Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: 6du3+VmVZRvY8YPZfxAJQuTUe4v6EGRvlVOcdMb7Ef4=
Subject key identifier: E0:3B:32:24:5D:F7:2C:CD:D5:EC:B5:3E:D6:A5:EF:D6:4D:F9:A6:81
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 01967567806D44614D04367DC61D79C33C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 0A91
Signing time: Sun 27 Apr 2025 04:00:39 +0000
Manifest this update: Sun 27 Apr 2025 04:00:39 +0000
Manifest next update: Mon 28 Apr 2025 04:00:39 +0000
Files and hashes: 1: E8EItKN2__9iKd7VUUHBehRVQCo.roa (hash: mIn23TrAWNsxopm3nGDSwuz19rtPaaB79Dzo0Qrhuqk=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: AlrDEge5DDNYARxMTb+atoiPYXZoEYFwl0l8xOmBrys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:80:6d:44:61:4d:04:36:7d:c6:1d:79:c3:3c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Apr 27 04:00:39 2025 GMT
Not After : Apr 28 04:00:39 2025 GMT
Subject: CN=e03b32245df72ccdd5ecb53ed6a5efd64df9a681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:94:81:3e:8c:ae:24:7c:dd:68:71:ef:fd:24:
ae:e3:5a:79:00:de:52:44:8f:92:38:28:ea:ff:25:
35:09:71:21:0b:73:3b:9a:eb:73:41:79:0e:a1:77:
c2:85:a6:03:d2:f8:60:bb:c8:f3:c9:cd:a5:75:bb:
18:01:af:9c:a0:07:44:32:cb:dc:16:a9:c6:85:85:
ab:c1:9e:91:2d:c6:65:b8:cd:6f:64:69:29:0c:ab:
b3:16:e1:2c:ea:ec:e6:07:bb:94:a1:26:23:29:84:
75:51:59:ca:ec:8d:30:87:64:ec:d6:59:ec:df:22:
b5:d5:23:b4:9b:78:05:53:ee:fe:dc:69:44:27:dc:
ca:e2:44:b0:41:58:91:71:1a:3e:b6:4e:37:f6:3f:
8b:dc:cb:78:16:1c:52:6c:35:f3:69:5d:bb:12:52:
68:ed:76:ac:2d:5a:57:ee:59:da:2a:64:5a:56:da:
3f:1b:4a:39:03:2b:a9:33:e5:b1:15:52:0a:10:09:
e3:ae:29:70:08:84:1c:3c:0f:e5:36:09:a1:ec:99:
06:80:bf:ae:fc:ff:23:41:88:07:91:3a:bc:12:85:
43:f5:95:7d:cc:1f:a0:5d:93:a9:2e:d6:0d:9c:33:
d0:8d:0c:15:1e:4e:6f:f2:9c:e9:8f:41:fb:49:2e:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3B:32:24:5D:F7:2C:CD:D5:EC:B5:3E:D6:A5:EF:D6:4D:F9:A6:81
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b2:16:1f:5f:bf:0f:f2:31:a9:a6:7e:9f:de:fb:30:3c:92:
78:20:d3:ef:28:81:43:6b:20:6d:4d:b2:98:4b:37:57:69:3f:
5b:a0:30:f4:0f:f3:c2:1f:53:3c:71:16:4b:c1:85:f3:aa:26:
ea:a7:94:a4:39:a9:cf:f7:84:ee:5e:bb:b7:ec:1e:cd:2b:58:
24:80:df:51:0b:44:95:a7:28:e3:0c:9c:5a:6a:40:01:8f:88:
00:e2:2d:53:d0:62:a7:26:f4:3d:3f:af:df:bd:6d:48:c3:bf:
18:4b:2e:ca:d7:cc:1c:d9:68:e4:6c:55:3e:ae:9a:69:3f:11:
cb:5c:b6:7d:16:6f:73:60:37:0f:65:26:95:2b:d3:b8:86:78:
b2:0a:40:56:aa:26:c8:2d:1d:34:3c:14:6f:c0:f6:24:53:f3:
13:75:54:c2:27:92:4e:b1:61:61:f6:63:67:46:c9:a5:c8:01:
1a:4a:5e:0d:1a:b1:88:e8:66:fb:65:9d:71:e4:6c:91:4b:7c:
d8:8e:40:f0:98:b6:cd:8a:96:8f:d2:17:a7:10:75:7d:59:0e:
ba:bc:9a:3a:df:92:61:29:ae:33:ff:9f:28:f2:26:58:06:21:
07:52:eb:85:e3:76:e9:a3:b0:48:c2:ee:9a:42:cf:80:d7:37:
9a:81:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:22 2025 by rpki-client