Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: urcwxmuq0m2lfWTuGHsvTS4yTVkkQvAV8Jd2kaibFCU=
Subject key identifier: 50:82:ED:EF:C3:AA:4F:37:CE:D4:1D:B3:FA:D6:CD:04:AC:A5:78:FE
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 0196816B6E4511DFA19C70CC4C367314E74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 05C1
Signing time: Tue 29 Apr 2025 12:00:23 +0000
Manifest this update: Tue 29 Apr 2025 12:00:23 +0000
Manifest next update: Wed 30 Apr 2025 12:00:23 +0000
Files and hashes: 1: nbFO3tETAKU90cGGwpaCKUOKTLY.roa (hash: cquJx46DtG8x6pISzm/UdeY5xz+jlo5riwT4Pb8N/jw=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: T72gCNTyNbIwO7CEUsodoDgiY4NF9/R794o5v/PRbsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:6e:45:11:df:a1:9c:70:cc:4c:36:73:14:e7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Apr 29 12:00:23 2025 GMT
Not After : Apr 30 12:00:23 2025 GMT
Subject: CN=5082edefc3aa4f37ced41db3fad6cd04aca578fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:d4:2d:95:15:da:91:49:1e:0f:57:30:90:
77:12:cf:37:af:42:28:74:24:2d:54:60:29:a0:aa:
9c:7a:6f:e9:68:19:29:3c:ee:74:2f:a5:49:71:77:
77:2c:f6:92:72:db:64:ca:cb:1c:94:c0:ff:99:41:
7e:2e:c7:9e:72:df:d9:1d:ed:0d:a6:00:bc:c2:4e:
49:f1:85:58:6a:53:c5:67:f8:d6:47:32:9c:51:6f:
e9:f1:bd:a3:a2:60:b9:4b:e5:4a:4e:1d:37:ff:6e:
48:e9:fa:47:26:d2:d6:20:b3:25:31:46:1d:97:b5:
5b:4a:8d:98:2a:3b:6b:b7:2a:3a:cc:86:49:af:25:
fc:40:24:e1:cf:1a:6d:9e:92:09:fc:0d:be:da:bc:
98:9a:f1:bb:d3:4f:12:42:24:57:e0:ce:a1:fe:3b:
47:e5:fe:71:52:84:d3:52:fb:ae:0e:42:52:ac:69:
21:a1:b5:49:3c:c8:64:98:cf:b9:41:34:0d:09:d9:
28:83:31:51:b8:a9:41:5a:7c:20:46:47:c5:32:8c:
c2:7d:d1:3a:f4:20:2f:a0:8f:2c:c6:9b:66:a4:87:
fa:a4:e1:95:c1:b3:5f:67:74:e1:11:10:99:31:da:
e5:a3:06:b3:6d:e9:43:e5:ab:24:ea:f7:7d:55:4a:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:82:ED:EF:C3:AA:4F:37:CE:D4:1D:B3:FA:D6:CD:04:AC:A5:78:FE
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a3:a8:c6:12:50:63:7c:ca:4b:25:84:e7:14:98:2d:22:10:
6d:ea:12:44:5a:50:eb:f1:79:5e:2b:8f:ad:3b:1e:b9:22:d4:
97:40:cb:54:42:34:fe:90:b9:4c:ae:04:66:11:01:c9:40:b5:
87:fc:ee:9d:c6:15:55:37:67:3e:9d:6e:f5:71:77:7a:77:02:
d9:ed:b4:c7:c3:e6:3b:71:d0:46:14:06:b8:8f:7e:3f:af:6e:
04:a8:97:4a:13:24:61:37:f6:9a:31:49:1c:a9:00:c1:77:2b:
14:f4:f6:c7:e7:36:3d:07:98:05:cf:32:d8:56:05:9f:48:f2:
28:41:df:bc:66:b0:c0:f7:71:7d:81:ed:b7:42:72:03:e5:65:
9b:d6:6f:54:7e:c2:72:55:2c:c7:ea:d3:ea:be:c8:7f:a2:bd:
34:7f:40:bb:6e:d2:14:1a:a5:74:75:d1:b6:12:2e:b1:d9:63:
7a:36:1d:b4:0c:e0:9f:6c:ea:05:0c:5c:a5:46:3a:53:af:ee:
12:0f:73:a4:3d:4e:53:42:0c:e4:c2:0b:20:05:95:23:33:4e:
c7:3d:00:cc:15:b2:e9:c6:ca:d9:3f:c2:ce:cd:a6:1c:d6:be:
9c:b8:89:3b:f0:84:e1:b1:39:74:f2:d4:07:6f:5d:11:6b:94:
7a:36:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:01:11 2025 by rpki-client