:74:8f:39:21:23:cb:bb:68:00:76:53:
e2:cd:0b:e8:80:0f:47:09:b1:7a:d0:89:7f:5e:b4:4a:56:32:
0d:aa:b5:a0:64:12:14:d3:d2:61:fc:cf:f7:dc:74:30:48:91:
0c:12:c3:92:66:0e:44:f0:88:39:bd:75:92:64:0f:71:20:63:
f5:e8:64:21:63:0e:82:d6:67:11:e1:d5:e5:24:f2:6b:ec:b7:
15:45:22:d0:15:8b:d6:b2:05:da:71:ec:61:47:ce:84:c8:5f:
0b:17:aa:49:d0:de:d3:ea:90:c7:e8:03:ed:ad:57:8f:c3:b7:
73:42:7e:31:82:44:16:a0:ba:0f:91:a8:3c:3c:7c:76:cd:18:
06:8b:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:39:57 2025 by rpki-client