Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
File: pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json)
Hash identifier: bF3WQYNMMqQUJodZznV2BRfN0Vo/pLeGE0lvn9Rl0+o=
Subject key identifier: 63:F4:1E:77:FA:C2:3B:C2:58:59:D9:6C:48:FE:55:C8:FA:7F:43:4A
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Certificate issuer: /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial: 0196759E5C2F704BEF4A1260F8FEFFD36D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 05:00:34 +0000
Manifest this update: Sun 27 Apr 2025 05:00:34 +0000
Manifest next update: Mon 28 Apr 2025 05:00:34 +0000
Files and hashes: 1: 3slyfZXxVcWO-rhXLBn1z60ShoQ.roa (hash: aD+13qB77l1eWjcaYEDaoeBPF19MIy6v6JQPzBT88zc=)
2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: rwOi9l36LrQbmyfNdGQA0FBA8YuYRvr+n59VoalRtwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:5c:2f:70:4b:ef:4a:12:60:f8:fe:ff:d3:6d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Validity
Not Before: Apr 27 05:00:34 2025 GMT
Not After : Apr 28 05:00:34 2025 GMT
Subject: CN=63f41e77fac23bc25859d96c48fe55c8fa7f434a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:a9:12:31:be:7e:1f:0b:1b:ec:6d:f8:56:
99:24:ad:19:19:57:3f:73:c8:79:ab:f9:b4:dc:38:
be:16:71:4f:0a:51:19:d1:10:48:1f:df:66:b5:47:
94:78:e6:01:e8:84:68:b8:ca:bd:af:97:61:d5:ab:
74:ec:49:6a:4a:f2:4c:f2:64:70:21:f5:81:0d:df:
c0:62:de:52:1b:07:3e:bf:89:20:0b:6b:aa:7a:d4:
7f:d6:bd:09:c4:5b:a7:de:9a:bd:bf:fa:08:36:0c:
cc:3a:95:07:3d:b6:b3:63:fb:cc:1f:89:85:33:87:
29:13:5c:65:53:a0:5b:08:5b:a5:04:dc:f3:db:3c:
5f:f1:98:2d:44:27:20:4e:6c:e2:ce:b8:c6:e8:da:
14:4a:6e:d8:39:71:5b:2f:2a:9c:c0:d3:2e:ae:cc:
6a:64:e5:89:be:72:b3:87:5d:7f:c6:82:68:73:b1:
9a:d2:5a:41:f3:7f:60:9b:d1:95:49:90:c8:98:c9:
3f:51:af:cf:7b:de:8d:ad:a1:f3:9c:96:64:3e:66:
41:6f:b5:af:14:1c:06:69:eb:70:5d:17:c1:7d:32:
e4:94:29:cf:85:dc:74:aa:61:a3:1a:11:4d:42:58:
01:84:47:12:4b:0b:4b:82:e9:7c:04:e5:e2:df:92:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F4:1E:77:FA:C2:3B:C2:58:59:D9:6C:48:FE:55:C8:FA:7F:43:4A
X509v3 Authority Key Identifier:
keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:90:20:0e:d1:c5:1b:88:8e:ee:f7:90:db:31:68:4d:23:fa:
bf:0a:3d:eb:74:dd:ba:e9:c7:5b:8d:2d:1e:9a:53:aa:45:50:
37:db:e8:3d:14:f3:8f:a7:a9:6d:91:99:85:eb:cc:db:a5:5d:
2b:96:30:d0:c9:02:8e:5a:6e:e2:ce:68:5b:9c:27:94:98:28:
94:a5:36:66:01:bc:6a:fc:d2:26:bc:a2:fd:1c:9f:8b:81:57:
62:bc:34:87:bd:47:1c:c3:d9:18:a6:dd:f0:d6:79:ee:e0:8a:
c4:c7:eb:f9:01:91:82:cc:c9:32:40:c7:65:0f:57:7c:6a:10:
b5:8b:69:ba:9d:8b:44:0e:4b:f3:8a:35:d9:58:e9:21:bd:66:
5c:15:0a:6e:47:3d:dd:bb:5d:14:34:67:51:ac:63:73:a2:c3:
aa:0a:57:d1:82:81:12:93:a7:da:3a:86:04:3a:83:cf:6d:fe:
7f:5f:6d:5f:fc:c1:46:1b:b0:07:77:cb:dd:a5:59:85:75:69:
38:06:7b:ab:cd:cf:39:c5:ae:86:9c:ec:cf:b7:98:6d:52:11:
5e:62:b3:02:20:bd:02:fd:25:c1:b5:54:de:e2:8e:14:43:9b:
74:5e:ac:b8:eb:30:3f:79:92:7b:a6:59:ac:8a:0c:19:d4:46:
49:4c:19:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:58:11 2025 by rpki-client