Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json)
Hash identifier: cKH5DxatHNwWpBckRhSWbcapUSzGPpJFWPXEzSbb/KM=
Subject key identifier: 79:FD:2B:C2:6B:DE:8D:0F:E2:98:E2:5D:55:74:EE:D5:18:B6:CB:A6
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial: 0196857F6CD098E59F21B3CF638246318E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
Manifest number: 0D94
Signing time: Wed 30 Apr 2025 07:00:42 +0000
Manifest this update: Wed 30 Apr 2025 07:00:42 +0000
Manifest next update: Thu 01 May 2025 07:00:42 +0000
Files and hashes: 1: PUpMBlY3y3LiEyvtN3mwZr7fC6o.roa (hash: 83wzwEaj6Lu4SVxQ13wsJpRArhNJgziukBIbApzP3jM=)
2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: kee4BVvmySr0xbolaDc9n3G4ez7uduIJ0+W9Kf53//Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:6c:d0:98:e5:9f:21:b3:cf:63:82:46:31:8e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Validity
Not Before: Apr 30 07:00:42 2025 GMT
Not After : May 1 07:00:42 2025 GMT
Subject: CN=79fd2bc26bde8d0fe298e25d5574eed518b6cba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:50:15:9f:95:ae:cc:2f:25:a2:d0:09:d4:
2e:40:ee:09:86:f0:24:57:c1:18:07:3e:87:d2:85:
6f:25:19:1c:be:9c:2e:89:9b:b7:f7:7c:a1:88:57:
5c:59:41:0f:b1:ff:c3:f1:f8:81:46:d3:c5:c4:25:
b4:d6:a2:9b:10:82:79:ef:fc:fa:2c:28:fa:a8:10:
34:af:d3:c5:ba:71:1f:b9:3c:22:38:10:0f:7b:4e:
84:c2:61:3b:eb:bb:c7:80:96:f6:d6:80:26:0d:b8:
bc:44:68:a4:60:f7:10:ea:b1:43:fa:67:32:f5:87:
bc:13:82:0a:ef:6c:04:d5:0b:19:be:91:21:69:f6:
38:dc:81:69:02:c4:d7:ba:4d:59:77:25:7c:34:96:
94:66:42:0f:fe:0e:d9:de:74:72:bf:14:14:3b:72:
7f:4a:73:9b:cc:55:9f:b7:3a:49:6c:0a:92:cd:77:
0b:14:16:ac:5d:18:81:ad:f3:7d:01:24:cd:03:b0:
2a:99:ef:22:58:c4:c6:63:0d:78:91:8f:f5:80:67:
6a:04:72:48:8d:ac:e0:aa:54:9b:98:9b:06:6b:16:
d1:0f:4c:05:65:55:0e:6e:d2:53:2e:b9:2f:b5:90:
8d:fb:1f:12:c4:27:a2:4a:15:77:7d:3f:03:ce:4f:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FD:2B:C2:6B:DE:8D:0F:E2:98:E2:5D:55:74:EE:D5:18:B6:CB:A6
X509v3 Authority Key Identifier:
keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:73:12:ed:9b:43:44:0a:22:6d:be:2e:c7:85:b5:34:b3:c2:
b4:33:7e:49:e9:e9:61:e0:3d:bc:5b:c5:0c:07:0a:d5:aa:4e:
73:ce:bf:09:dc:bc:01:35:71:17:d7:15:2a:23:52:6e:06:f8:
63:d3:32:09:7d:68:74:b9:10:ad:59:08:01:65:6a:6b:94:f5:
d7:a2:2f:27:a5:e9:58:58:7e:4a:87:a3:42:8b:18:87:33:43:
d0:19:32:c6:da:3f:87:a0:d2:89:fb:b7:10:02:c4:ee:14:f3:
fb:03:81:dd:c3:3b:b5:cc:c0:f5:87:3c:e6:cb:9d:35:5c:4a:
8e:23:a6:c7:2a:db:05:ae:16:97:d1:70:25:30:1c:d7:ca:7c:
9b:7b:0c:7e:54:bf:04:cf:aa:19:94:13:1c:12:a5:bb:d1:68:
e2:74:4e:df:f7:c8:36:a4:a5:ef:42:b7:4e:fe:25:34:4d:9e:
65:33:50:67:44:46:da:e9:17:11:ac:46:07:24:11:c5:ab:31:
43:96:58:64:e1:13:8d:89:c9:d8:bd:f1:a1:a4:6c:1d:ca:52:
b9:d1:3e:86:d7:8d:3f:c1:b6:3c:c9:92:0d:82:b6:7e:a1:72:
92:c1:6e:e6:7c:dd:da:eb:83:1b:47:80:69:df:7b:46:56:32:
63:26:12:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:36:52 2025 by rpki-client