
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File: pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier: pv8R9LFugiR0zYQM57kSPmkQH7zp2ZSzz9ZQ8SOTk6Q=
Subject key identifier: BA:BE:89:FF:5B:CD:DC:AD:44:60:1D:69:03:AB:C8:34:94:5C:AD:C9
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer: /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial: 019682B50C7E61F0021DC524C5421C904AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 18:00:25 +0000
Manifest this update: Tue 29 Apr 2025 18:00:25 +0000
Manifest next update: Wed 30 Apr 2025 18:00:25 +0000
Files and hashes: 1: _fFHOJoXpOrY_um7x7QB-vvO3bk.roa (hash: p/LewBD8vsUMOUJR34qULDasx72iNLAz4cIqUSFI+5E=)
2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: +c22gGHKQfdBfmmPeVpViL+lcrZ+AmhDX7YO4VGglRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:0c:7e:61:f0:02:1d:c5:24:c5:42:1c:90:4a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Validity
Not Before: Apr 29 18:00:25 2025 GMT
Not After : Apr 30 18:00:25 2025 GMT
Subject: CN=babe89ff5bcddcad44601d6903abc834945cadc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f8:e3:7c:23:ff:5b:38:a0:d5:a8:41:88:2e:
12:47:49:94:1a:29:8c:05:14:cf:63:60:66:e5:39:
66:76:6c:44:d3:07:5a:50:31:56:98:af:3c:33:97:
84:5c:8e:50:ca:e6:5b:13:9c:e7:3d:95:da:94:26:
a0:e6:0c:9d:af:86:ab:0f:4a:48:01:25:52:e3:3a:
8c:86:42:13:98:31:55:a3:51:af:5a:de:1f:32:02:
35:ad:9d:b1:7a:c5:ec:a7:5f:ac:35:07:78:c1:63:
db:99:93:31:70:7f:9d:bb:e1:76:1b:ae:b6:70:7e:
1f:f3:1f:51:ce:7d:e2:7a:c1:15:9e:70:a2:8d:a7:
b3:31:f2:3f:c9:3b:54:f8:2c:0f:b6:d2:4a:c3:86:
3a:d5:c8:10:b9:c3:2a:bb:31:aa:7c:07:b9:bb:ef:
f2:8c:9f:51:ba:73:fd:47:58:be:8d:a3:f3:e4:9b:
f4:ca:98:e7:a6:63:73:fa:3b:67:b2:d1:67:fe:11:
4d:a0:d4:1c:e8:8e:55:8d:b4:68:dc:66:45:64:64:
af:f3:7d:02:d1:fe:02:40:49:1b:b5:50:e5:3b:70:
ad:3b:0f:66:b6:ef:ed:0e:1f:74:7c:f5:eb:37:29:
8c:39:52:1c:9a:9c:f0:89:ec:8a:89:d9:bd:d3:d4:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BE:89:FF:5B:CD:DC:AD:44:60:1D:69:03:AB:C8:34:94:5C:AD:C9
X509v3 Authority Key Identifier:
keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:88:39:9e:ba:47:c5:63:a5:3d:02:6a:39:89:3b:ed:ef:f0:
7d:64:07:88:03:59:c9:0c:5b:39:af:7f:ef:06:8b:58:f1:c2:
b5:d4:cb:9a:62:20:c9:93:f7:42:e2:e4:c4:a4:97:fb:72:93:
69:f7:83:87:3d:17:e6:3e:09:fb:8f:aa:7a:5d:fc:a4:d8:ca:
7e:50:93:49:21:65:0a:f5:a2:01:6f:cf:39:0e:15:dc:99:93:
7e:73:d4:e9:33:b7:2a:c1:d8:55:ab:f2:34:fb:64:d3:13:4b:
c2:2b:96:40:1e:60:ae:c9:43:dc:5c:f6:1d:0e:3e:c6:4c:62:
b1:f9:e8:56:b9:99:71:5c:e8:e9:7b:63:06:69:f8:26:48:67:
a5:1b:54:68:fc:a9:34:d1:b4:97:20:f9:ea:77:3e:4b:bb:44:
8b:38:8a:75:34:dd:06:21:6d:41:e6:c5:0b:3d:6b:85:a4:30:
ff:af:8b:ab:8a:28:f1:f3:b0:99:84:df:27:5e:5f:5e:e7:53:
b5:3b:66:4a:74:0d:92:fb:95:b0:22:63:42:9d:30:9f:f7:ca:
e4:c6:bf:3d:07:dd:cc:53:b2:7e:af:e2:0e:b0:48:12:e7:1b:
86:43:72:a7:63:75:b3:f4:d1:df:cf:99:cb:e3:59:51:37:e7:
09:92:63:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:53:23 2025 by rpki-client