Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
File: puiiWpN5KlizotgPsarZWeZa7d8.mft (raw, json)
Hash identifier: JrQa+F40JhnXc+dHMQYudv1xffabRJXOdAzE3zDOvlc=
Subject key identifier: AC:C7:92:B5:C8:83:60:A8:87:F0:0E:EA:78:CC:4F:FD:57:2D:61:70
Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
Certificate issuer: /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Certificate serial: 01967AFB6CEA0236448C085EED50E938ED1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
Manifest number: 146B
Signing time: Mon 28 Apr 2025 06:00:19 +0000
Manifest this update: Mon 28 Apr 2025 06:00:19 +0000
Manifest next update: Tue 29 Apr 2025 06:00:19 +0000
Files and hashes: 1: m4oaOJvUbTCnMfIaVthxaAca0Fo.roa (hash: 63YgwjxraN8fKu5dlPjbo9SecMVJoKvca3zxswMIA4c=)
2: n3U4T0b_eZvC8-6ycL0d5_eDNuM.roa (hash: 9t7F6PBfxlnF6OlI2OhDxP2xK45ENz8bFdMmt86tiuo=)
3: puiiWpN5KlizotgPsarZWeZa7d8.crl (hash: U3SoPNclQNpFbS4CUspHi6uuTH+MOtTLQESpshYWVyI=)
4: tDmGVhL-hfe86EtwqqFgtbugIGI.roa (hash: yybIZyz2WHKbdDgnIhAh2oqd5wKR3WI3gpGpCQsuSFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:6c:ea:02:36:44:8c:08:5e:ed:50:e9:38:ed:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Validity
Not Before: Apr 28 06:00:19 2025 GMT
Not After : Apr 29 06:00:19 2025 GMT
Subject: CN=acc792b5c88360a887f00eea78cc4ffd572d6170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:78:7c:64:bd:d9:81:be:30:f2:6d:96:86:
e9:a0:10:63:b9:66:81:87:1b:58:10:57:28:da:bb:
ec:27:d2:cb:07:0b:ee:a8:ec:36:71:b7:61:c8:52:
12:0b:70:20:fd:f4:7d:de:f2:ee:15:14:a3:18:5f:
ad:5d:1f:75:54:16:ce:e1:af:37:c4:66:21:c1:09:
44:b5:d2:c5:20:80:d0:88:6e:f0:88:1d:87:d0:f3:
91:a1:ce:42:31:88:4b:a5:bc:75:99:b6:9f:66:8c:
4e:5d:3d:5b:4f:7a:02:55:aa:83:ee:dc:7a:16:0a:
c7:9d:2e:98:4c:15:01:22:8a:a6:fe:72:90:eb:ef:
a1:af:5b:09:1f:e1:a8:ac:37:bf:47:e3:c8:84:99:
c6:24:0a:9e:61:94:7c:f7:6c:e7:8e:d8:30:a8:ae:
72:a0:2a:bb:e7:b2:ea:21:58:88:e9:1d:2d:6a:be:
0c:a8:3c:57:31:8c:06:79:e5:6b:7c:02:d4:95:c5:
93:d4:0b:82:41:c3:09:a6:a8:4f:56:17:8c:09:1b:
4b:fd:58:bc:c2:1b:30:6b:02:7d:4b:41:b0:f1:ed:
0d:e7:e5:4b:5f:e5:09:97:4f:64:7d:0b:1d:5f:4c:
2c:27:42:ec:60:3f:15:fc:b3:80:97:fb:a8:aa:33:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:92:B5:C8:83:60:A8:87:F0:0E:EA:78:CC:4F:FD:57:2D:61:70
X509v3 Authority Key Identifier:
keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:51:48:c7:73:26:16:26:52:99:6d:0e:37:e2:b4:67:92:06:
33:75:8f:d6:99:87:86:cb:92:49:5a:f8:c9:98:8d:66:fd:1c:
bb:76:6f:24:bb:f0:14:a9:db:0f:a8:98:17:1f:b7:de:2d:47:
71:b6:91:8c:15:18:82:65:d9:00:0c:46:0f:76:d8:d7:89:94:
72:88:9b:72:ef:bd:51:b2:c0:a7:a9:ff:f4:be:c8:f9:73:e7:
05:95:e4:60:d8:fa:90:ed:30:4d:c2:25:19:de:f4:6b:f1:bb:
97:1e:3e:32:d7:75:cb:6d:78:22:22:57:47:61:36:db:b5:25:
53:76:c3:52:23:12:ba:2d:8b:8e:0c:06:ef:a3:7a:a2:7c:8a:
be:3d:0e:8d:86:3d:1b:bc:0e:22:f6:51:f5:53:37:f5:b4:b6:
cd:86:b5:82:13:9a:4b:4f:64:d9:4e:15:f2:19:7d:11:cf:a5:
4a:95:6a:81:35:53:aa:b9:7c:b8:a8:e2:09:f9:d8:00:59:c3:
1e:21:2c:bb:03:24:39:a1:69:dc:7c:f2:06:ed:f6:3d:58:bd:
e8:b8:d6:86:d0:d7:8b:24:59:56:1d:3f:fc:7e:2c:ba:bb:bf:
8f:7e:10:02:81:83:80:6d:93:fd:f7:a9:f9:d3:f1:2c:a3:36:
a1:35:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:20:54 2025 by rpki-client