Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
File: pjxtuvK89S8n5YwticbBxVuV3yY.mft (raw, json)
Hash identifier: 6AY4nIYvHv3EoTtgFPRQydLM2ugHmswU/65MsTjXf2E=
Subject key identifier: CF:20:CB:9D:49:B7:E0:2D:7E:E4:B6:22:57:B0:A0:B8:4A:44:49:09
Authority key identifier: A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
Certificate issuer: /CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Certificate serial: 0196718AB61C25AF7824C9A90115A90F13B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
Manifest number: 0784
Signing time: Sat 26 Apr 2025 10:00:38 +0000
Manifest this update: Sat 26 Apr 2025 10:00:38 +0000
Manifest next update: Sun 27 Apr 2025 10:00:38 +0000
Files and hashes: 1: NANvvd_V7iIUj7mJYMTOqque3Po.roa (hash: z7IZKlxruCsipOwPt42pcffU0s1l9uB/ojQdv9l2AxM=)
2: pjxtuvK89S8n5YwticbBxVuV3yY.crl (hash: XSQZ4x7pqeupctxrFIOtAk2zygRCJhLrRXH7RQrzZnc=)
3: yG3GRDnYBo69OMDgoi6l30IqdQQ.roa (hash: s36xnlN956H1thb9LXHw6o5GvT+TFLxm0zFqGU00y/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:8a:b6:1c:25:af:78:24:c9:a9:01:15:a9:0f:13:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c6dbaf2bcf52f27e58c2d89c6c1c55b95df26
Validity
Not Before: Apr 26 10:00:38 2025 GMT
Not After : Apr 27 10:00:38 2025 GMT
Subject: CN=cf20cb9d49b7e02d7ee4b62257b0a0b84a444909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:90:a5:da:34:e5:da:81:38:df:1f:08:fc:
23:4a:7b:04:36:53:c8:e4:16:93:df:6a:37:08:c0:
c5:9c:ed:35:3d:cf:b1:c7:c0:b9:3a:de:38:86:0d:
6f:f7:76:b9:d5:5f:bb:65:02:64:af:02:30:83:14:
84:3f:57:1e:e7:80:6c:c6:3b:0c:db:6f:28:c5:4c:
17:27:56:46:44:a6:bc:ec:b8:fe:e7:a6:a9:47:9c:
b0:ce:39:15:ad:83:f0:14:78:87:2c:c7:67:df:ad:
a5:fa:24:a0:5c:41:60:65:f2:e9:25:17:87:ae:73:
32:6d:e2:ac:a0:23:3a:b2:47:e5:b4:b7:f7:16:d6:
c9:6d:64:a5:09:06:48:e5:ef:fb:d6:67:0e:35:35:
55:45:3e:d6:c3:4c:b4:9b:47:a9:ce:fa:50:fd:4c:
5d:e6:86:80:be:97:89:7a:04:7c:77:21:cf:80:f3:
d5:36:3b:e6:2a:0c:dc:ed:e6:b9:a5:e6:85:00:2c:
5d:69:54:9e:33:d1:b5:ea:c4:18:3e:c7:aa:c4:32:
89:14:06:87:76:8d:7e:41:a4:22:03:72:0f:a6:fc:
21:a5:e5:22:4b:f2:a3:3c:22:4c:10:2f:c5:fc:73:
33:5e:7a:f9:78:fd:76:cf:56:34:dd:1f:b5:a8:83:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:20:CB:9D:49:B7:E0:2D:7E:E4:B6:22:57:B0:A0:B8:4A:44:49:09
X509v3 Authority Key Identifier:
keyid:A6:3C:6D:BA:F2:BC:F5:2F:27:E5:8C:2D:89:C6:C1:C5:5B:95:DF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjxtuvK89S8n5YwticbBxVuV3yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/33d71a-9350-4345-b6b8-a83d6c3cf053/1/pjxtuvK89S8n5YwticbBxVuV3yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5a:f5:23:8b:c0:75:28:b9:7c:12:16:05:b3:1b:0a:76:1f:
6b:4b:55:48:64:e9:21:dd:72:22:c5:22:49:e2:f0:95:d0:0c:
88:14:2c:4f:b9:d1:34:0b:9d:c3:82:c4:88:ab:b8:60:ac:30:
36:3c:84:9a:5e:0b:23:f8:a1:1c:b5:2e:78:1c:ea:13:68:fe:
15:7a:a5:72:ab:4f:ae:02:12:76:58:ed:1e:aa:18:4e:da:fa:
4e:09:2d:30:49:26:cb:f7:d7:03:6a:8e:ac:e9:d0:7c:0d:7b:
e6:d2:cd:af:d7:33:d4:a2:ec:c6:5a:f1:32:18:4b:20:61:3b:
5b:0e:86:69:9b:0d:6f:4a:be:27:21:03:86:c9:67:52:d2:0a:
d2:09:26:ad:12:7b:ab:6b:8b:fb:5e:fe:aa:36:2b:fa:32:f2:
5c:dc:3f:2b:25:d0:58:c2:cc:a8:d3:5a:ef:a2:4e:bd:8c:02:
a9:53:84:37:9c:fc:5f:6e:06:08:a2:62:f5:6d:52:df:b9:f9:
f6:b3:d3:45:a6:24:c7:07:6d:8b:97:56:3f:e6:e8:d9:58:da:
b7:0d:29:bc:cd:20:54:89:14:3a:77:c5:75:fa:9d:9c:ae:b3:
74:53:9a:86:48:7c:8f:8d:b9:38:1e:24:43:7c:f9:65:d0:a8:
38:da:56:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:29:05 2025 by rpki-client