Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: rqzeZQSrTOXe8JtAoAM2VesIP92HBPC7pNahttll190=
Subject key identifier: AF:98:25:71:54:68:2E:AF:FC:46:5C:96:C1:19:79:D6:BC:E4:44:B4
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 01967FB4099C3EF4599B2FCD778131729F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 0B61
Signing time: Tue 29 Apr 2025 04:00:27 +0000
Manifest this update: Tue 29 Apr 2025 04:00:27 +0000
Manifest next update: Wed 30 Apr 2025 04:00:27 +0000
Files and hashes: 1: 4jSg2ODlu3CFd6jIl7kHiP-BX_4.roa (hash: xgMqCXuymiqYkTjb0uA/T+UuFonELwxqYTVdoLkLInU=)
2: 9NbAaWTN6CWxeEqYQjGZLmOhbQQ.roa (hash: h5XO3HcLJOMuvQP0KQj1fHH4O24IzSVqKiTXw+BaXeo=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: t/04mXBry0d3qMkXaKmqcbJ3gOR8ro495fdxyY47WuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:09:9c:3e:f4:59:9b:2f:cd:77:81:31:72:9f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Apr 29 04:00:27 2025 GMT
Not After : Apr 30 04:00:27 2025 GMT
Subject: CN=af98257154682eaffc465c96c11979d6bce444b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:57:a5:3a:3c:c9:fb:79:23:e9:f5:88:0a:
3b:ce:81:44:a9:75:74:c2:4b:1c:48:f3:bc:39:ad:
d5:14:8c:95:77:09:76:66:3e:a2:e3:f0:e8:73:ec:
32:44:c5:45:05:90:ec:49:84:dc:18:3f:5a:60:15:
8e:42:8d:58:31:49:78:b4:bb:c2:61:9c:d3:b4:6a:
2e:70:00:8c:4b:31:18:5d:95:9d:9d:cc:28:1f:97:
53:57:7b:bb:38:55:af:e0:51:f1:9c:4f:5d:12:fc:
23:56:2b:a1:8c:57:93:ac:28:a1:a5:2d:db:f9:0b:
e5:2a:08:29:1b:11:62:d7:1c:bc:dc:16:bd:c8:78:
40:f7:9b:02:a7:78:3f:6f:53:8d:49:2f:3f:c7:93:
f9:0c:e7:49:60:68:c3:bd:9f:a3:31:bc:79:40:ef:
a7:ae:3c:37:92:53:0e:67:27:0d:44:5c:32:69:52:
22:d3:a2:f0:7f:49:52:10:03:67:12:3e:c2:d3:2f:
cc:d3:dc:b9:58:1f:2f:9b:d2:0f:ee:9b:02:c1:fc:
f9:15:4f:c0:bd:2e:ea:31:15:0e:59:35:ba:28:6b:
59:66:3f:d5:49:14:a8:0e:6c:f8:67:11:17:40:b4:
4d:28:df:84:fc:ee:08:dc:7c:d8:27:98:d2:a6:79:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:98:25:71:54:68:2E:AF:FC:46:5C:96:C1:19:79:D6:BC:E4:44:B4
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e3:1d:7e:6c:0e:10:c4:74:f9:b7:c7:a0:a0:5a:7e:ce:8c:
1c:d1:70:bc:fa:bb:a7:b6:01:4d:46:81:5c:c6:3b:60:b1:7a:
02:5f:bd:39:a9:a8:ee:c4:8a:89:30:ea:c9:9a:7b:5d:a0:42:
6e:8c:b9:31:b4:89:bf:16:46:91:67:52:fa:b4:c5:4f:c6:0b:
f5:5f:d2:81:58:4e:9f:e5:f7:03:34:ad:d6:3a:0d:a9:2b:64:
af:8c:96:09:3e:c3:f0:15:7f:d8:22:4c:d2:ee:94:cd:3b:24:
55:cd:11:77:fe:de:ce:9e:55:e7:ab:e7:3d:0e:02:4a:11:c5:
5d:b1:26:e5:6f:1f:2a:12:fd:ea:c9:09:85:98:87:8d:49:5a:
42:00:4b:a8:a0:28:8a:1f:e3:a9:7b:0d:0c:4a:cd:32:51:1a:
60:05:31:a7:65:95:bc:93:41:96:a8:0d:6c:2c:4a:f9:a9:bd:
9c:21:ad:5e:99:18:78:74:da:01:47:bd:21:37:57:29:4b:83:
ed:a1:da:94:5b:27:a0:86:a9:f1:a8:c7:bd:1d:0a:e5:a2:16:
7a:cb:f9:5f:9f:65:61:ab:e1:ba:e2:42:c1:e5:90:70:16:1b:
2f:a4:22:bb:e5:6a:90:56:fb:8c:c8:a1:11:96:da:2b:a2:4a:
cc:1b:08:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:25:07 2025 by rpki-client