Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
File: pvh89KFbnngiRVs6qK8LXtOimfc.mft (raw, json)
Hash identifier: 3IDL85dO9D/qByRY6edNHXhXgVH5uZWVUWFN9zGnx6g=
Subject key identifier: 1C:B5:88:66:AE:05:52:53:71:8E:2F:50:42:A1:22:79:19:CA:A7:6A
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Certificate issuer: /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial: 019682B54CE0773381E3A3A930FA1900929B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
Manifest number: 151C
Signing time: Tue 29 Apr 2025 18:00:41 +0000
Manifest this update: Tue 29 Apr 2025 18:00:41 +0000
Manifest next update: Wed 30 Apr 2025 18:00:41 +0000
Files and hashes: 1: A0AYtzxUnj18_WVT-ZtPo3VQOok.roa (hash: Ky9GG0Y6/3CRG+EZa6gdZtX+mEutz5bg1CsKFSgBHBU=)
2: YoFLZelk0KvVc2c4StbzyHcrvm0.roa (hash: 1/qU4jnzCv1Ym4GrpqvgYqQAdtCVCWo1utnZCleM9zs=)
3: pvh89KFbnngiRVs6qK8LXtOimfc.crl (hash: KLjGtp0Oknpp3ljIgHSuBLv3MrgMTdoifExjuvSsIJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:4c:e0:77:33:81:e3:a3:a9:30:fa:19:00:92:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Validity
Not Before: Apr 29 18:00:41 2025 GMT
Not After : Apr 30 18:00:41 2025 GMT
Subject: CN=1cb58866ae055253718e2f5042a1227919caa76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:bf:13:cb:92:6f:87:6b:bf:f3:53:5f:13:
59:3a:07:e4:eb:7f:47:98:f2:0d:a2:42:9a:3c:75:
f3:26:e3:89:08:2e:49:32:fc:55:10:2f:9f:4b:5d:
65:1a:b3:6d:9b:50:49:0d:53:6f:5e:10:30:7c:61:
90:91:ab:97:28:b9:6d:98:f4:7c:85:2a:46:0d:48:
b8:8b:cf:b3:e1:bb:4f:3d:e3:ad:99:87:39:f4:c2:
e6:82:51:68:4f:b2:2a:b0:45:76:0d:d0:db:fa:fe:
bc:ba:8b:5a:16:65:07:d4:36:38:9b:91:45:5c:32:
07:38:f6:52:b3:36:9b:14:2e:e4:f9:65:82:f4:4c:
cc:26:02:31:b0:ec:c3:71:42:8a:81:8b:8a:03:fb:
26:f1:99:a0:09:86:0e:b9:3b:a9:7f:08:77:23:40:
3f:88:b4:4e:c2:0c:ed:e8:1d:f9:7f:94:85:df:6b:
03:ce:9d:e3:62:c9:49:d2:39:75:0d:6f:26:48:2b:
8f:24:19:4b:60:32:a0:84:cf:fe:56:f1:ef:c3:bd:
2c:5a:ce:93:4a:8c:83:29:fe:91:1a:87:53:de:9a:
99:0a:36:cd:eb:d7:6c:df:1f:cf:9a:37:87:1b:b6:
df:80:79:c6:67:3e:e3:33:83:cc:83:25:95:64:69:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B5:88:66:AE:05:52:53:71:8E:2F:50:42:A1:22:79:19:CA:A7:6A
X509v3 Authority Key Identifier:
keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:73:66:e8:23:59:8d:12:38:0f:af:1b:31:ae:b5:13:ca:5f:
07:7d:64:97:9a:0c:c5:4d:b9:ef:89:d8:88:64:b9:80:3a:e3:
92:0a:d1:c2:c3:39:6f:9a:71:bc:0b:96:33:3c:4e:d9:7e:ed:
fb:49:d2:94:1c:96:42:88:6f:f2:31:cb:15:af:e3:d5:d5:7c:
43:9a:88:23:d2:d8:e3:38:8a:c8:5c:41:23:a8:2a:e7:ca:e7:
58:8a:94:5d:77:01:80:78:34:30:82:ef:aa:9e:ba:83:62:eb:
4e:91:f6:05:54:36:03:6e:91:1b:49:ba:c7:2f:10:71:21:1f:
82:4f:97:db:e4:5d:e1:18:e2:b2:ee:74:07:17:0b:f3:fa:8f:
68:ab:91:2b:2d:58:ba:30:11:03:0b:21:42:49:73:54:37:28:
4c:97:a4:9c:64:fe:5c:f3:86:a8:50:99:7f:5c:7c:a7:04:53:
25:2f:a5:3e:77:e4:c1:e6:0c:fe:d3:5c:5a:57:cd:ad:49:6b:
14:7f:7a:c0:6f:7e:07:ac:0c:47:73:fb:09:a8:a6:9d:f9:3c:
5a:0d:d7:0d:b1:38:1a:df:1e:45:b9:a2:d6:74:ef:81:1d:c1:
93:46:98:10:72:a9:ca:02:fa:f7:e0:15:2c:8c:8f:8c:be:d1:
88:a9:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:55:13 2025 by rpki-client