Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: /H754hkxnNgGmsLzrToF+NmyE4lYtlmsCed3GPWz4D4=
Subject key identifier: 5E:94:21:24:A4:C3:84:B8:E0:FF:C0:35:59:C3:21:B3:2F:EE:0A:2F
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 01968F2849880380D7ADC795C842C37071A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 0CD8
Signing time: Fri 02 May 2025 04:01:44 +0000
Manifest this update: Fri 02 May 2025 04:01:44 +0000
Manifest next update: Sat 03 May 2025 04:01:44 +0000
Files and hashes: 1: XZ2L7tby58uG7r0ttQk5HwT9l8k.roa (hash: oQ6DroqRbFL+VaKJERXvf6dbj57Lt/0NRTKEGy5wXFQ=)
2: ouICw0nyK_0-5jscxv12aq634vw.roa (hash: ZpjXF6V0UreF7p2IPTzGzZ30r7TGS05jqHG074BeOko=)
3: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: x6EaEB+xtdF7AdJxSxfLCrdB+vO7+mzs6BAzikAtkxQ=)
4: s9Phn4LRxq3qJKp5WG1zCsRMWlc.roa (hash: 5LFQTKOZRBYzOCfam8/FRn4XdqXt/6yCH7PjQq7YFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:28:49:88:03:80:d7:ad:c7:95:c8:42:c3:70:71:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: May 2 04:01:44 2025 GMT
Not After : May 3 04:01:44 2025 GMT
Subject: CN=5e942124a4c384b8e0ffc03559c321b32fee0a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:ca:5f:b1:c8:49:9c:86:49:76:53:1a:ff:
f5:13:81:95:a3:3f:4a:9c:61:08:72:fa:26:05:42:
be:61:a9:9c:dd:0a:e8:60:43:90:64:28:f2:2d:ed:
22:1c:c4:4c:9b:00:fc:bd:ee:7c:81:22:a0:55:bd:
46:fa:42:e1:f0:d8:c1:9d:d0:54:81:a3:b4:b9:8d:
ef:23:0b:1b:89:4a:4d:0f:6c:ad:ac:b5:b6:d8:84:
4c:0c:eb:a8:61:b2:52:67:c6:c5:28:7a:56:5b:2e:
bd:10:66:a0:4c:6e:ff:ce:e5:64:e5:18:9b:2e:ec:
43:e3:67:ce:f5:a2:dc:98:ef:2f:b6:66:f6:0f:b4:
09:28:7e:ff:62:cf:3f:20:ef:ee:83:fe:af:79:37:
11:54:db:a9:8d:bc:98:07:d9:e6:97:54:6e:fc:c1:
ea:43:1c:c8:3a:fd:76:43:e3:1e:41:e6:8c:57:43:
eb:c6:01:b9:ee:61:fb:c5:c4:a4:25:e3:98:17:19:
2f:a9:26:e6:63:4c:c9:3a:ca:93:a0:d0:be:5a:d5:
7e:00:9f:fb:55:12:67:b1:0f:b5:d4:37:30:43:40:
34:5a:fa:be:d3:ee:70:e3:a9:84:57:7e:5d:3c:ed:
13:ac:29:25:ba:81:1d:f0:10:34:36:3f:1b:c2:5c:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:94:21:24:A4:C3:84:B8:E0:FF:C0:35:59:C3:21:B3:2F:EE:0A:2F
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:95:ef:34:d9:26:58:3d:ae:ba:a1:6e:17:28:4d:0e:0d:8f:
9f:15:6b:ec:08:00:90:d4:dc:f5:a1:41:df:78:16:9b:c0:15:
73:2d:cf:03:93:8b:a3:47:5f:9c:17:7b:8b:7c:75:3c:68:60:
a8:4c:bf:33:d4:2f:5c:1a:2b:6c:8e:0f:b3:79:83:93:ce:c9:
57:09:eb:61:54:72:67:ee:20:1b:f6:68:e9:e1:91:9e:bb:e8:
1d:d8:79:52:96:85:0f:93:a0:d2:23:8d:76:26:3c:d8:de:52:
36:64:06:9a:88:c4:5e:90:13:60:0f:fc:7e:47:df:cc:fe:11:
94:9f:a6:06:b1:7c:30:84:16:26:36:71:ca:63:09:c0:9e:71:
67:86:6f:c9:e8:69:19:9a:e5:05:68:72:1b:07:cb:f3:e3:8c:
49:a5:78:60:50:37:d3:79:87:79:b1:78:f4:ba:96:db:14:f6:
b1:6b:ee:5a:4f:7a:01:88:98:ce:09:ed:84:90:17:c4:8c:07:
d7:bf:ff:eb:34:3a:0f:a2:77:84:bc:f7:0e:00:57:38:8b:a9:
98:eb:5d:46:ce:cb:8e:01:1d:7b:26:34:dc:eb:36:36:3b:19:
a9:6f:fe:5f:bf:fa:7d:b1:b0:7d:79:13:ab:f1:a9:d9:21:e4:
1f:a4:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:25:51 2025 by rpki-client