Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
File: pZyqKnNoBpiyyeGmyWQadPPOdug.mft (raw, json)
Hash identifier: CsK5J5Oxga7JcxwNLyaKE6aK4hXsd0Lk9UdAnoWFMWE=
Subject key identifier: FE:03:0C:49:7D:25:22:0D:60:56:13:F0:0B:2D:FD:10:44:36:73:AC
Authority key identifier: A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
Certificate issuer: /CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Certificate serial: 01967D8E8A3794ED76E55B6A5FF950DEC122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
Manifest number: 09A8
Signing time: Mon 28 Apr 2025 18:00:15 +0000
Manifest this update: Mon 28 Apr 2025 18:00:15 +0000
Manifest next update: Tue 29 Apr 2025 18:00:15 +0000
Files and hashes: 1: _c_c0M25UwpZ7eHBk4pzeagMlVQ.roa (hash: 8jqy4hlWYt18GsvMo6F88//T4bDxnnNcBAAfWfrvPK8=)
2: pZyqKnNoBpiyyeGmyWQadPPOdug.crl (hash: pxPA1YwsNGwz2TP7CgZ7fi7bZ/Il2AymHrER2DYgfvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:8a:37:94:ed:76:e5:5b:6a:5f:f9:50:de:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Validity
Not Before: Apr 28 18:00:15 2025 GMT
Not After : Apr 29 18:00:15 2025 GMT
Subject: CN=fe030c497d25220d605613f00b2dfd10443673ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:ad:16:38:55:a2:3e:8d:f9:ec:1c:8f:a3:
2f:33:1c:c5:97:d0:c6:0e:a5:bf:e1:1f:4e:37:d3:
37:d7:5e:ad:8c:3b:cd:c9:f1:c0:d7:f5:30:a8:83:
2e:9f:2f:01:79:1c:21:9a:32:1a:35:7a:fa:74:a3:
b8:3f:66:79:60:90:dc:8b:42:8c:57:b4:0c:f4:32:
72:cb:45:c3:7e:0e:26:c9:05:c5:04:29:e8:c9:7d:
9e:4a:81:ba:78:7f:b5:54:7d:9c:16:e8:b5:49:67:
37:98:14:f4:0c:39:df:f9:84:82:de:46:77:82:f5:
68:bc:54:31:d8:d9:fd:ec:3f:8d:4e:2b:88:05:1b:
59:f9:55:90:5d:39:89:fd:1a:6e:51:36:1c:2a:95:
8c:0f:ec:97:16:03:dc:73:12:d0:a3:0f:0f:27:22:
d6:a8:5d:9c:69:19:8e:91:b7:00:ac:de:d2:98:70:
ed:ef:45:f0:3f:5c:e5:39:e1:e9:aa:2c:f6:19:27:
16:7d:19:de:04:51:4e:e1:7c:c0:16:d0:99:7c:bf:
f2:ed:70:66:e0:60:2b:dd:a1:be:ef:c3:42:19:fc:
f4:9f:82:42:40:42:9c:f6:be:ea:6a:7a:9b:dc:03:
b2:8a:05:5a:9f:3e:26:52:d0:21:0f:bc:e7:fa:6e:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:03:0C:49:7D:25:22:0D:60:56:13:F0:0B:2D:FD:10:44:36:73:AC
X509v3 Authority Key Identifier:
keyid:A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f1:c4:cc:79:3d:64:22:46:78:5d:98:27:98:d3:68:1f:3f:
f5:15:1a:45:5d:ba:3a:d5:b0:43:f1:d9:b9:92:44:65:30:49:
5e:98:c1:92:92:c8:6d:64:87:88:5f:14:eb:64:8b:2d:ff:75:
d5:38:75:bb:34:ba:6a:0f:5e:56:2a:28:cc:49:cc:44:d3:f2:
28:b3:d6:00:31:fe:8d:4f:c4:53:85:e5:07:06:5a:3f:cd:52:
b7:b1:71:f7:e9:5c:58:df:0c:33:10:22:c5:0c:0d:36:60:50:
03:70:7c:5b:bf:23:7e:de:72:f3:75:b9:78:95:98:37:0b:58:
46:c8:f5:e1:f5:16:ca:de:b8:55:1d:ac:f4:5c:79:d5:52:13:
9b:14:d8:80:9a:c1:ff:97:70:88:42:f8:e9:1b:11:21:c1:06:
4d:8f:f9:e8:1f:72:b5:a2:5f:3b:5d:68:ef:83:71:0c:66:b7:
ab:9e:a9:a0:1c:b9:25:04:19:75:94:37:26:c1:5e:ca:93:f8:
46:3d:e7:68:97:fe:b3:ed:b2:8f:92:8e:f3:22:53:0a:3e:f9:
e7:bf:ec:e7:89:05:1a:2c:ff:e1:c3:87:e5:cc:b6:5f:2c:10:
89:fb:08:dd:dc:a5:83:ac:18:8c:e0:7d:36:6c:de:12:4b:c1:
12:42:1f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:20:11 2025 by rpki-client