Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: rgCkQyi640e9ZDLEbsw/sKoIuMZWJ8tN97cbCpN91V0=
Subject key identifier: 28:41:C4:17:67:63:5E:24:23:DB:EE:D1:92:25:90:F5:BD:59:FB:42
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 0196A209394F0A35A55C149AAA3192644BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 20:00:35 +0000
Manifest this update: Mon 05 May 2025 20:00:35 +0000
Manifest next update: Tue 06 May 2025 20:00:35 +0000
Files and hashes: 1: LfvParklu0gxciTOgFZh-BpaZYE.roa (hash: fxMbCosgtYcMMEyUONm7A6ez+akqjsDq1R4iKueGkms=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: wEx/uCP0gSOrYn7hJrswsXnc60FDpd1JXe4vXzy/KPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:09:39:4f:0a:35:a5:5c:14:9a:aa:31:92:64:4b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: May 5 20:00:35 2025 GMT
Not After : May 6 20:00:35 2025 GMT
Subject: CN=2841c41767635e2423dbeed1922590f5bd59fb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:09:40:de:41:ad:43:21:c1:66:1f:ad:63:
34:9a:bb:e4:aa:90:c0:05:30:d2:9f:5a:6b:9d:1b:
52:39:41:7e:c0:8e:22:5f:ee:53:6b:7e:89:54:af:
86:f8:45:87:ba:89:b6:f0:22:a8:2d:1a:8d:8a:a3:
3a:97:31:44:d1:ea:69:72:48:0f:fd:fe:d9:b6:86:
81:05:d0:fd:1e:23:7b:51:61:48:ed:93:81:7c:ef:
3c:6d:ca:15:48:7f:da:4e:c3:80:05:0b:f4:f6:02:
35:b2:0f:8a:fd:d1:4f:05:e3:fe:27:e1:3c:63:f0:
b7:33:66:56:7e:85:0e:6f:16:8c:e4:97:2a:92:a2:
58:8b:a7:ac:e3:74:58:21:3f:61:98:38:c8:c4:33:
26:fc:cf:90:8e:e8:dd:07:19:6d:f1:cb:06:bf:68:
0b:0e:6f:fd:c6:1b:1a:7e:d1:e3:a9:7a:72:c0:b7:
7a:61:a7:f4:26:12:e9:44:9c:98:35:24:d9:9a:83:
c9:99:4e:5d:e6:1d:dc:5a:cb:3d:1b:5d:a2:be:9c:
06:23:24:d7:f5:65:ec:a1:c4:0f:9f:3e:5b:28:f7:
a8:04:c5:c7:d9:bc:24:e6:26:49:41:e2:ac:dd:3a:
ab:a7:06:36:fe:36:5d:93:49:58:30:dd:29:db:ff:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:C4:17:67:63:5E:24:23:DB:EE:D1:92:25:90:F5:BD:59:FB:42
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:07:19:3f:c7:af:a6:05:6b:3d:51:b8:95:0e:c5:2c:29:c0:
ab:e4:a7:fd:7e:64:2c:9b:78:48:57:17:6e:6c:8e:cd:1d:4f:
f7:ae:0e:dc:37:54:02:fc:5d:f6:7e:e8:ea:5c:f5:c2:06:dd:
98:42:a6:71:52:3c:09:90:06:ba:cc:6d:53:7f:73:46:e1:87:
2a:21:13:4a:88:2d:e0:f7:b0:fa:6b:e5:a3:70:af:f5:d6:e5:
aa:c6:80:03:60:c2:6f:a1:ef:6b:e4:9e:da:a8:28:21:e5:30:
b7:cf:dc:f2:19:71:f3:5c:3b:d3:7e:44:4a:c9:d9:2f:3e:14:
c4:72:db:d0:15:f1:da:de:bb:cb:4d:72:ad:04:1b:5e:e5:ba:
fd:84:42:9f:08:4b:f6:ae:17:f6:99:43:06:cf:98:34:8a:90:
fa:19:a3:ca:2d:b8:0d:8d:b0:58:68:ee:c6:50:17:fd:f6:48:
8c:eb:6f:23:c3:9d:be:4d:1b:80:84:46:72:80:40:61:c9:ec:
a5:c5:07:18:b2:db:2d:2a:85:34:36:99:87:4c:42:01:0e:d8:
a4:1e:7f:e3:ce:20:a2:38:16:af:a0:b0:bb:bb:d1:43:83:8f:
39:42:de:c1:9c:84:33:5b:fb:8c:17:de:b1:99:c4:d6:2d:0d:
c9:0e:bc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:42:06 2025 by rpki-client