Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: 6Mc4HhkS44IPaqZgSGjXOm7+wL0BkDIHAzFZJxkwJFo=
Subject key identifier: 03:87:76:B8:4F:E5:5D:98:18:D5:46:FD:B3:EC:1B:11:DB:4E:43:FA
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 01967567D8C5C7733721C123952FB49C6057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 04:01:02 +0000
Manifest this update: Sun 27 Apr 2025 04:01:02 +0000
Manifest next update: Mon 28 Apr 2025 04:01:02 +0000
Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=)
2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: bDuz/R1jv8yswsz+tsBdqbVYWdjR6iByZJHXFPrhLeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:d8:c5:c7:73:37:21:c1:23:95:2f:b4:9c:60:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Apr 27 04:01:02 2025 GMT
Not After : Apr 28 04:01:02 2025 GMT
Subject: CN=038776b84fe55d9818d546fdb3ec1b11db4e43fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:41:7e:ab:52:75:72:cb:12:16:03:b8:89:
dc:83:42:d0:cd:53:41:2b:10:f5:67:03:f9:75:47:
03:e2:09:95:d3:fb:13:9e:f6:84:82:75:13:59:20:
de:ad:4b:c1:56:e4:cd:f2:14:e3:f8:42:7e:d5:0f:
90:20:3d:54:93:f9:e7:43:ae:02:3c:19:20:7d:3b:
76:98:4d:c2:f4:61:25:b3:49:0e:cd:0e:97:08:6c:
39:10:4c:79:35:70:f7:1a:fb:eb:f2:23:c0:36:9e:
dd:65:43:ea:b2:de:e4:db:a9:f2:90:ef:7f:55:15:
42:f6:49:0e:b0:7f:9f:c8:f8:43:f3:fe:79:6f:d9:
e1:4f:84:65:7f:81:7d:8a:50:61:7d:da:59:97:0d:
38:d3:cf:ee:17:6f:73:e5:e5:bf:f1:37:37:56:06:
53:0a:bb:18:46:be:ea:67:01:c9:18:a6:98:09:e5:
07:49:11:57:10:32:f0:d2:f3:db:96:03:81:54:00:
4b:40:3a:12:5e:b0:2f:2e:28:44:62:8a:a5:7b:03:
f9:d2:0e:54:8c:9f:25:3e:75:24:1f:88:cc:10:2d:
d2:02:11:77:04:78:b3:5a:1e:79:dd:c6:3d:e1:9f:
86:2b:a1:80:2a:b8:e0:cb:96:c4:ad:67:a0:12:3f:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:87:76:B8:4F:E5:5D:98:18:D5:46:FD:B3:EC:1B:11:DB:4E:43:FA
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b2:c6:ec:f5:d8:41:4a:a8:ce:75:8e:8a:97:19:e2:36:3c:
f1:4d:71:6c:65:fc:d0:61:3c:c2:70:e2:9c:f9:90:4a:a5:ca:
97:f2:0c:ae:7d:97:2d:0f:74:2e:94:d2:07:6c:4e:75:f6:68:
38:e3:e9:36:72:4e:ca:79:a8:8f:7c:7e:a1:20:7a:7b:7d:99:
d1:95:7c:62:ac:d3:79:61:73:3c:6c:92:9f:c4:6f:1d:38:4b:
34:07:74:7c:ec:ad:2e:84:e6:2e:07:9e:e6:93:ca:34:97:6b:
a6:7c:48:bb:5f:fa:0a:de:fa:77:8a:49:f3:02:ac:e1:4f:7e:
df:5a:20:ad:74:31:cb:c6:1c:50:69:0b:37:a7:0d:44:6e:d9:
bf:70:42:dd:14:05:77:5c:6d:57:2f:77:3a:c8:64:a6:c2:59:
42:98:17:b3:cd:ae:35:98:d4:6e:49:53:59:9b:b8:d3:6d:81:
e6:6c:35:69:00:9b:ac:2c:89:84:af:b7:d4:f6:10:4d:6f:fb:
b9:26:60:86:a7:34:63:86:3e:f7:4b:c4:82:b9:e2:94:46:77:
1d:d5:6d:36:77:a7:00:f0:4f:18:de:5c:30:f3:e4:40:95:28:
4d:0c:c0:98:a9:dc:c5:42:7f:60:fc:83:a6:63:e0:a2:7f:06:
98:3b:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:10 2025 by rpki-client