Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
File: pcJJ62-mtduvarnes6d3juDrNIc.mft (raw, json)
Hash identifier: 50PseE4ujivm2irUV8aqJIA0xijrpCR1osHTuO8HSXI=
Subject key identifier: 29:6A:EC:F4:F1:E9:C1:72:6D:48:BE:0E:58:DA:9A:86:A9:B4:8C:0A
Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
Certificate issuer: /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Certificate serial: 019675D50EB1F5CCEE5ABC1CE8D7639C2CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
Manifest number: 04A6
Signing time: Sun 27 Apr 2025 06:00:19 +0000
Manifest this update: Sun 27 Apr 2025 06:00:19 +0000
Manifest next update: Mon 28 Apr 2025 06:00:19 +0000
Files and hashes: 1: iI8Orlzgb6VVuw4zGceAk4Y_gdo.roa (hash: xavQWQ+h3Wh68WfrJKGu7Ge405dFSg9FX+cO3lDgnEY=)
2: pcJJ62-mtduvarnes6d3juDrNIc.crl (hash: YF3gxsYmDfY5+rkZyr4vr3XYagcCQ2VZDl1CRHYgiw0=)
3: u9Sx8vquonuxfGSR4H7LLp3rbKI.roa (hash: 2NhtYGZCkznHHTIw/AAV97Orzomj5GZcOrYU4RhtX1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:0e:b1:f5:cc:ee:5a:bc:1c:e8:d7:63:9c:2c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Validity
Not Before: Apr 27 06:00:19 2025 GMT
Not After : Apr 28 06:00:19 2025 GMT
Subject: CN=296aecf4f1e9c1726d48be0e58da9a86a9b48c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:fa:27:0c:99:42:ec:ea:65:7c:9c:19:5d:
81:dd:01:7f:c5:75:bd:35:90:e0:cd:2a:37:b6:bb:
58:0f:4f:dc:da:45:cc:59:4a:ec:34:64:fa:92:57:
9d:dc:2e:22:af:4b:18:de:71:55:54:cb:64:47:79:
cd:ae:4d:1a:2a:d3:0b:fb:bb:ee:a6:3c:a6:4f:c4:
46:a1:f5:2c:95:24:ba:43:10:61:a0:55:94:69:5d:
33:ea:38:91:36:37:63:fa:6c:3d:fa:27:fd:4b:0a:
ff:bb:b4:27:2e:5e:50:f8:48:7e:ef:43:40:e2:54:
10:29:31:90:11:18:e7:b8:5b:42:ea:a1:13:dd:ee:
fb:05:12:94:17:62:15:cf:3c:33:8a:fa:eb:ae:56:
75:79:f4:2b:fd:76:61:81:ae:04:ec:56:92:a1:21:
d6:3c:27:9c:e7:d6:6b:32:89:bd:2b:45:04:24:91:
ac:0c:26:d0:0b:b9:6c:88:5b:6b:65:f9:04:71:32:
27:ac:a1:f2:57:61:d2:cf:bb:b8:61:a9:f8:48:64:
d0:a3:29:67:fa:36:07:6c:a9:4a:2f:87:5b:2e:76:
92:5a:ef:03:ad:14:6b:98:22:6c:f0:3d:34:3d:0b:
e2:39:83:cd:e8:ec:38:d5:5b:40:4a:fb:a3:ba:9c:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6A:EC:F4:F1:E9:C1:72:6D:48:BE:0E:58:DA:9A:86:A9:B4:8C:0A
X509v3 Authority Key Identifier:
keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:44:88:9b:8b:ff:48:f1:92:dc:f5:b4:1a:57:68:56:45:f1:
d0:75:9d:32:a9:35:91:ad:b4:7a:67:68:4d:70:d8:03:83:ea:
60:ed:1b:20:34:32:03:96:e3:6e:44:69:32:b2:ed:b0:9f:52:
cc:1f:5b:f0:18:3f:1e:65:77:aa:98:4f:ac:f1:f5:b5:d6:a6:
36:31:53:9e:26:1e:4f:57:8a:f5:a1:b4:88:ac:3e:e5:0b:dd:
ec:79:a6:2f:40:90:8d:e3:28:00:7c:80:7c:3f:83:b2:c9:9d:
93:3d:2c:2c:e4:be:98:27:a8:cc:a0:1c:6e:8e:5b:24:a5:09:
62:14:37:be:6e:fa:a3:2f:fd:f0:59:2c:95:9b:dd:aa:6d:a9:
da:67:35:85:13:53:d9:56:4b:9d:c0:c1:d0:6a:11:73:f3:d0:
65:e7:b6:af:91:8d:fa:fa:83:8c:8b:82:01:c2:84:16:b3:29:
a3:f5:61:6f:76:d6:9b:d5:a2:01:19:84:ec:3b:5b:e9:99:2e:
56:92:eb:45:0f:83:ea:84:c5:38:c6:ab:78:ad:75:07:a7:48:
1c:4a:fe:c7:a1:b4:dd:85:09:80:32:08:6c:3d:17:7c:a0:cb:
b1:29:cd:f2:70:c6:02:ea:ae:e9:69:e6:09:07:fa:fb:59:f9:
55:41:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:53:43 2025 by rpki-client