Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
File: pZDvI7RWydsg0wdCkysBf8VyTlY.mft (raw, json)
Hash identifier: J2hHYjrMHrA8zcP2EuK1kS3ARj/przNq5YYeJInYYQw=
Subject key identifier: 43:EB:DF:97:96:3F:BD:82:C0:86:4C:FB:43:2C:B8:F9:42:E6:3F:10
Authority key identifier: A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
Certificate issuer: /CN=a590ef23b456c9db20d30742932b017fc5724e56
Certificate serial: 01967831534768F12935E14655B24B3F3221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
Manifest number: 0CC5
Signing time: Sun 27 Apr 2025 17:00:20 +0000
Manifest this update: Sun 27 Apr 2025 17:00:20 +0000
Manifest next update: Mon 28 Apr 2025 17:00:20 +0000
Files and hashes: 1: pZDvI7RWydsg0wdCkysBf8VyTlY.crl (hash: 7n91DksPNh1+M/ILrJIEKX0LvujaDsPoC+LVgkx+zpI=)
2: qkuFYPmd6yVSJeAUkr6iVxoW6uI.roa (hash: 6R5f5Psj0EmX1v5BkourUurygRB3rOnwEBUagdishKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:53:47:68:f1:29:35:e1:46:55:b2:4b:3f:32:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590ef23b456c9db20d30742932b017fc5724e56
Validity
Not Before: Apr 27 17:00:20 2025 GMT
Not After : Apr 28 17:00:20 2025 GMT
Subject: CN=43ebdf97963fbd82c0864cfb432cb8f942e63f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:ed:1b:d9:73:8d:29:2d:d3:8e:83:84:b4:
f2:a8:a0:2b:cb:53:38:25:80:06:b7:ab:e7:f3:30:
dc:8b:3a:fe:cc:63:23:d7:11:dd:e5:0d:f2:55:3c:
7b:46:92:46:f9:ac:4b:ef:53:cd:3b:14:32:45:e2:
f8:7d:e7:cd:d3:39:e4:69:37:37:d7:d4:74:47:7f:
26:c7:c3:30:8a:e2:ee:b7:71:ed:ca:f1:08:ac:2f:
1c:8b:b2:98:7f:33:30:b9:b7:35:d0:3a:ce:75:34:
9e:7c:80:59:e1:ed:9f:15:4b:f5:1a:26:c8:dc:b5:
c7:f7:5b:38:9a:dd:a9:95:43:16:29:0d:fa:00:b1:
c4:04:39:a6:fc:92:fd:35:14:92:73:7e:71:40:00:
10:47:12:e3:71:20:f3:7b:d9:14:9d:38:f5:8d:55:
d6:57:f6:4a:ef:16:3b:7b:c9:a1:0c:be:49:0a:75:
5a:7b:d4:e9:ed:6e:41:de:86:ed:73:48:76:33:3d:
51:95:5d:0f:32:04:18:19:84:ab:35:d7:e7:e2:43:
66:06:30:1d:fb:98:bd:45:d0:de:cc:fe:15:bc:02:
d2:84:72:d1:0e:de:27:20:79:f2:5c:e8:bd:68:2f:
70:b7:88:8f:4e:6a:aa:e9:dd:cb:b0:b0:ea:a1:58:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EB:DF:97:96:3F:BD:82:C0:86:4C:FB:43:2C:B8:F9:42:E6:3F:10
X509v3 Authority Key Identifier:
keyid:A5:90:EF:23:B4:56:C9:DB:20:D3:07:42:93:2B:01:7F:C5:72:4E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZDvI7RWydsg0wdCkysBf8VyTlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3185c4-d724-435d-8277-152d204ebfa3/1/pZDvI7RWydsg0wdCkysBf8VyTlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ac:db:80:a5:4b:45:85:e4:7e:7f:cd:2d:8e:ca:1f:7b:b5:
01:b5:12:3a:cb:36:c5:90:0e:5b:66:c7:ba:d1:2d:ac:c2:4d:
bc:3b:64:2f:45:d7:48:f8:6d:60:90:73:56:77:74:01:d8:0b:
10:4c:f7:f6:e9:5a:ef:45:ab:3b:a3:33:27:12:63:8e:fc:ce:
ff:ee:7f:8b:36:60:88:92:9f:0d:ac:be:07:b6:4a:a9:84:c6:
cb:c8:42:75:80:4f:19:9c:f3:bd:c7:21:07:b6:2b:25:d0:72:
b5:7a:77:c1:45:a3:e4:72:cc:69:84:00:e9:db:db:cf:8b:64:
03:6f:55:64:a6:a3:f6:14:84:04:a7:80:7a:38:66:56:41:b8:
85:57:f0:e3:c8:e3:05:23:63:1e:9e:a8:76:62:f6:b4:18:e0:
23:6f:ea:35:68:dd:94:76:b2:65:12:16:58:0b:f1:10:13:d3:
82:cc:4f:cf:95:ac:00:ee:9c:42:e1:be:d6:35:e6:c8:39:89:
2a:ca:83:ff:2b:a5:da:06:21:d4:b4:75:9a:35:09:88:d2:75:
2d:4b:cf:d9:03:d8:b3:36:ef:cd:81:70:52:3a:0c:1c:d7:b6:
e1:cd:72:da:f0:47:15:92:2d:08:fc:a3:cc:31:2d:ba:73:26:
09:ff:27:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:46:17 2025 by rpki-client