Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: j9QSHPJ7bNsmC75xdla5gtoEi9NTodVlvH9SuFB+GI0=
Subject key identifier: 62:82:16:89:06:D2:EF:C7:09:45:D3:82:9A:27:BF:D4:AD:F5:1D:86
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 0196759E9836312AB8412BC156FC427A5D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: F9
Signing time: Sun 27 Apr 2025 05:00:49 +0000
Manifest this update: Sun 27 Apr 2025 05:00:49 +0000
Manifest next update: Mon 28 Apr 2025 05:00:49 +0000
Files and hashes: 1: cbfaYBjluJFGRHIZotfNKfL5QOM.roa (hash: hnnwP5hTMZNnGccOJwmbq229la5aF88t7OiSZXiU/mU=)
2: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: HqbVk+JEf1w7sSqJ2xe3pGcBkFP6Zx/KBcnYKk2/JJs=)
3: zwNxRZCXOiLKuZa_7Wmh9NcuOqQ.roa (hash: 6xxBkLaHc1up/veCbZl0eXM5uTf3B1SDA3dM0Oft33U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:98:36:31:2a:b8:41:2b:c1:56:fc:42:7a:5d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Apr 27 05:00:49 2025 GMT
Not After : Apr 28 05:00:49 2025 GMT
Subject: CN=6282168906d2efc70945d3829a27bfd4adf51d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f6:33:19:5c:05:85:2a:98:3d:20:f8:78:59:
1a:ad:24:ea:a8:4b:46:7e:4f:bf:aa:c3:0a:71:82:
2a:b3:91:d3:0f:1e:4a:7c:5f:63:f4:db:ee:80:09:
ee:12:c3:23:b5:45:45:c1:5c:89:78:8d:c9:5e:6d:
a6:63:c9:26:2e:ff:e0:3e:9d:e5:81:f1:ab:95:c4:
e5:55:79:12:08:ee:43:18:54:fc:d1:e3:64:4b:ec:
2d:e5:de:c3:ad:43:49:a2:f1:1f:53:4d:09:c1:c7:
b2:b4:c6:b9:ae:ec:d8:67:7e:dd:1a:5e:f8:2f:2a:
2f:11:b8:6a:07:7e:ce:f0:7f:c7:14:bf:a7:2f:da:
ff:06:d6:4c:14:99:22:83:74:8e:ff:60:d7:b5:45:
3b:c6:f5:bb:89:25:f1:07:8c:43:a0:b8:41:f5:47:
53:84:50:09:64:a4:99:78:8e:a1:8c:af:37:5f:d3:
46:17:fa:98:c4:d5:74:cd:be:bc:e1:25:d3:8d:a9:
22:9c:a3:fa:50:b6:65:63:9e:24:95:7d:18:e6:45:
78:49:5c:bc:f6:81:d4:31:a7:60:30:53:16:69:c3:
cc:d3:7b:c3:35:92:c8:b5:0f:e9:ef:60:99:2d:e8:
2e:1c:f9:7c:35:14:2c:de:b5:90:e6:cb:3d:ab:5b:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:82:16:89:06:D2:EF:C7:09:45:D3:82:9A:27:BF:D4:AD:F5:1D:86
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b3:0f:a2:cf:88:8e:2a:c9:4f:7d:c0:98:24:6f:1d:c6:fd:
48:56:8a:b3:d2:7c:4b:fa:3e:aa:59:3c:f0:ef:ae:fd:ab:6a:
0b:a0:5e:5a:e0:2d:e6:6d:89:02:ea:67:39:d9:f9:15:3b:54:
1d:b4:df:8c:22:e1:7b:d6:69:05:ba:31:86:6f:d6:80:f7:d1:
bb:b0:35:fa:62:69:34:b3:d0:b4:c3:28:c6:b9:c4:59:36:96:
c2:4d:7b:cc:3a:bf:b5:c2:fe:f4:49:d5:e0:ed:98:91:54:29:
57:fd:ff:e2:31:02:99:7e:b1:66:55:5c:c9:52:89:be:2a:20:
0b:ee:05:f4:37:4e:4a:fb:d2:52:70:82:88:53:5c:2b:ee:da:
fc:55:27:0e:89:70:93:47:a5:4e:e1:9e:4f:90:63:d9:49:12:
6a:19:f5:df:f7:3e:57:69:95:aa:85:22:4d:2f:b1:f1:b1:6d:
f6:c9:cd:cc:7c:30:1e:fe:49:06:2e:de:d2:28:af:3f:df:2e:
f0:bd:f8:39:f9:6e:cb:2f:62:9b:3e:e2:ee:00:17:11:2e:77:
bc:ab:69:df:11:b6:4e:ca:96:35:59:24:0b:b0:d8:c6:8c:aa:
f2:77:92:39:19:b4:80:af:00:c5:45:a5:f2:f3:d3:50:df:84:
b6:7c:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:57:39 2025 by rpki-client