Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: obRtc2WIJLXoV96JmYU1dsNcklbsxGMfCkNW1svFWyI=
Subject key identifier: 8F:71:41:0B:10:37:A5:B2:B1:E6:26:00:79:EA:4B:B9:78:34:04:2B
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019692CD37ACF02AAF9E8AD398857821F288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 151F
Signing time: Fri 02 May 2025 21:00:44 +0000
Manifest this update: Fri 02 May 2025 21:00:44 +0000
Manifest next update: Sat 03 May 2025 21:00:44 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: opVoWfCnvTOTbAtLPGSihhXKV7ApEetMW+EEMsejHQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:cd:37:ac:f0:2a:af:9e:8a:d3:98:85:78:21:f2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: May 2 21:00:44 2025 GMT
Not After : May 3 21:00:44 2025 GMT
Subject: CN=8f71410b1037a5b2b1e6260079ea4bb97834042b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:8e:98:a0:32:52:44:f8:42:b7:3b:34:eb:
18:0c:7e:9d:97:ad:12:1c:2d:44:36:d0:7f:bc:f6:
bd:b0:cb:ab:9d:db:2d:c0:1f:4c:93:93:f3:b4:d5:
a4:bd:f1:e8:da:f7:9a:f8:0a:0d:a5:a6:72:67:6a:
8e:22:00:36:e3:65:19:6b:ed:b6:48:6f:8d:7a:01:
60:cd:a5:f4:7c:15:c8:21:cf:48:8e:3f:e9:00:7f:
71:f5:60:08:ef:ca:33:90:4d:87:b2:f8:4d:4e:08:
78:b8:d2:ab:54:54:89:ce:9b:aa:8f:cb:0f:b7:be:
b6:f8:09:4e:0b:36:55:6d:75:2f:da:58:e5:fd:1c:
11:37:1e:81:9a:55:2c:df:49:9b:2a:12:86:9e:99:
2c:86:9c:d5:c7:8a:06:3e:48:c4:f7:23:c1:62:bb:
f7:f0:46:1e:3e:ca:b2:dc:42:11:37:c2:5e:83:2f:
de:47:9a:eb:fa:2d:6e:53:b1:fd:84:76:ba:cf:4c:
20:6b:9b:55:46:79:60:42:83:ea:71:9b:23:f6:53:
7c:4c:41:dd:65:fd:b2:86:8c:6c:ea:54:92:67:73:
77:c9:6d:5a:cb:70:73:de:83:83:06:d0:4e:bc:8a:
e0:bb:53:f6:9b:a1:1f:74:e9:a2:e5:71:5d:64:3d:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:71:41:0B:10:37:A5:B2:B1:E6:26:00:79:EA:4B:B9:78:34:04:2B
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:01:10:24:77:25:2f:0c:1c:ec:1c:94:de:da:18:48:c8:be:
1e:8e:98:5b:78:f3:32:24:f0:99:4a:9a:08:fa:52:ec:13:d0:
78:81:cc:d4:06:3e:c1:36:ab:64:6e:fe:9c:55:10:bd:04:f9:
34:59:16:98:ae:8f:07:fa:f4:3d:89:bf:2d:55:08:b4:2c:15:
73:4f:e8:4e:67:c6:bc:3b:ef:c6:13:74:01:2b:25:2d:b2:ca:
e0:b5:7c:9d:6b:d2:6e:4d:29:03:29:9a:76:e8:de:51:e9:fc:
17:2e:75:96:0d:b1:9d:ed:f6:46:09:32:10:45:9d:6e:bd:d3:
bd:fe:90:fa:27:9b:01:27:6a:6c:50:3c:af:e0:4f:5e:a4:d4:
73:ef:56:62:7e:68:17:10:92:34:0b:67:3c:28:ac:a7:57:15:
3d:d3:c5:85:a8:57:59:22:9c:6b:09:bf:23:14:b1:2b:b7:81:
74:b6:ec:7b:39:5e:31:25:8e:8c:6c:53:b1:2e:a6:be:a1:d0:
ac:20:3c:c3:21:4c:88:65:c4:ac:74:52:59:7a:c6:58:85:39:
20:e6:9d:e8:8a:5b:57:ad:79:d6:1f:ee:27:9d:12:f0:36:19:
d9:56:ee:f6:a1:02:60:b7:d0:6b:14:6d:ba:dd:24:00:38:02:
11:02:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:53:20 2025 by rpki-client