Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: ePTS5Wu9tDLhX6h99E+l5BvFACFSO5yldm+3xkImPXE=
Subject key identifier: 7A:4F:2E:B3:F9:FB:74:0B:18:46:4E:54:BD:CC:37:94:C2:7C:9D:D8
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019674F988C7C8C920015E6ADAC9CD4E989A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 02:00:32 +0000
Manifest this update: Sun 27 Apr 2025 02:00:32 +0000
Manifest next update: Mon 28 Apr 2025 02:00:32 +0000
Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: CS8quoG+yEsw6Cy4zupLu5tebFCgQDVD2pISYhR4uNY=)
2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:88:c7:c8:c9:20:01:5e:6a:da:c9:cd:4e:98:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Apr 27 02:00:32 2025 GMT
Not After : Apr 28 02:00:32 2025 GMT
Subject: CN=7a4f2eb3f9fb740b18464e54bdcc3794c27c9dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:93:30:65:ac:17:a9:60:21:07:3e:5f:17:
ae:84:61:85:0b:18:83:ca:2a:7c:1a:74:88:0d:32:
f5:f9:bd:21:1c:f6:e4:18:e3:ba:26:d3:09:b4:cc:
2b:6d:fc:fe:cf:a5:0e:f7:8a:a0:ef:95:e0:90:74:
21:6f:dc:74:8c:46:e2:52:a9:18:13:5c:23:e8:b0:
44:00:bf:10:8c:6d:6f:17:1a:28:da:1c:dd:64:c9:
1e:0b:4c:ad:12:21:0c:ce:18:be:85:ae:9e:0e:6a:
93:f0:84:ec:16:f8:8c:2d:e2:cd:9a:d2:3a:e8:ae:
fc:16:ec:3f:6b:d5:d3:96:eb:cc:b4:3b:f7:95:ec:
75:7b:00:c7:d7:59:80:6b:14:c1:3c:97:eb:b6:bc:
24:37:0a:4d:13:de:1a:f6:06:98:1f:ef:fd:98:57:
c8:c0:29:64:dd:42:04:b9:57:4e:08:f7:65:5d:60:
4f:c8:7f:f9:2a:a1:e8:8f:e5:0c:78:f1:58:ff:c4:
5e:00:cd:d3:a3:9f:09:35:a8:3c:5d:5c:73:12:3e:
c0:95:d3:7a:cd:5e:54:04:bc:a7:26:62:f4:1c:d4:
f1:19:6b:98:35:ee:2b:bf:f9:31:09:0f:cf:bb:5e:
d0:8d:20:7d:71:6a:e8:d6:3f:e8:d1:41:68:d4:50:
f3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4F:2E:B3:F9:FB:74:0B:18:46:4E:54:BD:CC:37:94:C2:7C:9D:D8
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6c:8f:98:68:17:f4:b3:30:b0:95:48:56:59:29:41:34:e5:
0c:4d:d6:f3:d7:14:01:8e:92:95:e3:9d:9b:d2:e1:41:63:1e:
30:a7:19:6a:c7:f7:2b:c7:3a:2c:65:02:ac:4e:e7:ff:76:a6:
6b:26:11:6a:06:f9:8b:c3:10:d9:a1:b4:ec:80:af:90:49:8c:
37:f1:86:be:b0:20:44:1c:ba:06:31:68:9d:7d:ba:79:a3:81:
f6:ef:01:b3:e9:85:44:0e:3a:e1:1d:7c:a8:6a:d5:1b:d4:5f:
25:f6:63:5b:50:b8:92:88:d3:59:7e:3d:d9:97:aa:9b:1d:01:
a1:55:8d:c7:e0:e9:b6:a1:e5:be:92:04:19:77:26:e3:51:de:
d4:e3:6c:d7:3f:da:98:5e:a0:21:78:bf:10:10:ff:18:d8:77:
bf:a9:7c:f3:c3:a5:fd:31:39:e5:ae:61:ab:26:ea:b9:87:17:
50:5a:d1:d2:db:59:33:1c:83:3c:b1:5d:79:dc:b9:50:9d:56:
f9:f0:1f:9a:c8:3f:50:00:d8:4a:12:60:e9:1c:51:f8:53:df:
62:51:b8:32:3c:e4:ad:bc:27:a9:6a:25:22:82:9b:25:aa:4a:
8a:47:1e:40:8b:4f:66:61:c6:0f:3c:e5:14:72:25:0e:5b:5f:
63:9d:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:48:25 2025 by rpki-client