Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: fsVS++s5HCv8ZVDBsJl9v88hFG/sYTvR8CB1+rZTv4Q=
Subject key identifier: 9F:CE:14:38:49:40:38:D6:5A:DD:20:EF:88:3C:19:58:00:46:1A:2A
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 01967BD75CF99280B23392CD66F534F10D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 14BF
Signing time: Mon 28 Apr 2025 10:00:33 +0000
Manifest this update: Mon 28 Apr 2025 10:00:33 +0000
Manifest next update: Tue 29 Apr 2025 10:00:33 +0000
Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=)
2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: 2YNI4oAza0EObykuRNPvqj0CREHv8lwASnw8amZeKfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:5c:f9:92:80:b2:33:92:cd:66:f5:34:f1:0d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Apr 28 10:00:33 2025 GMT
Not After : Apr 29 10:00:33 2025 GMT
Subject: CN=9fce1438494038d65add20ef883c195800461a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:d4:b9:49:1c:92:d2:2d:ad:75:19:50:04:
4b:c3:ed:ca:47:88:9a:ca:b4:45:30:62:15:84:e2:
30:4b:f9:66:16:c0:62:0e:2e:88:78:f3:2b:db:aa:
5c:6b:74:8e:d6:79:ed:1d:2f:19:e7:8f:76:a2:6a:
5c:f7:b8:d0:25:62:cd:64:12:05:29:71:07:af:28:
de:26:45:b0:26:7a:cb:63:94:59:55:75:dd:7a:97:
36:c9:3b:07:6e:6c:45:0b:24:bc:49:5d:cc:7d:7d:
8e:05:f5:f6:bb:a7:b1:06:b0:22:b1:07:81:f7:97:
3d:bc:dd:6e:cb:1e:e1:55:06:2e:13:11:30:f3:f9:
df:49:b6:8d:c8:ca:f2:c8:a0:e5:c3:6f:83:35:8b:
55:56:a8:07:7f:d2:f0:bc:51:06:c3:04:f2:72:5c:
e5:0e:f5:7b:72:8e:0f:a1:bf:63:4f:aa:60:d0:71:
10:08:a4:8e:51:d5:ca:67:9c:41:86:fd:45:ba:2e:
2b:3c:6c:de:9f:7f:b7:de:1a:c8:ec:a0:00:08:b2:
08:fd:b0:c9:53:15:83:41:b9:54:39:26:1a:c7:68:
3e:cb:b5:e3:c0:3d:4a:6a:2e:a6:09:30:a2:47:d1:
9e:93:3d:1e:e2:17:c9:5c:0f:e6:86:6d:68:fc:20:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CE:14:38:49:40:38:D6:5A:DD:20:EF:88:3C:19:58:00:46:1A:2A
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4a:00:b7:b5:27:a5:da:c6:2d:fc:b1:b7:8c:19:bd:aa:cb:
31:71:b4:29:02:96:3b:3e:35:d3:b0:05:a8:92:8d:30:66:bb:
30:f8:38:ff:a4:dd:03:6a:80:0f:3e:b4:4b:95:27:56:79:a3:
7f:3b:96:7a:3b:5d:86:60:8a:ee:73:a1:2c:1b:08:7d:a5:c3:
2a:99:d0:57:68:57:b1:03:1e:90:80:b2:06:36:99:1b:a0:44:
79:16:b6:ea:c4:27:f4:73:d9:ba:e5:4e:f2:40:90:5a:db:83:
b7:a8:d2:dc:ca:fc:e2:cc:3e:94:37:24:29:8e:c0:d1:05:98:
64:26:87:17:53:92:a3:cf:9e:b0:d9:36:ba:bf:b9:33:3b:11:
cd:06:f5:09:6c:07:de:09:67:59:d1:2b:cd:29:b4:94:c1:bf:
77:1b:bd:65:11:78:ab:f8:1d:b7:61:82:8e:bf:5b:90:04:45:
8b:ea:1d:b2:95:d3:5a:21:be:cd:6d:c9:1e:6c:ad:ec:d1:65:
61:fd:15:d6:da:98:57:25:e4:8f:86:54:97:60:e3:b3:a9:66:
f4:1b:1c:f5:73:f3:19:1d:bc:43:27:84:97:57:3c:cb:d8:ea:
a1:47:30:cc:65:13:6c:99:7c:e4:a7:56:cd:c5:9e:20:2a:e7:
cc:7a:e3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:21:24 2025 by rpki-client