Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File: pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier: jX1YrMJp9WHu5t8rl3G1uVdGM+cz6WW2iN7AxUjnjhY=
Subject key identifier: 15:7C:0A:51:BF:EF:CC:45:1F:FD:81:67:AB:93:A5:0B:B6:72:52:BD
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer: /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial: 0196790D54D1B842215CC39DF907D3709ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number: 13C8
Signing time: Sun 27 Apr 2025 21:00:38 +0000
Manifest this update: Sun 27 Apr 2025 21:00:38 +0000
Manifest next update: Mon 28 Apr 2025 21:00:38 +0000
Files and hashes: 1: VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (hash: fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=)
2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: QAxON+AHpiYhaM4I/ziSNwHh00CRsQHK//vhP7qdz08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:54:d1:b8:42:21:5c:c3:9d:f9:07:d3:70:9e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Validity
Not Before: Apr 27 21:00:38 2025 GMT
Not After : Apr 28 21:00:38 2025 GMT
Subject: CN=157c0a51bfefcc451ffd8167ab93a50bb67252bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:5b:3d:4b:aa:b1:25:3f:36:0b:94:c1:c5:
b0:36:59:f4:bd:03:f2:e5:e0:30:9e:21:e8:a9:d2:
4d:29:7f:6b:c4:0a:6a:f7:39:f9:27:27:4e:71:11:
59:59:14:13:59:b4:7e:7e:c1:ee:40:41:fb:14:c0:
73:c6:33:0b:bd:89:7f:43:c6:45:21:28:34:51:dc:
09:fa:4c:9c:9d:d2:ca:6b:10:6b:c5:7d:d6:b5:b7:
bc:de:34:55:51:b7:64:ed:7b:81:b2:e3:fc:b9:37:
45:42:d4:3e:ed:3f:a0:9e:65:5c:f8:b0:2b:3f:6b:
a3:07:9b:93:1c:f1:60:c7:16:bf:20:85:e4:d7:44:
7f:45:bb:82:91:0c:4a:90:9a:64:28:0b:20:a2:b4:
67:46:f0:a2:b6:5f:29:8e:6d:9c:c8:cc:96:35:35:
7b:6c:aa:7b:c2:6e:39:fa:87:ce:80:f8:02:46:76:
3f:55:7c:c5:60:be:3e:4f:ba:47:74:8b:a1:70:3f:
61:ad:bf:c5:12:a6:b9:4e:ef:e1:93:15:66:6e:1e:
6d:4e:2f:1a:6c:ff:88:55:f5:50:d7:e0:45:0a:45:
52:4c:ce:2f:1e:c9:46:3a:97:c2:61:54:8a:09:c3:
60:c8:29:15:2c:8a:39:2e:f6:7f:51:33:69:45:8a:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7C:0A:51:BF:EF:CC:45:1F:FD:81:67:AB:93:A5:0B:B6:72:52:BD
X509v3 Authority Key Identifier:
keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b0:b8:a1:9c:7d:a6:20:5a:a0:c5:a1:f0:b4:e5:9f:e5:4c:
58:49:aa:70:d3:2c:4a:20:24:8f:ee:cd:83:a7:57:26:1a:7c:
e3:64:46:5c:6d:32:d2:2b:10:78:d1:e7:54:bd:ce:41:c4:b8:
0b:97:d1:74:94:12:32:e5:94:63:79:67:14:eb:5d:6e:01:71:
ea:7d:f4:b8:ab:5e:1a:fd:a8:23:4e:26:e3:13:42:0d:1d:11:
64:0e:04:8d:41:04:51:cb:17:e6:3d:87:e0:2c:28:93:16:fc:
2e:25:46:db:ec:43:b0:73:1e:89:63:5b:a8:c0:68:f0:ae:aa:
3f:91:66:58:d0:1f:0e:5a:99:d2:6a:28:88:9f:74:2e:3d:c8:
1d:18:60:1f:1a:04:04:32:8f:43:0a:a0:98:86:ef:2b:9f:ff:
7c:fe:9b:8f:2a:f9:44:21:13:92:b3:1f:ee:13:ab:f1:7b:26:
fa:46:d6:e8:2d:78:bf:8f:e7:8e:0f:58:4a:a6:dc:68:cb:4a:
a0:31:5c:48:5c:d7:c9:81:6b:44:17:38:94:07:46:40:75:6e:
dd:64:69:7a:16:dc:e2:9d:34:bc:f0:34:f6:6a:8a:42:be:d5:
2c:08:64:54:aa:03:dd:77:65:3d:7b:68:0b:08:18:1f:00:3c:
fe:2b:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:50:47 2025 by rpki-client