Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File: pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier: 5qy/NBi1DuYgiuj28PBvG/NLjR6X57d/jqSv4fTSs5Q=
Subject key identifier: 85:D2:04:27:2F:B3:27:E9:C9:C8:5A:29:6B:C9:1F:0A:76:FE:BD:DC
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial: 0196974EA1A25723C6A6D30FC986FBB3543D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number: 0E35
Signing time: Sat 03 May 2025 18:00:34 +0000
Manifest this update: Sat 03 May 2025 18:00:34 +0000
Manifest next update: Sun 04 May 2025 18:00:34 +0000
Files and hashes: 1: FMd4ncvFc0vMJ63ZqH_KhMZqr00.roa (hash: GAIpznWNN7ttQuk7XL5JgmFjADI10rnA9JaXxJOak4g=)
2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: keE9F22c+E2QzHnkCbz+CmYiP3xeFO9ZWywZoo/HKTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:4e:a1:a2:57:23:c6:a6:d3:0f:c9:86:fb:b3:54:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Validity
Not Before: May 3 18:00:34 2025 GMT
Not After : May 4 18:00:34 2025 GMT
Subject: CN=85d204272fb327e9c9c85a296bc91f0a76febddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:81:a5:58:b0:4b:17:de:86:0a:a4:ff:d9:
dd:50:83:a2:6f:dd:07:9c:5a:0c:ca:ec:ad:24:34:
de:38:e1:c0:87:1a:ca:51:8c:9a:20:1f:77:90:9c:
d8:ee:72:7c:24:65:9b:03:7d:7d:32:0c:19:08:72:
3b:ec:0f:cc:07:1e:4f:d4:07:5f:b4:b1:bd:3e:ea:
2d:e3:0c:81:da:8b:a3:62:68:7d:f7:d3:c0:de:26:
bd:0a:a3:82:24:43:88:b5:49:8a:5f:1b:7a:d7:50:
9f:72:b7:4c:9f:31:11:bc:90:1e:fd:75:ef:28:b2:
f4:b4:7f:09:7a:30:80:32:df:27:39:3d:c8:ca:0a:
92:e7:ee:26:ad:54:0a:aa:d7:4b:75:9b:b7:fc:6b:
7e:57:06:63:84:36:f6:4a:4a:f2:95:d2:93:23:d5:
77:b7:0f:ab:67:db:bf:17:17:8b:13:d8:8f:00:a2:
02:c1:09:0b:c4:d7:cc:ae:26:27:e2:90:44:50:8f:
95:79:18:68:26:64:6c:44:a3:e0:8e:f6:63:8b:81:
93:4d:3c:c0:3b:f6:bd:3f:bd:25:d1:ce:76:f5:28:
a5:83:43:42:40:04:29:2b:5f:b5:0b:4d:bc:7b:2a:
2b:3d:6e:3e:e3:a1:02:2b:35:1f:29:69:01:a9:2b:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D2:04:27:2F:B3:27:E9:C9:C8:5A:29:6B:C9:1F:0A:76:FE:BD:DC
X509v3 Authority Key Identifier:
keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6e:eb:f8:61:c8:f8:0c:fa:54:dc:0f:73:aa:9b:a3:dd:2b:
67:fc:17:83:fc:41:3f:0b:5f:10:9e:32:a5:2b:cb:eb:61:bb:
c6:e0:2f:35:25:cf:32:c8:75:9d:54:4d:0d:e2:a9:a6:80:27:
db:5d:3c:13:a9:37:b8:27:c4:95:32:c5:3b:50:a9:18:3f:fd:
72:f9:df:1c:1c:c4:f7:ad:66:f6:ee:e5:8a:5d:60:36:8c:b5:
de:51:b4:c1:c2:84:3a:cb:e5:f7:b7:b2:a7:b9:ca:00:a9:a6:
15:57:f1:68:f1:21:0f:54:e2:5d:fa:ac:5d:36:8b:54:68:79:
a9:ae:23:0b:3c:2e:c5:06:7e:8d:22:40:de:b5:52:ea:7f:7b:
be:7b:f1:27:ae:3b:51:07:c4:1b:f1:b2:72:39:fd:4e:5c:83:
84:4b:42:ee:08:fb:92:0d:18:08:12:4f:23:da:d0:8f:b7:73:
b3:d9:25:da:89:11:0d:17:31:78:0a:21:d7:5b:c7:d0:e3:59:
01:6e:a2:63:ad:5d:ac:b3:f7:33:de:10:f8:cd:b3:f2:2e:8f:
ad:ec:81:ec:06:2c:2d:6e:49:88:02:1c:71:65:9d:33:b8:ed:
b9:0f:1d:ab:27:d9:bf:3c:87:c7:eb:5b:54:aa:55:c0:44:95:
73:e3:1f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:25:58 2025 by rpki-client