Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: /gW2o4pmDo8NwfBQj9clI/b13bALDXvFFG8sxQpeRnI=
Subject key identifier: E4:82:50:28:F4:10:81:09:52:AF:F6:0F:DE:AF:6A:1C:A1:E5:60:C5
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 0196857FAA3465786B9932CF895FA788681A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 07:00:58 +0000
Manifest this update: Wed 30 Apr 2025 07:00:58 +0000
Manifest next update: Thu 01 May 2025 07:00:58 +0000
Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: I9ZVujvAi5iHawaKG5a4UhKIVySbzIqrkASom+m7pOI=)
2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=)
3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:aa:34:65:78:6b:99:32:cf:89:5f:a7:88:68:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Apr 30 07:00:58 2025 GMT
Not After : May 1 07:00:58 2025 GMT
Subject: CN=e4825028f410810952aff60fdeaf6a1ca1e560c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:4a:4b:5c:53:f1:d1:07:98:f2:96:56:3c:
32:96:8c:17:fa:a0:47:cc:ef:57:58:9a:ff:13:4e:
57:5d:35:c0:07:82:00:fb:43:36:c9:2d:7f:76:d2:
04:2b:2b:e9:a1:f0:17:63:fd:60:34:44:88:8f:92:
d8:91:7b:6c:c5:94:6c:79:2c:76:5f:ed:06:a4:97:
49:60:c6:09:69:c7:05:e5:40:f7:8d:44:83:58:95:
91:e5:26:c9:1a:3f:19:7e:3c:ed:0a:e1:f7:93:68:
32:10:0b:1f:54:62:75:a1:9a:92:35:95:38:ab:fb:
13:32:59:f2:ca:c9:b9:04:6c:4b:db:18:9b:b0:00:
f1:89:fc:f4:f7:29:3d:15:9a:dd:8a:47:2c:b7:d3:
3a:65:74:50:41:dc:cf:22:8c:f2:69:8f:a9:59:2b:
e9:17:6f:f1:2e:ce:03:b5:4a:fc:e0:4e:50:26:68:
7c:49:5b:e8:3c:c2:7a:5e:dd:6c:00:6e:99:2c:6c:
8e:c0:2a:18:0b:d6:88:42:a6:ae:8e:a4:4e:b0:36:
cb:c7:fc:30:f1:93:d8:4c:bf:d3:35:3c:ad:7f:c6:
5f:ac:b6:3f:8a:02:97:62:af:22:9c:67:56:d6:fc:
11:03:e9:e1:01:16:15:99:15:c2:cb:cc:1b:a5:23:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:82:50:28:F4:10:81:09:52:AF:F6:0F:DE:AF:6A:1C:A1:E5:60:C5
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6d:fa:d3:9e:d6:e9:93:94:a7:22:07:b0:2a:44:85:98:26:
54:4b:5e:ca:05:3c:91:ef:3a:58:4c:f2:9c:30:6b:c4:45:d8:
d4:43:c3:9d:73:ff:75:02:a4:c8:82:8e:c2:cd:e7:14:9d:64:
a3:4a:c9:a6:6c:31:8c:1b:3c:87:7e:0b:d3:cb:3c:91:f1:d7:
ac:77:82:7a:db:61:37:b1:39:21:f3:7c:09:5c:ea:8e:53:77:
91:20:fd:ba:2a:1c:9e:aa:01:c2:19:d8:bc:c6:83:35:45:23:
39:28:36:41:0b:63:d5:82:94:ed:d6:5e:6c:9e:cf:2b:af:33:
05:d1:a7:ea:45:74:49:4a:a4:02:3a:4e:fd:e6:14:0e:bc:d7:
72:98:8b:99:6e:66:1a:f9:b7:95:ed:32:15:f6:90:72:77:a8:
ab:34:8d:ef:79:49:e1:03:b5:c3:8d:2b:8e:1c:43:f8:cd:a0:
b7:02:31:a1:75:ad:e0:84:8d:5c:48:7d:b4:9a:b0:a3:7d:6d:
8e:a9:3d:e6:2e:ce:0c:b5:2c:fd:7d:0f:44:96:df:e3:b7:9a:
13:ca:fd:7a:17:ec:be:e0:0a:cd:3c:26:66:d9:ad:73:80:c8:
22:6b:e4:38:f7:ef:34:be:b0:6f:66:12:8d:3d:4b:94:58:12:
a9:92:ba:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:23:54 2025 by rpki-client