Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: Qr+ykgLMIWDmSrcC6QGyvbUFMCIx1Qh0NjZl2AAtx1Q=
Subject key identifier: 64:2B:06:48:F2:3D:90:90:DD:43:38:4D:B3:11:F1:54:8D:2C:22:C6
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 01967F466FD081BA09F6DF24CA9DCD54ECA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 14A9
Signing time: Tue 29 Apr 2025 02:00:44 +0000
Manifest this update: Tue 29 Apr 2025 02:00:44 +0000
Manifest next update: Wed 30 Apr 2025 02:00:44 +0000
Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: Muzk7hEiGI79dYqKzPTQaOytxMiyYz8mTH+cxSUQJOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:6f:d0:81:ba:09:f6:df:24:ca:9d:cd:54:ec:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Apr 29 02:00:44 2025 GMT
Not After : Apr 30 02:00:44 2025 GMT
Subject: CN=642b0648f23d9090dd43384db311f1548d2c22c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:06:32:7d:da:ce:c2:7c:44:e8:a2:c9:9d:
e8:d2:cc:68:09:6b:8d:aa:c7:73:04:84:3c:6e:6a:
11:8e:93:e1:d7:4f:e9:cb:0e:2d:0e:7a:8e:c9:c9:
e7:21:22:86:d2:e0:7e:b9:80:4d:04:97:58:61:89:
37:81:d4:a5:4b:ec:eb:2d:31:78:1a:fc:b1:76:44:
d4:bf:80:3a:be:b0:7e:48:b5:fe:3d:06:78:ba:06:
f3:65:37:bd:a3:6b:66:14:72:b1:d2:a5:2a:0a:3d:
15:88:ce:94:8c:8b:0a:72:fb:27:98:40:a7:cd:7c:
ea:5b:92:14:4b:1d:da:6b:83:35:5d:e3:16:19:e7:
64:09:80:2e:38:7d:6d:03:1e:6f:e4:4d:12:76:d1:
b3:e7:71:b6:8a:65:3e:1c:fb:50:2a:4a:4e:91:4d:
cd:b3:fb:e7:8a:95:6b:a0:34:23:9c:8d:51:9f:91:
49:81:60:79:5f:d5:00:5a:b8:73:72:8f:26:3f:78:
55:95:d4:07:49:ea:28:96:a1:0d:cd:d1:f4:3e:83:
cc:70:9f:ab:41:53:66:8f:c7:eb:7f:a1:fe:81:c9:
98:bd:31:29:fb:b7:06:5d:38:be:a2:dc:64:48:bd:
60:e6:2a:56:02:48:74:7a:ec:7b:13:86:b4:3f:36:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2B:06:48:F2:3D:90:90:DD:43:38:4D:B3:11:F1:54:8D:2C:22:C6
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d0:07:e0:35:64:2c:50:07:ef:86:40:2b:90:c0:0a:b5:09:
1f:05:53:c9:f0:18:0d:05:9c:4b:e1:f8:ec:96:96:42:99:96:
35:9c:4d:06:31:17:fd:2c:e8:bb:82:34:01:a1:70:3a:9a:fa:
19:60:a8:26:8d:74:78:ae:93:6e:d6:8d:78:c9:b0:4e:d1:99:
5d:c9:20:42:1e:8a:07:25:e0:46:01:63:15:b9:b7:33:12:0b:
0f:44:20:5e:dd:d1:57:68:e0:61:08:5f:98:0a:69:ec:a7:05:
cf:60:c9:7d:08:84:5e:29:ae:5f:e0:d1:9a:f5:a1:30:a9:40:
d9:9f:4e:1d:bf:2e:5f:63:ec:64:44:41:91:61:61:5c:01:88:
d7:f2:e7:e8:e8:a7:ef:8f:ff:47:1f:c3:68:16:1c:eb:49:97:
ff:5e:f1:85:69:13:55:6e:5e:58:92:08:ff:7c:0b:86:f0:88:
1b:4d:cd:6c:54:b6:0a:d0:b1:ea:7f:02:68:d4:6b:ea:44:ca:
63:0e:ce:89:ea:43:82:01:37:e8:0a:b5:3c:49:38:b2:0c:b3:
93:c8:87:8e:ce:b0:75:20:b8:01:f8:8d:52:09:c6:eb:4a:31:
51:9c:46:29:b9:c5:0a:c0:af:9a:44:7d:c2:2a:31:65:b0:5b:
45:e0:47:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:50 2025 by rpki-client