Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
File: pTJy83vudp-iPqZUueOPsCNGjZI.mft (raw, json)
Hash identifier: TLezyh+Xc2t0DHFfIy3f2qac7WXMdNvjsE0jB3Y2NX0=
Subject key identifier: CB:CB:B7:87:03:E6:44:F4:EB:0B:A2:9E:87:40:02:99:36:B1:37:79
Authority key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
Certificate issuer: /CN=a53272f37bee769fa23ea654b9e38fb023468d92
Certificate serial: 019675678B4CF9E6B93B2947D2F9DD6E07D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
Manifest number: C4
Signing time: Sun 27 Apr 2025 04:00:42 +0000
Manifest this update: Sun 27 Apr 2025 04:00:42 +0000
Manifest next update: Mon 28 Apr 2025 04:00:42 +0000
Files and hashes: 1: kl_zb47rnd8AaAP4vBoCuK61hPA.roa (hash: e2T6+pFfv8tCYwWL0QcrJLWjz1NsTR4Qy2fxVQvCN8Q=)
2: pTJy83vudp-iPqZUueOPsCNGjZI.crl (hash: ku3xohfrj+fcAEQtkh0WDA/x++j7BcOIu5QgwsoV4mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:8b:4c:f9:e6:b9:3b:29:47:d2:f9:dd:6e:07:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53272f37bee769fa23ea654b9e38fb023468d92
Validity
Not Before: Apr 27 04:00:42 2025 GMT
Not After : Apr 28 04:00:42 2025 GMT
Subject: CN=cbcbb78703e644f4eb0ba29e8740029936b13779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:e7:d9:e0:01:c7:a4:25:57:58:73:b3:85:
54:c2:37:cd:29:f5:ed:de:36:17:36:f2:e9:92:b7:
b3:bc:98:ef:12:b9:e3:da:de:57:6a:15:7e:33:62:
86:e7:40:80:a7:c8:a3:71:74:d0:6f:95:6e:83:b9:
31:ca:ad:68:96:4a:81:46:80:d2:54:fe:a8:3f:c3:
80:d6:e8:c9:83:af:a5:98:e9:8e:83:80:d4:ab:63:
4b:91:dc:9e:fb:ac:ba:a6:20:b3:bc:20:b9:59:a0:
8b:ce:82:7b:09:9f:12:df:c7:46:1b:6c:db:55:da:
6f:4f:20:e2:cf:e7:ed:ce:8a:e1:83:e1:c0:ac:e0:
1d:f8:44:2d:18:a5:9b:b9:c8:c0:fc:c8:d3:44:86:
45:fd:55:2c:84:a9:0b:2b:1f:6f:27:34:66:6b:da:
34:b6:2f:c2:1e:e7:53:6f:b6:88:c8:ae:04:03:6d:
a3:fa:2e:b6:2b:73:bb:97:01:c0:00:97:db:d9:f4:
0e:4e:39:a2:b4:7e:fd:d1:8e:8e:de:2e:34:52:b8:
a1:47:14:d1:aa:a2:ff:9a:0c:a6:53:5c:60:38:88:
18:8c:5d:b7:b9:e4:47:01:a7:4b:d7:02:35:73:b5:
76:48:88:ce:81:bf:27:4a:31:18:8e:93:e3:ed:c4:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CB:B7:87:03:E6:44:F4:EB:0B:A2:9E:87:40:02:99:36:B1:37:79
X509v3 Authority Key Identifier:
keyid:A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ad:24:1e:a4:f5:ce:ab:35:62:96:b7:18:7b:92:d7:63:3e:
84:e5:f7:f6:65:c5:f3:fb:b5:f5:88:eb:35:a0:05:c7:57:b1:
2e:a0:d2:a5:b9:f6:c5:e3:2a:a8:11:a9:7b:36:db:d4:be:43:
40:8d:fa:6e:f5:cd:bd:71:37:8c:ba:04:9d:c1:0b:55:05:e9:
16:87:20:3a:77:29:62:8c:6e:79:a1:fd:f6:1d:70:df:48:8e:
4e:30:8f:96:2b:c6:d0:9a:6e:84:9d:45:0d:e8:44:80:1e:cb:
17:a1:db:a8:c7:1d:4e:e5:eb:90:be:3a:cb:86:f1:7f:e3:fe:
31:2c:44:06:f2:69:f6:83:16:3a:98:d1:80:80:3e:08:0c:60:
8a:2f:3a:d0:e0:f2:26:e5:af:20:67:86:ff:68:7a:4d:32:80:
b5:41:d9:ed:99:6e:dd:ce:44:20:0c:a7:22:c3:ba:ea:fb:c7:
14:ca:cc:a9:b5:b4:a8:03:fe:c1:4c:97:27:01:a8:df:cd:9f:
e8:58:8a:e7:46:ea:bb:6f:be:3b:db:57:e9:06:d1:05:f9:ba:
32:b9:b6:a7:4c:c0:ac:e1:85:1b:6d:43:05:2b:c8:15:a9:a5:
4c:f8:7c:bb:32:67:4a:2f:57:37:93:4b:3d:27:91:5f:ec:18:
b4:99:68:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:33:09 2025 by rpki-client