Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.mft (raw, json)
Hash identifier: 55bgSNJMLe18SrqgNYizhmur/mYTbpMYrlW2ECNivFY=
Subject key identifier: 1F:C2:C4:D2:DC:BD:5D:C9:2E:82:AC:C2:71:2C:5B:E0:67:19:30:1F
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 01968435AB90D4A6611DC25BB401630AE6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 01:00:31 +0000
Manifest this update: Wed 30 Apr 2025 01:00:31 +0000
Manifest next update: Thu 01 May 2025 01:00:31 +0000
Files and hashes: 1: V4fEP3mKAgRZldstTINNuk_J6BQ.roa (hash: 8GFsD/JurXta37HamqakliSVJtpBqW+/i/sWeLhcYfE=)
2: pENNZpHm4nwoLKo3r_kPK8VL8eM.crl (hash: H3sAjLjBMouENKh+U86Gb9lYubSXis5Go9QPKl1P1Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:35:ab:90:d4:a6:61:1d:c2:5b:b4:01:63:0a:e6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Apr 30 01:00:31 2025 GMT
Not After : May 1 01:00:31 2025 GMT
Subject: CN=1fc2c4d2dcbd5dc92e82acc2712c5be06719301f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:34:d4:29:81:1a:cc:8a:53:26:31:01:e2:
f3:7d:be:44:60:9e:d7:c3:43:3c:0a:89:6a:ea:19:
c0:71:00:f5:14:8f:52:b1:66:8a:17:1b:4f:bc:09:
98:eb:4a:95:97:c2:3e:96:d9:29:ce:1c:71:09:d0:
51:90:89:94:68:c8:a0:29:de:82:b7:b5:5c:30:bf:
32:68:4f:d5:77:ec:6e:2a:dc:22:be:dd:cc:39:46:
ba:d4:4f:11:cb:4e:fc:55:eb:c9:8c:2c:09:fe:58:
fc:20:a8:58:b9:33:38:fa:32:af:85:18:71:91:a9:
80:24:2f:a1:91:c0:c8:f7:f3:1b:1c:3d:52:ca:bb:
15:42:94:b2:bd:c1:5c:4b:7c:f2:a3:34:e9:9a:95:
bb:56:d4:2a:15:02:6c:c2:03:06:ae:5e:55:40:1a:
cb:fc:b8:06:6e:24:ce:7b:d0:8d:5c:d5:3b:77:2c:
bb:41:e7:f1:40:04:37:bc:fe:66:08:de:52:a9:59:
75:e8:fc:4f:af:4a:2d:7f:5b:8a:f2:d5:77:02:33:
d6:bd:b8:da:ed:b9:6c:e7:22:bb:09:d3:a4:3f:92:
31:13:5d:fb:9d:6e:07:52:2a:dc:98:58:33:84:74:
15:18:ec:02:02:65:3f:36:11:6a:73:30:3d:64:c1:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C2:C4:D2:DC:BD:5D:C9:2E:82:AC:C2:71:2C:5B:E0:67:19:30:1F
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e8:40:95:7d:30:d2:90:1c:71:0a:95:77:32:40:1c:eb:f9:
b9:b1:c0:4a:05:66:40:17:06:4c:52:2e:7d:a3:c2:33:aa:89:
a7:08:e6:bb:8e:a8:57:85:95:40:68:03:cd:51:24:6c:bc:08:
e5:d3:38:35:2b:ac:c5:05:ed:c0:c9:bd:8a:73:3e:f9:10:ba:
25:90:48:6b:86:7b:66:b6:2e:eb:69:68:75:74:d0:ea:f6:a8:
5f:ee:5e:fb:e2:f8:ab:96:03:86:0f:08:62:c8:c3:d3:94:19:
40:f7:62:db:fe:6a:cb:99:a2:f7:a9:73:c6:f7:f2:a3:00:de:
61:5b:3d:8e:bb:2d:50:29:16:e3:97:99:26:6c:24:89:8a:67:
d1:32:aa:59:af:5e:02:50:44:94:9f:21:a3:b1:ba:b6:c8:10:
43:58:d4:59:78:09:81:3a:58:e2:12:48:e7:ae:30:dc:e2:75:
95:fc:45:00:75:8e:aa:08:13:14:72:16:63:05:a3:d1:a9:a7:
71:ae:6e:b1:37:2e:6e:2a:10:ad:b8:c1:59:92:26:8e:b4:93:
55:61:22:c1:e8:f0:5a:8e:40:62:f2:53:af:33:87:9c:77:34:
ee:4b:c3:8d:22:80:23:08:48:97:97:b5:f2:da:b2:2e:42:cd:
45:b4:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:18:42 2025 by rpki-client