Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: oODXTAWclqYfDvrMHEKFNjIwhdJjvIzaPEe9oXoiWZE=
Subject key identifier: 19:7A:E7:73:C8:90:20:38:7B:6E:92:3F:C3:A9:D5:83:C1:84:ED:F6
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 0196835A23F92924A114674C116E2C33A34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 05C2
Signing time: Tue 29 Apr 2025 21:00:44 +0000
Manifest this update: Tue 29 Apr 2025 21:00:44 +0000
Manifest next update: Wed 30 Apr 2025 21:00:44 +0000
Files and hashes: 1: nbFO3tETAKU90cGGwpaCKUOKTLY.roa (hash: cquJx46DtG8x6pISzm/UdeY5xz+jlo5riwT4Pb8N/jw=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: yaFXN2T43So5mLYNCE+ho8s20rIfu2vePmvY521cThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:23:f9:29:24:a1:14:67:4c:11:6e:2c:33:a3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Apr 29 21:00:44 2025 GMT
Not After : Apr 30 21:00:44 2025 GMT
Subject: CN=197ae773c89020387b6e923fc3a9d583c184edf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:64:d9:81:97:ce:e7:8c:ad:fe:c3:f8:65:
a3:53:85:d5:7d:22:63:b5:83:65:27:fd:2e:1c:cc:
fe:f7:78:76:fa:46:53:2a:9d:d6:26:86:b3:4a:e1:
bb:45:45:9d:15:8b:e4:3e:d8:e3:96:b1:e9:a7:8c:
65:9f:41:cf:a9:df:a7:11:10:30:63:ba:77:cd:f3:
82:fc:8f:74:13:a9:c9:ce:d4:d6:1b:0f:ff:f6:d2:
5a:64:b5:f9:ff:18:9f:76:c5:64:2f:09:04:5e:75:
a9:f6:e6:c7:1b:60:ef:df:1e:8e:ab:4d:0c:35:d4:
ff:6f:df:b8:18:0c:5b:01:15:15:08:40:96:b9:5c:
06:5d:32:9d:ea:8b:bb:05:6e:f3:b1:31:ad:61:1a:
dd:97:6c:f8:f2:c6:b0:a1:0f:be:97:18:6b:16:00:
c4:56:8d:e7:6a:fb:75:a9:c7:a6:a6:b1:35:08:ad:
12:94:97:7a:4d:0f:a8:15:45:81:2a:cf:ca:76:05:
b7:56:9c:7b:b6:05:e6:5f:8a:e2:e3:5e:b7:7e:ea:
40:c1:d1:18:5f:ee:a4:7a:f0:b2:e1:c6:71:9f:db:
ed:24:b0:cc:29:db:6a:78:39:af:65:a9:bd:b5:84:
4c:ae:35:9f:98:e2:7a:f6:1f:8f:f8:5d:cb:29:51:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7A:E7:73:C8:90:20:38:7B:6E:92:3F:C3:A9:D5:83:C1:84:ED:F6
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ae:52:ec:06:fa:ac:d9:dd:2f:77:a7:0c:91:86:b1:97:9c:
c0:fc:cf:39:7f:64:b7:b9:7f:4a:d9:2e:9f:9a:a8:9b:06:3c:
b6:63:3d:31:c4:81:ad:c3:84:5b:6b:e5:44:85:9d:e8:20:f0:
82:f8:1a:92:c1:d4:91:0b:97:a4:1d:b5:d0:31:c3:dd:e3:24:
76:36:14:df:7a:41:12:7e:37:6e:12:41:00:3d:ca:8e:9b:3a:
cd:23:4b:bb:70:1b:e6:18:32:d3:29:ca:01:91:05:5d:45:49:
70:b5:7f:72:2b:3b:39:ae:05:a7:00:17:59:8c:06:19:ee:94:
00:53:34:1f:ad:91:09:9d:e6:18:97:3d:f5:ad:44:c5:42:5f:
e1:81:14:72:71:79:d4:5d:6f:a0:82:e3:00:48:71:c9:3a:a5:
b0:58:ab:c7:f0:2d:74:48:34:df:6f:7a:a6:f3:cd:90:ba:90:
79:30:7e:c6:a3:71:d0:a7:3d:0e:dc:3b:84:7e:44:7c:2e:0c:
4a:12:c2:ec:78:1c:7a:73:22:ba:e8:e0:2a:b5:02:ae:4a:f4:
49:f4:f8:20:1f:5e:da:54:0b:20:08:b9:30:99:2e:8a:6a:e0:
46:73:cb:6d:5d:42:43:e1:63:17:02:25:87:aa:57:53:e3:e0:
50:ce:a8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:11:14 2025 by rpki-client