Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File: pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier: TqK6CivJNSjDTL7mrnfdIgrnfzd2IqbK82n42ZCN1H4=
Subject key identifier: 70:D5:E2:93:14:67:D1:81:99:B2:F5:19:69:FA:40:0F:AA:57:29:31
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer: /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial: 01967B699B2EC52C8E5230E11B9690130646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 08:00:40 +0000
Manifest this update: Mon 28 Apr 2025 08:00:40 +0000
Manifest next update: Tue 29 Apr 2025 08:00:40 +0000
Files and hashes: 1: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: +9l82dXAogTc9FaS5qJs9035xH/jH4hpwnzVdRO4IS4=)
2: vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa (hash: tQbWOVu74034awYo0QKVFApUcQf9SPwefFwA/Lt3iQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:9b:2e:c5:2c:8e:52:30:e1:1b:96:90:13:06:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Validity
Not Before: Apr 28 08:00:40 2025 GMT
Not After : Apr 29 08:00:40 2025 GMT
Subject: CN=70d5e2931467d18199b2f51969fa400faa572931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:1a:cc:c1:89:90:f2:50:ca:c7:2e:8f:50:
6c:df:df:5d:92:ee:7f:83:58:01:3a:6a:eb:9d:7c:
ce:bf:e7:74:4d:34:ad:30:87:08:7f:72:d5:f1:b0:
0e:f0:f8:18:ab:f1:0c:cc:58:b8:b6:91:a2:5f:0f:
00:50:8a:50:20:eb:85:39:fa:31:26:1a:99:5b:02:
84:a3:3d:a5:7c:2b:1d:f4:94:22:24:83:00:5c:85:
2a:02:83:cd:9b:ef:8c:85:6d:b4:5b:89:56:db:9e:
c5:14:9d:aa:da:47:bf:1c:e2:b7:7d:68:5d:ee:a1:
70:67:34:fa:cb:27:9d:32:f7:0d:d3:ee:4d:d4:5e:
e1:4d:2a:be:95:61:d9:f5:ca:71:ce:fa:1e:a7:31:
97:15:9e:15:17:2a:d0:4d:79:97:e2:6e:81:e0:61:
ab:3a:23:89:dc:2e:85:df:ff:25:9f:48:59:48:22:
e5:61:cc:fe:28:cb:35:68:34:20:19:08:c5:47:ca:
f2:e0:ae:e7:5d:a7:21:fe:9d:73:05:0a:12:ef:3a:
70:51:a5:7d:2a:50:82:bc:d0:b5:cc:17:56:39:73:
ac:dc:66:8d:10:e4:ae:bb:79:b4:9a:bf:84:c8:46:
51:39:0c:a9:c2:9c:79:e8:13:fc:e9:a8:b8:df:fb:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D5:E2:93:14:67:D1:81:99:B2:F5:19:69:FA:40:0F:AA:57:29:31
X509v3 Authority Key Identifier:
keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9d:b4:28:1e:b3:0a:2e:34:15:65:b9:5b:f3:77:33:8d:98:
af:6f:5a:be:ee:b4:f6:b8:e4:ee:de:d3:f8:85:8a:00:1c:09:
a7:de:4f:f8:b0:31:fc:52:68:b6:73:b3:f6:2e:e1:bf:e0:a0:
fe:f0:f4:a9:4c:e1:4b:99:ca:26:2b:28:fb:15:86:f9:64:3c:
41:0d:bd:0f:75:68:32:07:a1:0b:5d:fc:58:23:45:45:76:35:
96:47:86:dc:f5:30:33:f1:c9:d1:65:8e:73:8a:80:b4:2c:9b:
1a:ef:44:78:44:f1:70:69:46:ba:66:56:45:f4:60:c7:95:af:
e4:bc:5d:fe:bf:3c:d7:b5:17:8c:3a:15:f1:40:92:df:dd:8d:
78:e3:4c:99:a1:44:cb:a0:44:5f:92:1a:5c:f8:27:ad:61:0f:
9a:c5:4f:62:f8:79:35:59:81:2e:22:7f:60:22:8e:d5:df:41:
22:71:e8:9b:23:24:8e:8e:26:04:1b:2a:77:9c:37:df:ea:f8:
d6:9c:1e:44:f9:28:6d:85:c1:ca:d1:1c:13:34:08:1c:30:75:
89:ba:63:f0:58:18:de:0d:e9:bd:50:21:8b:0c:71:27:e0:b2:
e1:42:8b:d8:58:13:64:a4:68:f0:e9:53:6b:38:be:cb:6a:b4:
a6:95:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:13 2025 by rpki-client