Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File: PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier: M2I96rNYu+YYmF9JXL3i/RRkdtimAohdkgCgawQgfJc=
Subject key identifier: CC:B6:96:A2:9C:9D:39:88:EA:67:FD:3D:DC:10:B7:A3:7A:72:45:EB
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 019677C39B161E8AF83D8B3CF2E74DEDEEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number: 04A5
Signing time: Sun 27 Apr 2025 15:00:30 +0000
Manifest this update: Sun 27 Apr 2025 15:00:30 +0000
Manifest next update: Mon 28 Apr 2025 15:00:30 +0000
Files and hashes: 1: 75tUj24Sz1np7niKzvR12f9WWo0.roa (hash: 37+oOch5GIb73IinVFHvfdIOejO/FeSmIhgqOGWbqGU=)
2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: AfytBuY1K+O/DboOl76c8GXDQd3QrqTheu0jvdfMObA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:9b:16:1e:8a:f8:3d:8b:3c:f2:e7:4d:ed:ee:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Apr 27 15:00:30 2025 GMT
Not After : Apr 28 15:00:30 2025 GMT
Subject: CN=ccb696a29c9d3988ea67fd3ddc10b7a37a7245eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:6b:cb:88:85:af:91:90:b1:90:68:fe:be:
fc:9e:cd:b9:61:85:f8:ab:7f:f7:5d:6d:c6:70:2e:
64:d0:29:b5:9b:12:7e:03:4a:8f:0c:88:50:ed:39:
6f:ca:2f:a7:9c:66:60:f1:68:9c:b7:be:fe:6d:ed:
51:c9:fc:bc:52:93:98:bc:d4:ae:13:30:0e:d6:b1:
a5:d5:76:01:5b:09:a5:c0:d6:a3:9f:ee:01:36:86:
c1:69:4a:bc:86:19:8f:11:70:25:49:66:65:cd:4f:
78:69:29:2f:f4:60:d8:5f:99:a0:3f:54:96:b1:b0:
a7:10:53:02:27:32:4e:78:9c:1b:2a:de:11:b6:76:
95:0e:13:f6:1f:c7:f8:2c:63:4a:77:24:63:08:02:
a9:87:a0:16:d4:3b:40:6a:13:6b:3f:53:15:0c:8b:
ba:0c:7b:37:6f:e4:4d:8b:92:32:39:7b:99:bc:12:
e7:22:ce:54:44:f1:b4:90:75:87:76:4c:03:7b:c5:
95:87:2b:1a:29:71:11:11:11:d0:87:dd:70:86:6c:
52:64:20:7e:49:07:e3:6e:1c:7b:90:12:9b:8e:1a:
05:5c:f6:67:c8:98:1e:87:4f:a1:35:77:70:d7:b3:
d3:db:9e:3f:21:a2:c4:8f:8e:0e:04:64:b4:21:f6:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:96:A2:9C:9D:39:88:EA:67:FD:3D:DC:10:B7:A3:7A:72:45:EB
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e7:cf:56:f2:84:71:0c:da:04:8c:f2:87:21:c5:9e:4d:46:
8c:6b:1d:63:c5:0a:7c:ff:38:36:89:ed:ff:10:bc:4f:2f:d4:
b3:fa:43:93:a4:a5:0a:f9:76:27:09:dc:85:7b:c5:46:53:20:
91:7f:cb:70:a6:3d:51:24:2c:b9:bc:b4:45:ef:b5:81:ef:90:
3f:ca:57:9c:8f:64:27:43:52:b2:c8:bb:90:5e:06:e2:c9:10:
88:11:fb:83:10:d2:da:72:d0:a2:55:33:06:49:d7:74:9e:f5:
ae:84:c7:29:c0:0d:77:4a:85:74:0e:68:5e:17:ce:32:c5:8c:
a7:73:7b:f6:83:86:fb:55:d2:20:fa:3a:97:61:00:3e:a9:ad:
3f:94:a3:c3:3e:8a:25:34:5d:be:c5:65:55:1b:9f:c6:69:31:
84:d2:40:d3:ec:d9:c9:b0:c7:ee:a4:6f:9c:66:a1:6f:8e:fa:
23:dd:61:ab:01:fd:6e:91:68:9e:1d:67:81:82:3f:83:90:d2:
34:0f:d1:ba:72:d9:97:61:21:26:e2:c8:45:07:1f:f0:05:c7:
b2:c1:9f:97:a8:99:4f:aa:e1:9e:72:04:d2:86:13:dd:12:71:
73:32:22:47:9d:b7:e5:d8:9f:c9:04:3d:ec:d8:1c:e8:08:9b:
4d:e2:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:06:40 2025 by rpki-client