Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File: PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier: fd4Ewr3P4A3Gnvf/LyQ+Bc9PVO9WWNDtCsCyM5vv5lY=
Subject key identifier: EB:0D:BA:1E:37:48:E2:40:77:17:43:8A:F4:FA:43:81:2F:91:28:BC
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 01967D8E9AD89C32F74B5A4F3280DBEA2A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number: 04A8
Signing time: Mon 28 Apr 2025 18:00:19 +0000
Manifest this update: Mon 28 Apr 2025 18:00:19 +0000
Manifest next update: Tue 29 Apr 2025 18:00:19 +0000
Files and hashes: 1: 75tUj24Sz1np7niKzvR12f9WWo0.roa (hash: 37+oOch5GIb73IinVFHvfdIOejO/FeSmIhgqOGWbqGU=)
2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: UpRb7UGOT2Da1df5DJ8FnIZHq4ANUYl8yKzZTG9eQzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:9a:d8:9c:32:f7:4b:5a:4f:32:80:db:ea:2a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Apr 28 18:00:19 2025 GMT
Not After : Apr 29 18:00:19 2025 GMT
Subject: CN=eb0dba1e3748e2407717438af4fa43812f9128bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:aa:dd:43:cc:a7:ca:28:ee:37:83:7f:5e:
3d:0e:dc:85:91:98:2e:b7:12:6a:62:b4:5b:b2:d8:
6f:c4:e3:bb:b6:02:83:da:97:00:ce:f6:e0:20:61:
34:66:2a:5e:67:03:d3:99:fc:30:e5:23:87:ba:02:
50:ac:11:0c:7d:50:b7:09:fd:f9:89:3c:ce:60:31:
df:64:07:5c:48:5e:ca:00:5b:17:dc:17:a7:d1:25:
12:c5:ed:7f:84:c8:a2:74:fa:98:45:2c:69:89:cf:
61:9f:ee:06:00:44:d9:4e:1d:02:d6:55:01:52:3e:
b3:8c:f8:5f:43:2c:9d:83:5b:b7:22:b6:e2:34:9c:
4a:b9:f2:89:d2:84:7b:2a:10:f5:8e:78:d1:72:5f:
20:67:8c:55:95:9d:0a:da:62:f7:be:7b:69:39:03:
66:d8:18:c2:63:4f:28:f7:21:8c:18:69:f1:f0:15:
b5:47:c3:af:5f:44:99:51:ba:fa:25:21:2f:82:a0:
50:7f:48:e5:a5:b9:7e:51:c7:e0:c2:d7:5f:4c:47:
d7:21:79:4e:a2:96:62:48:51:45:82:74:3e:1f:7a:
99:a2:ef:0a:a9:69:95:68:40:aa:7a:a7:f4:9b:7d:
fa:9b:ee:c9:b1:f0:02:57:fa:3d:31:6f:6f:33:bc:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0D:BA:1E:37:48:E2:40:77:17:43:8A:F4:FA:43:81:2F:91:28:BC
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c2:f5:b5:d8:8e:c3:02:0a:a3:71:cf:0b:ad:56:67:1c:4a:
cb:f6:cf:5b:87:50:e2:3c:e9:b1:37:84:18:4b:70:7a:60:9a:
36:30:38:48:a7:2a:1b:99:3e:cb:cc:f3:c5:ee:2a:8e:93:7c:
c2:95:ad:78:b3:3a:e0:e3:74:cd:e7:4b:ad:b3:d3:5e:7c:94:
fd:7a:2c:ac:dd:47:24:fd:f1:2f:22:17:86:eb:9a:86:96:39:
97:be:de:91:19:be:04:43:95:b5:a3:2a:11:72:bf:c5:88:18:
20:eb:3d:11:1f:a5:39:05:ff:80:ff:ab:1e:bd:29:bc:47:15:
a1:64:68:c3:e5:55:e4:3a:cd:52:f2:fd:15:1c:e7:88:82:82:
07:83:cc:dd:d2:e4:75:2f:a5:d3:85:5f:c9:a4:02:83:71:c8:
6d:54:77:8b:8f:c6:f2:b6:11:97:2d:af:89:5c:7e:1d:9c:66:
70:8b:da:a2:35:5b:12:2b:f8:3b:70:7c:20:ae:6c:c9:66:21:
7a:2f:1f:c8:ac:99:c9:d5:56:c0:a7:0e:98:0d:54:65:57:60:
09:5f:08:aa:28:55:e7:fc:ab:0a:b2:20:59:e0:be:2d:63:a6:
7d:8a:53:89:23:f2:9f:6c:7a:f5:1d:f5:35:b8:c8:b5:2b:0a:
45:2b:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:53:40 2025 by rpki-client