Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: 6RrbKRopy2miNZaRljJLPqLmLSOV5kNWeH99DH+f25U=
Subject key identifier: 5A:73:0B:EC:14:5E:68:B2:F5:F4:39:90:D2:19:B6:57:FB:F6:B4:77
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 0196808F94E060580598E3B6A982097768C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 07A1
Signing time: Tue 29 Apr 2025 08:00:15 +0000
Manifest this update: Tue 29 Apr 2025 08:00:15 +0000
Manifest next update: Wed 30 Apr 2025 08:00:15 +0000
Files and hashes: 1: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: S7JUFX5ywSTXicEvX++TuDLWzgh2IZRHUgIW4xzm/QM=)
2: quGmI9u7kZ_srTH3LAyxtNKvCAo.roa (hash: RhLYYew4zXRTIVHsFT/3lhPwJj/c1cXNf2IyJ1qOi6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:94:e0:60:58:05:98:e3:b6:a9:82:09:77:68:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Apr 29 08:00:15 2025 GMT
Not After : Apr 30 08:00:15 2025 GMT
Subject: CN=5a730bec145e68b2f5f43990d219b657fbf6b477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:52:a4:e8:95:24:04:e7:87:e5:ba:8e:01:
51:84:b8:72:69:9e:3a:de:d6:ca:7e:08:cb:02:fa:
aa:70:0f:c1:77:a4:95:57:73:9c:b2:33:30:45:64:
0d:76:b4:8d:30:73:62:a3:54:dd:14:fd:d4:06:4e:
06:68:2a:15:cd:a6:a6:2e:13:0e:9a:12:b5:55:96:
03:e7:3c:a5:ab:38:ca:35:6b:90:af:55:c7:6d:d2:
9c:02:95:cc:b3:f2:92:a4:3f:f8:0b:9e:54:14:6b:
46:b1:17:d2:7d:c1:70:51:dc:cc:e9:6d:46:fc:55:
34:c9:86:89:0d:7f:eb:53:a6:bb:6c:37:57:6a:d1:
3a:e4:fe:ff:4f:14:d6:50:64:6d:f9:4a:a1:6d:40:
af:9d:11:98:f4:69:24:26:b9:16:f0:54:55:17:7c:
3c:51:23:59:b9:51:d0:b2:66:dd:62:83:b5:5e:87:
46:ef:30:02:49:ef:79:c9:19:f4:50:b4:10:ba:1e:
be:6b:17:98:ca:1a:d0:48:3d:85:d4:7c:1a:f6:95:
17:03:d0:fb:6b:f5:74:99:cf:15:ed:18:07:a9:a4:
93:25:5c:70:9c:f2:fa:e2:d0:b6:3e:6c:18:c1:c6:
2d:cc:df:f8:13:d7:98:9f:8a:ba:89:f1:09:58:0f:
80:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:0B:EC:14:5E:68:B2:F5:F4:39:90:D2:19:B6:57:FB:F6:B4:77
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f6:69:a5:2c:f6:ea:36:75:eb:30:09:20:7c:e5:42:ad:3d:
03:fe:f1:5a:52:d5:88:fe:49:4d:12:42:61:ba:55:8c:ca:c0:
9a:4d:02:f0:64:2c:96:d7:cf:5f:44:78:9e:9b:73:70:73:c7:
48:b4:1b:09:cb:fd:a6:87:f0:58:d5:ab:b6:a6:8a:36:42:8e:
7a:12:c2:eb:9b:41:05:d7:2c:9b:2a:42:12:55:50:1f:92:14:
43:97:57:b4:fe:43:d4:95:20:f7:c6:07:bc:4c:86:92:f1:70:
3a:3e:0a:df:4c:c7:f9:8a:1d:11:c4:61:b9:70:76:78:2a:6d:
ce:39:80:d0:03:db:ea:b1:ed:d4:29:63:97:83:96:12:9d:4a:
d6:4f:bc:a8:27:27:33:a7:ff:36:bb:f9:3a:94:f9:0a:a5:c1:
b4:d5:17:61:fd:55:9e:90:aa:94:67:5c:58:b5:7e:e0:79:9c:
a3:5a:2a:4d:81:e7:8e:77:d6:a9:16:9f:db:aa:09:be:8c:2c:
d1:b1:78:ea:6c:fe:d4:6c:34:79:ca:c0:94:7c:fb:e1:a4:35:
61:7d:ba:f2:ab:17:c0:d1:6f:82:99:6e:bb:02:8b:54:0d:9d:
f9:9c:ea:c6:17:87:0b:e3:0b:f4:cf:4e:89:d3:2f:18:83:c1:
f5:9b:87:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:46:08 2025 by rpki-client