Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: zK7J9AGNAAjts0/Jpxvjg0bIEb4nSWR0IoGOc9BjSFo=
Subject key identifier: A8:ED:EC:08:F6:0D:A9:8C:D6:5E:77:25:B0:91:A2:A9:16:DA:41:6D
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 01969070FDC9541CCB0D170D89B9B8DC943D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0B22
Signing time: Fri 02 May 2025 10:00:46 +0000
Manifest this update: Fri 02 May 2025 10:00:46 +0000
Manifest next update: Sat 03 May 2025 10:00:46 +0000
Files and hashes: 1: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (hash: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=)
2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: 1Sz01J7Z5pzPqVX+sIQT0tDwbLbA6u0F/0QSr4T6jXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:70:fd:c9:54:1c:cb:0d:17:0d:89:b9:b8:dc:94:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: May 2 10:00:46 2025 GMT
Not After : May 3 10:00:46 2025 GMT
Subject: CN=a8edec08f60da98cd65e7725b091a2a916da416d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:8b:b0:86:84:d0:48:3e:ea:59:99:2c:61:
5e:a7:ef:87:0f:92:21:f4:47:d8:80:0d:4f:43:70:
a2:db:b7:72:c3:50:8a:d5:4b:a8:c3:bc:22:2b:49:
4e:d8:fb:f4:bb:43:e0:6c:73:8b:d4:bc:8c:8c:71:
c1:88:9c:ac:d7:ef:2f:26:1c:f9:b3:1a:c0:37:e1:
47:15:b1:4b:60:a3:6f:03:a1:37:72:89:be:60:d3:
fd:7a:3b:60:05:b8:69:37:9d:00:09:8f:61:eb:60:
7a:31:dc:d7:20:3e:5a:a8:9e:9c:77:eb:65:c0:13:
97:e3:10:c1:29:17:41:01:5c:54:59:40:ab:21:b2:
36:07:12:94:60:51:e9:60:dd:e7:5b:7d:76:49:a1:
66:c6:97:58:12:b5:44:7d:c3:00:36:fe:25:46:03:
e0:50:73:c6:eb:48:e1:63:f3:3c:ac:5f:c7:46:7a:
d9:6f:f1:c6:ef:e8:98:8f:e8:f8:d6:ca:15:8f:ce:
fa:6a:ec:a5:e2:cc:ec:5e:30:b9:ca:fe:bf:8a:ba:
eb:f2:7b:4c:08:af:bd:06:f7:cd:bc:1f:4e:dd:df:
78:d5:54:51:22:86:95:39:9e:be:8f:b0:4a:45:8f:
5f:67:83:63:49:48:98:e0:d9:f1:bb:74:67:15:7d:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:ED:EC:08:F6:0D:A9:8C:D6:5E:77:25:B0:91:A2:A9:16:DA:41:6D
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:de:5b:c9:cc:d1:1b:33:01:a5:68:f4:ba:d1:28:66:ce:54:
0e:cb:2d:ed:e4:eb:96:cb:c1:49:81:f0:09:45:7b:38:21:7c:
7e:cd:08:d8:b2:4b:47:86:eb:11:fd:09:ce:8f:49:ee:d1:ce:
ce:9d:5e:97:73:ca:cb:bf:7f:84:a4:24:3d:6d:3f:90:60:33:
9b:91:5f:9e:24:a1:1c:bd:d3:46:74:3d:87:f6:4d:e1:ce:48:
9d:b6:94:78:fb:98:e3:f9:c7:1c:f0:22:a8:e2:be:98:5f:af:
0a:81:84:15:ad:2b:c7:59:d8:ac:7e:39:a7:84:ec:9f:3d:59:
cc:84:c7:88:5d:61:53:9a:b9:32:05:5c:a3:f6:c3:49:c5:a0:
71:ba:22:0e:15:58:a9:c4:30:43:90:64:7c:64:f4:bb:69:b7:
a8:e7:18:58:45:99:63:db:ca:fa:81:de:8d:cb:d3:ba:4e:92:
35:bf:4c:01:b1:c9:fa:9d:be:a7:c5:47:5e:31:dc:35:ba:65:
9f:2b:c6:8a:b3:29:f8:75:5a:df:9f:fb:cb:89:c9:f0:1e:3d:
8f:29:06:f6:76:e4:a3:59:f4:9c:14:68:79:9a:81:0d:f9:dc:
23:a4:16:75:b6:f8:63:17:7e:39:0c:57:1f:87:96:10:a1:a2:
4f:9d:ba:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:46:08 2025 by rpki-client