Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
File: pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json)
Hash identifier: RZ/05FaKOpG61pdGnk06FHwLIIZfFehTmAYTb7Pi8gA=
Subject key identifier: A5:3D:F0:7F:A7:D7:14:0F:DB:D4:9A:B0:D6:82:5F:56:15:3C:C6:DE
Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672
Certificate serial: 0196839195528A6134CD91CA2F2A20427902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 22:01:18 +0000
Manifest this update: Tue 29 Apr 2025 22:01:18 +0000
Manifest next update: Wed 30 Apr 2025 22:01:18 +0000
Files and hashes: 1: GKayJjEpupDXezS7bWkDTRh1Jmw.roa (hash: eS8ptq1DKXKa+SvWnQjPvtWlOO+ME6pmCZKUb+C3VCo=)
2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: 4rv9bxHLj+OV+5oDdU0ig0FVDYnkfC6Gg+MnD5UYVHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:95:52:8a:61:34:cd:91:ca:2f:2a:20:42:79:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672
Validity
Not Before: Apr 29 22:01:18 2025 GMT
Not After : Apr 30 22:01:18 2025 GMT
Subject: CN=a53df07fa7d7140fdbd49ab0d6825f56153cc6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:1a:2a:35:1a:d8:28:12:f8:0e:1e:48:93:
24:b9:98:f2:05:e9:59:3c:dc:46:43:6f:06:57:47:
a4:b3:06:60:c5:fb:ad:34:f2:87:35:46:07:8d:62:
85:5d:9e:67:1b:1a:96:d0:7d:59:34:24:8d:02:cf:
a9:53:ab:c3:fd:7e:1d:e2:28:76:2e:e4:6b:17:69:
3c:f5:77:79:c3:64:6e:04:ca:3b:8b:01:7b:35:cd:
5f:d5:28:88:53:eb:30:7a:51:7b:6d:22:36:cf:3b:
ee:b6:79:fc:e9:67:46:c0:65:4f:97:3d:ef:67:cd:
f5:4e:db:0d:95:8d:60:ad:97:7d:0e:53:92:fe:6e:
e7:55:66:6c:eb:69:99:5e:a9:96:fb:b5:43:de:5d:
68:8d:c5:05:6d:6f:ce:ce:51:8d:30:1f:41:01:ed:
ed:0f:2d:ed:d8:ee:16:4a:2d:7c:89:97:12:0a:31:
69:4b:0f:9c:f3:2f:b4:39:25:28:94:ad:ab:e6:d4:
91:fb:cf:b4:ce:27:83:f8:6f:a0:24:4d:4a:24:51:
3a:1e:54:64:c1:5e:e7:c2:0c:e2:8a:16:05:66:a9:
c4:a6:5c:e8:29:a1:82:84:76:6f:e2:9e:62:22:d6:
8b:34:51:d6:9a:cd:64:65:3b:08:52:d3:bd:8c:73:
38:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3D:F0:7F:A7:D7:14:0F:DB:D4:9A:B0:D6:82:5F:56:15:3C:C6:DE
X509v3 Authority Key Identifier:
keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1a:06:82:ee:30:6d:8f:06:75:37:3a:a4:7d:70:a1:2f:d1:
ae:01:b1:24:85:f5:36:50:d0:51:75:0f:7f:ab:f3:7f:81:4e:
e5:ee:5f:7b:c1:93:37:da:31:37:1b:d9:e1:32:8c:33:34:7e:
b9:65:f1:3c:12:7a:23:1c:53:78:32:90:a4:0b:5d:7f:35:bf:
5a:e1:43:0e:af:0d:ed:e0:2c:8c:14:b8:cc:92:35:0a:44:d5:
c6:6f:71:16:27:a6:ca:5c:04:74:c9:8d:27:0e:b0:8d:dc:e6:
78:b5:f8:41:1d:a5:c2:2c:8b:d7:47:70:9e:0b:74:57:05:10:
5d:63:f1:ac:c2:67:c1:02:89:67:21:ba:5d:03:73:11:c3:d8:
9c:b0:ec:e6:0c:17:78:10:44:12:a1:76:68:1a:51:be:6b:6d:
6e:56:89:5c:0d:7a:58:93:8f:67:68:5f:e2:56:2e:8c:48:1b:
a0:3a:e0:7d:3e:a7:8a:b0:a9:4e:47:af:67:bc:61:8d:07:82:
9c:e1:41:c6:8d:26:c9:72:60:d9:3a:8a:95:66:ba:59:3c:7b:
99:f8:cf:5f:5c:d8:7a:e4:cf:d9:80:8b:8b:aa:32:d4:ab:5b:
27:bb:39:2d:bf:91:73:18:81:61:0a:71:0c:12:4e:45:b1:13:
cb:a0:25:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:12:59 2025 by rpki-client