Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: 6lwrc0lmZ9Eo9kD7nZVMQQ1ZEp+th9pDZ5o7IpcNoAY=
Subject key identifier: C0:6D:44:11:68:D9:0D:CC:C9:BF:09:72:84:A8:AE:43:48:51:4F:FD
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 019676E800110E4250566F3A2873D5D63FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 01A3
Signing time: Sun 27 Apr 2025 11:00:37 +0000
Manifest this update: Sun 27 Apr 2025 11:00:37 +0000
Manifest next update: Mon 28 Apr 2025 11:00:37 +0000
Files and hashes: 1: aU9nU6J43VKML7pOttC9ZY6jQ98.roa (hash: FbRy0Mzafv2hiOEuNsxPoMw70K3GoSJZXHuz7LnmQeE=)
2: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: Mr9Z+fKlgKqUlorz9mI1Viel3Xc62FE4j2p4/DsXowM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:00:11:0e:42:50:56:6f:3a:28:73:d5:d6:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Apr 27 11:00:37 2025 GMT
Not After : Apr 28 11:00:37 2025 GMT
Subject: CN=c06d441168d90dccc9bf097284a8ae4348514ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:ed:5d:b8:ef:8a:55:29:ce:d8:25:11:26:
8a:67:41:85:aa:d3:42:8f:57:5f:a4:d6:fb:6b:47:
1d:0f:4a:03:9e:90:a4:ea:2b:aa:27:23:48:39:d1:
f9:f9:48:1e:87:6f:a3:b3:44:82:34:15:22:39:be:
d1:ad:83:80:79:d9:4f:8a:a7:5d:e5:50:61:8f:ab:
80:77:05:e7:3a:7d:c8:06:72:7d:02:fc:e8:43:b3:
12:32:01:8c:3d:4d:ed:2c:a3:5b:6b:61:81:0c:70:
30:bb:61:d0:44:a8:cb:e5:80:0a:7b:17:2e:62:1c:
b2:47:46:37:72:8e:eb:97:5e:cb:23:ee:1d:1d:db:
6c:3e:30:91:42:53:90:2e:2e:3b:cd:14:80:e2:f0:
4d:c7:96:a4:07:e7:7c:1e:7b:b7:d6:79:b1:f0:6a:
f0:c2:5a:f8:fd:cd:8d:bb:c2:c4:79:98:1b:0c:c4:
89:74:18:1b:02:7d:2d:5e:51:4b:95:c3:04:50:71:
64:56:30:54:27:11:4f:75:b0:24:90:00:a0:44:a4:
ed:15:a2:ca:6c:80:e0:cc:a9:3b:0b:62:28:ba:e3:
07:eb:de:90:af:bb:53:3a:44:aa:c3:e1:96:fb:ab:
d2:76:4b:0b:1e:03:b4:bd:c0:df:98:8b:ca:b3:af:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6D:44:11:68:D9:0D:CC:C9:BF:09:72:84:A8:AE:43:48:51:4F:FD
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:88:5d:01:bc:27:6d:0d:14:f0:c8:d1:6b:ea:f0:c0:36:
44:91:96:30:b0:27:01:75:58:9a:7e:20:7e:dc:56:74:dd:f2:
d5:b8:56:a1:63:0d:7c:28:31:50:9c:57:92:2d:f0:b8:75:d3:
04:0f:f2:cb:90:b7:48:4a:b0:e0:53:74:df:b2:31:80:47:67:
55:3a:3b:b1:b1:02:4e:e6:c0:ae:d9:57:d7:4c:e4:cd:c1:85:
e5:d0:7a:3c:cb:6b:b6:73:18:5b:81:b5:20:a8:6e:b1:68:93:
19:b6:90:0b:61:88:98:e6:99:31:9c:9d:d4:aa:ac:9b:ba:0a:
f5:27:da:0e:30:7e:00:36:98:64:ca:59:61:0a:4f:be:b3:fb:
64:1f:80:39:ac:6e:9e:de:1d:04:8e:33:68:58:2a:38:88:25:
29:0b:7e:cd:58:4a:49:35:c6:ba:7c:5f:93:d4:68:41:2e:15:
19:e8:7e:ac:e1:e4:e8:8e:27:9c:9c:9e:a6:8f:7e:21:d1:ff:
44:bc:9a:26:bb:c6:23:ef:2a:d4:e0:f0:a6:cb:d5:48:3f:62:
5c:08:af:03:f2:35:d3:85:32:53:2e:40:f5:24:cc:98:1f:8a:
ee:0c:06:93:72:f1:bc:24:3b:14:53:cd:4e:e3:71:42:a7:19:
f2:5d:0f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:56 2025 by rpki-client