Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: DFngS6g0DzE3cV0IufhWfycXn1LvzRe/FZ1aOB5cWmE=
Subject key identifier: 57:99:4F:B4:10:77:34:6D:C7:83:A2:52:1E:C3:2A:68:10:DD:06:BD
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 019676B0DBEC3234B03B1426283D8A913429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 10:00:24 +0000
Manifest this update: Sun 27 Apr 2025 10:00:24 +0000
Manifest next update: Mon 28 Apr 2025 10:00:24 +0000
Files and hashes: 1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: MsY0LeZLSg+4RSvBw6IKLKK975k8b3Vth76Pb7JFarI=)
2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:db:ec:32:34:b0:3b:14:26:28:3d:8a:91:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Apr 27 10:00:24 2025 GMT
Not After : Apr 28 10:00:24 2025 GMT
Subject: CN=57994fb41077346dc783a2521ec32a6810dd06bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:b0:e3:68:43:91:20:18:ea:a5:bf:71:34:
d5:50:77:0e:b5:3e:e3:8e:55:59:84:9b:de:20:63:
0a:11:86:9e:84:74:cd:7a:6e:ab:18:eb:6b:ac:4a:
c5:5c:a5:2f:8e:d5:ec:d8:53:ff:88:c7:e3:d5:b1:
37:66:80:48:87:fa:bc:ca:ce:24:05:de:f5:f0:bf:
18:e2:93:9d:b7:38:f9:60:7a:bf:8e:e9:2b:3d:a7:
55:7d:e0:24:d7:d7:7f:75:79:7b:b0:75:87:26:8c:
4f:5c:8b:55:fc:20:e7:46:32:c1:43:1d:2f:d3:2d:
db:3b:9c:1d:bb:6b:f1:ad:63:33:39:b1:28:c5:6a:
1a:07:28:70:eb:4f:7e:83:62:b2:38:63:99:cf:c9:
c5:ba:e9:ca:6a:1c:ca:04:9b:5d:57:d7:16:27:d6:
e2:ae:90:68:98:a5:32:c0:85:1d:c0:83:3d:97:ed:
49:ee:a5:bc:68:f3:a6:ab:e9:86:75:77:26:b6:70:
51:9c:bc:10:1f:eb:cd:71:35:ec:8a:17:4a:9b:9f:
28:b3:d4:51:7e:a3:79:b7:64:73:12:62:4e:08:5a:
35:8c:6b:6a:18:90:9e:1d:41:26:65:a6:94:ba:3b:
2f:26:f7:99:d8:3c:6f:62:08:6a:84:69:e2:33:b1:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:99:4F:B4:10:77:34:6D:C7:83:A2:52:1E:C3:2A:68:10:DD:06:BD
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c8:58:4f:44:a4:8d:b9:bc:71:11:e5:e9:9e:2c:33:dc:c0:
48:5e:c3:25:a0:78:aa:ad:7c:17:7f:62:44:fa:7b:3a:be:af:
8d:a1:5e:99:8c:81:bf:75:4a:a9:75:f3:48:d7:bb:96:c3:98:
f8:41:d6:f6:bc:a7:71:50:e5:5c:35:69:a5:c4:b3:cf:0a:fb:
64:ad:f9:63:6d:09:84:a1:1e:47:a8:4a:ef:67:18:f4:f9:af:
92:b8:91:9b:fc:3e:96:87:aa:e6:f4:5f:dc:95:d8:2f:84:2b:
e9:63:05:dc:39:38:22:27:84:d9:78:98:a9:33:4c:c3:1e:7a:
c6:f8:2a:94:bb:b6:0e:bf:63:5e:14:b1:3f:d1:82:b9:78:4f:
e1:d1:96:a4:e3:c1:02:27:98:36:7c:e7:e7:b1:e4:08:1e:7c:
e3:f3:c8:ea:f1:03:72:20:f5:1c:df:d3:ae:7a:2e:2d:77:ad:
fb:b0:19:95:5b:94:16:bf:ec:58:2e:b5:48:6a:6b:ee:46:81:
f5:73:8b:7f:e3:8a:3a:05:ba:0e:1c:cf:92:24:7c:13:69:d7:
39:64:3a:87:cd:b9:cb:f5:db:5f:ca:26:d5:c6:91:de:76:1c:
cf:92:70:1a:14:52:ce:8d:e7:0f:73:49:38:36:c0:9f:02:ff:
58:ef:b9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:00:16 2025 by rpki-client