Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File: pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier: rT9NAJk+YWRucdQF8yXKLYgXpS/Dg85WVMOGmknqmyg=
Subject key identifier: 46:E3:7C:7D:66:A5:BE:59:A2:63:2C:30:A2:8B:C1:09:91:13:4B:1C
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial: 0196808FE4F83EDB249271DFD843136EAD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number: 11B6
Signing time: Tue 29 Apr 2025 08:00:35 +0000
Manifest this update: Tue 29 Apr 2025 08:00:35 +0000
Manifest next update: Wed 30 Apr 2025 08:00:35 +0000
Files and hashes: 1: Hp2ljcULzg53pBCXbKt3KAlFkVw.roa (hash: qsDz5TZedLiWJnxlNWk1Ko36qqmg6+ybGLmJSNA11KU=)
2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: je+pYvLTPz9MUG6g/did2tU21yutZw+b0UxX0Ulk/84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:e4:f8:3e:db:24:92:71:df:d8:43:13:6e:ad:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Validity
Not Before: Apr 29 08:00:35 2025 GMT
Not After : Apr 30 08:00:35 2025 GMT
Subject: CN=46e37c7d66a5be59a2632c30a28bc10991134b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e6:04:69:8c:ef:e5:67:d9:07:9c:53:b6:da:
3c:7f:92:ad:f3:5f:ea:61:e7:74:e7:de:84:02:60:
7f:a0:63:f9:e4:cc:dd:52:83:12:6d:3a:4b:11:20:
73:d1:84:c4:35:96:cd:c4:9c:a9:e1:ae:6e:68:ce:
d6:fc:8b:f3:9e:dd:54:24:10:b7:99:e5:d8:07:83:
10:47:8b:6c:fa:c6:cc:a3:a7:08:1a:31:f4:ec:39:
96:68:67:c7:65:89:b3:52:a1:50:8a:21:0c:14:ce:
23:17:83:97:15:b7:a5:0c:88:4d:31:7b:db:bc:85:
b1:88:a7:bf:18:da:5c:1a:d1:11:37:18:4b:89:64:
77:9a:36:8a:a4:73:63:9a:79:41:5e:75:3a:73:5e:
60:f3:af:0a:37:fa:44:50:3d:cd:30:95:ec:c5:32:
b4:16:a1:a8:61:f3:19:a9:90:c8:9c:40:cc:69:eb:
f7:69:4a:f1:d0:ba:6d:75:54:b6:6d:18:9b:b0:48:
1d:fe:15:82:bd:9c:3f:ad:a5:42:58:a1:6e:02:ca:
13:53:11:78:ed:70:59:99:e8:d4:23:54:a5:42:f7:
6c:eb:00:80:57:98:ae:ed:d8:77:c1:ad:22:74:c9:
01:66:b3:81:dc:b1:6b:bb:56:0c:91:52:ca:77:b3:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E3:7C:7D:66:A5:BE:59:A2:63:2C:30:A2:8B:C1:09:91:13:4B:1C
X509v3 Authority Key Identifier:
keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9c:1f:30:72:8b:5e:6e:65:76:e1:31:dc:6a:2c:82:9f:25:
00:c0:97:49:55:0c:89:7f:9b:dd:34:9c:38:55:7d:62:2b:d7:
d3:8d:59:83:b5:23:6f:11:75:f0:a8:ac:b7:46:f1:2d:d9:f6:
74:dc:48:35:57:9c:d3:f7:5a:6d:e6:6a:2e:b2:82:aa:ce:2e:
29:ef:9e:a9:97:07:35:20:ed:04:f4:cc:e0:6d:bb:f4:14:63:
d8:17:67:e3:ef:7d:57:2f:ee:a3:2e:34:69:49:95:8e:27:55:
64:cf:4c:88:f1:51:4f:c8:d9:36:c3:07:6b:32:b8:c8:72:02:
e6:cc:8c:e1:a6:1d:3f:bf:8c:27:e3:58:b2:2b:45:ca:74:6d:
a9:95:23:fa:5b:2f:36:e9:40:68:7a:e5:f3:15:31:6b:1c:c2:
8f:f4:f8:17:17:06:f1:41:2b:59:0f:de:a8:72:2f:ba:ab:8a:
e8:75:58:78:66:a8:c6:39:d7:d9:13:0d:52:b2:94:c2:d6:a5:
c4:61:42:74:14:d2:85:e7:df:25:a2:63:5d:6d:ab:94:6d:02:
c9:15:7b:01:29:e8:9e:52:ef:17:a5:f2:bd:63:62:94:4d:54:
83:48:36:cd:28:be:5e:5c:47:e6:29:f4:67:73:4b:1e:df:84:
6a:61:c5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:45:11 2025 by rpki-client