Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier: /o43t6lXFXzeuAePYejR0nra2qpP1b4QAmNePyrv+2E=
Subject key identifier: 9F:2C:3A:A7:FC:09:0E:1D:FA:AD:B7:3E:AF:8E:21:A1:D7:F3:2C:FB
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial: 01967EA1714E66B5E36C3B750527CEE0E6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number: 14E8
Signing time: Mon 28 Apr 2025 23:00:31 +0000
Manifest this update: Mon 28 Apr 2025 23:00:31 +0000
Manifest next update: Tue 29 Apr 2025 23:00:31 +0000
Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: +rVxFBE4g/DAyd/Pe5DxSDK3qjWtbpddMtvmkQD+kjs=)
2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:71:4e:66:b5:e3:6c:3b:75:05:27:ce:e0:e6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Validity
Not Before: Apr 28 23:00:31 2025 GMT
Not After : Apr 29 23:00:31 2025 GMT
Subject: CN=9f2c3aa7fc090e1dfaadb73eaf8e21a1d7f32cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:12:7e:50:6b:36:13:f6:40:32:4e:e4:97:
b9:2f:e1:80:49:26:d7:40:1b:70:bd:c0:0f:c6:5c:
e2:c4:33:8b:f1:bb:68:4e:87:82:75:90:0c:05:74:
15:c3:d2:96:16:4e:ce:89:ae:d5:d9:1e:8a:ed:86:
60:53:4c:10:63:a0:3c:f9:7f:a7:fd:c7:88:fa:4e:
b8:a3:22:1b:2d:df:62:6a:b9:c5:60:09:ad:e4:ec:
e8:7f:af:f1:f7:f5:76:47:a1:7a:d4:cf:52:94:67:
e9:f9:77:a0:d5:b8:cb:cf:ff:c4:18:70:65:b0:b1:
d0:4f:1c:e8:f9:cd:98:7b:3e:ae:b4:c3:1f:ab:3f:
c1:04:a4:83:26:98:a2:af:ea:0e:be:fa:4e:e4:8b:
0e:b8:39:25:71:aa:67:c2:53:dd:0a:4e:65:df:74:
16:68:0f:f3:29:87:50:fd:29:3c:f9:6b:8e:af:38:
06:9f:29:d9:6b:4d:83:4b:7d:66:dd:e4:e3:3d:aa:
1e:31:7b:21:1e:21:1c:ad:26:45:9f:1c:5a:85:19:
c9:d8:d7:2d:4f:6a:11:59:62:67:30:41:b4:76:ac:
e4:d4:04:3f:f6:c2:d7:ac:69:e1:68:bc:c4:f5:aa:
27:74:8b:8b:27:05:77:2f:06:08:9f:2e:c5:50:ab:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2C:3A:A7:FC:09:0E:1D:FA:AD:B7:3E:AF:8E:21:A1:D7:F3:2C:FB
X509v3 Authority Key Identifier:
keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:61:0d:1f:fd:e4:c1:47:49:32:e0:d0:3f:3e:a4:5f:50:e2:
9c:c1:46:3c:c6:14:15:7b:da:cd:66:5c:50:b3:5a:bc:a7:32:
89:4f:89:10:94:fe:44:a3:56:15:06:d0:2e:65:01:de:d8:1f:
1f:63:86:9a:eb:7c:19:dd:aa:6f:f0:97:da:a5:6a:eb:b2:1e:
73:70:1e:46:44:5b:ec:c8:90:16:25:77:b0:ad:fa:93:a4:0b:
8d:28:7e:e8:68:f0:54:90:69:41:eb:4d:4a:50:33:77:90:22:
14:aa:08:03:fd:03:9c:da:c5:9f:e2:5a:80:25:82:c1:54:07:
2b:09:1f:61:1e:ad:bf:f2:64:e5:83:8b:a6:9c:78:13:33:22:
98:03:c1:2b:33:5b:7b:84:80:98:c2:bc:f5:2e:59:4b:3c:a7:
11:98:6b:da:60:d0:32:42:25:12:a6:89:da:40:46:77:49:00:
1d:45:ec:2b:a6:ad:de:76:f7:0e:83:6a:ea:e3:96:f7:d1:37:
c9:83:d0:79:da:bb:75:a3:29:1f:25:37:bf:0c:1b:93:18:c2:
99:af:7e:13:61:54:29:6c:75:dd:ed:9b:51:9d:c4:b5:1f:f8:
57:b1:65:14:86:91:bd:88:23:19:3b:d0:dc:c7:3c:2c:5a:13:
04:ef:7b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:20:58 2025 by rpki-client