Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: FpJ7Oykw+k/8xiIzqIR5rqxaQRGe9tRmBqhxKkuLzAc=
Subject key identifier: CA:73:2B:00:C1:94:6A:08:54:86:7D:77:4E:EF:6A:06:F3:D3:B9:9F
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 019686FFF748CB06069DAC2F06B107F5E4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 1205
Signing time: Wed 30 Apr 2025 14:00:44 +0000
Manifest this update: Wed 30 Apr 2025 14:00:44 +0000
Manifest next update: Thu 01 May 2025 14:00:44 +0000
Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=)
2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: NxCBzzM9G2ejfAS+N1r3Gja7DH4DUGuULd+bTRwgvf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:f7:48:cb:06:06:9d:ac:2f:06:b1:07:f5:e4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Apr 30 14:00:44 2025 GMT
Not After : May 1 14:00:44 2025 GMT
Subject: CN=ca732b00c1946a0854867d774eef6a06f3d3b99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:5f:a2:80:9b:0c:30:d5:71:5e:93:ac:6b:
cb:13:cb:be:c3:19:8c:50:ff:6e:bf:ac:5f:07:e2:
8b:81:f9:f5:60:b2:bb:2a:4a:e3:08:8c:c2:d7:62:
30:b7:0c:0c:7c:f7:bc:2a:f4:0b:e5:5a:eb:8d:d9:
46:b8:70:c8:b7:aa:43:ec:6b:66:64:ef:78:95:5a:
33:e7:6f:c3:26:c9:4a:30:af:11:f2:6a:8f:4b:48:
00:b0:d1:82:16:c9:6c:af:bb:2e:f1:a2:4a:dc:ce:
dc:6b:ae:84:6c:c7:d5:5f:af:a9:9f:32:2c:9a:4e:
48:9a:e1:43:38:41:9d:ed:64:2b:f1:2c:b6:64:bc:
db:8b:66:6f:b8:98:2a:20:98:f9:36:f1:10:f2:eb:
cb:fc:4c:4b:86:71:b4:1e:55:c7:24:70:04:86:4b:
f4:a8:58:e5:f4:74:fe:07:26:c1:40:f4:2a:a8:2a:
03:c7:5d:98:f8:2a:e7:76:d6:84:43:fa:8d:cc:19:
bb:d4:c5:68:79:be:94:66:55:35:ed:e3:ff:e3:b3:
37:75:aa:eb:77:b8:ff:87:13:ec:a9:ad:e4:28:04:
ba:65:56:ff:42:c3:72:11:97:6f:a1:52:5f:43:8d:
35:51:c4:e0:98:34:7a:57:da:54:36:ca:69:10:a6:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:73:2B:00:C1:94:6A:08:54:86:7D:77:4E:EF:6A:06:F3:D3:B9:9F
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cb:2b:d7:b3:6a:07:b5:e7:ff:59:19:b9:8b:32:4a:ab:3c:
01:de:13:51:57:68:35:a1:73:67:d8:34:1f:ad:a6:40:67:09:
3a:96:b2:cf:36:7f:a9:69:48:72:3a:89:33:99:00:c0:87:aa:
56:c3:84:60:b9:ad:6f:a0:67:68:26:30:ca:32:a9:4c:c1:0d:
c0:5d:d7:21:bb:d4:c4:d5:63:a5:c5:5d:a7:bc:70:b1:cf:3a:
cc:a1:1e:fc:a6:bd:28:11:c8:c1:80:2b:09:0a:c3:3c:1c:f9:
b4:ea:f5:f4:53:d9:66:2a:2a:68:a0:2b:11:e8:d2:1b:92:e5:
b9:91:29:04:91:08:13:53:80:cc:62:0e:08:f7:1f:5d:23:c5:
11:53:fc:27:c8:35:70:cc:f4:00:44:dc:0a:42:e9:a9:61:8d:
35:69:06:be:e5:34:69:22:f4:91:41:2c:2d:f2:44:b0:cd:bd:
ef:04:08:f4:33:5c:e2:c3:f5:98:ea:14:9f:84:c4:ff:a5:9b:
bd:ca:09:b3:49:5b:77:76:a6:3b:c8:b8:cf:36:5f:cb:97:cd:
a7:af:b2:a1:c1:05:e7:f7:28:bc:23:11:fb:dd:c9:b1:16:14:
bf:3b:42:bf:b2:f4:68:15:a9:96:b4:7e:44:f2:6a:26:55:dc:
52:87:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:38:09 2025 by rpki-client