Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: wd+Mana+t2BPJwRY2epFTYdhmcihdHg0vvOP5jwaDDE=
Subject key identifier: 0B:1B:0B:A0:9E:2E:CD:69:FE:E5:92:4F:99:53:02:53:10:D8:63:0E
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 01968A6ECE6CF21563F1662F3B570F11D248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 02F6
Signing time: Thu 01 May 2025 06:00:39 +0000
Manifest this update: Thu 01 May 2025 06:00:39 +0000
Manifest next update: Fri 02 May 2025 06:00:39 +0000
Files and hashes: 1: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: zMlszwZEkJ8irnLZDXgWjzzHIvw1D9HRcu1OiVX0hcg=)
2: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (hash: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6e:ce:6c:f2:15:63:f1:66:2f:3b:57:0f:11:d2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: May 1 06:00:39 2025 GMT
Not After : May 2 06:00:39 2025 GMT
Subject: CN=0b1b0ba09e2ecd69fee5924f9953025310d8630e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:fe:62:73:d1:e6:11:38:ce:d9:18:40:87:
74:d3:e2:93:5b:e4:aa:39:f4:2a:18:d7:5c:16:9f:
f9:91:0f:56:03:d1:3e:50:1e:2b:35:e1:3b:73:a7:
7b:36:13:f9:29:ed:31:5a:0f:e2:3f:9a:4d:8c:20:
31:20:1d:9d:48:fd:73:6e:ba:e6:3d:9c:eb:2b:62:
66:a3:91:ef:74:9b:23:95:e1:1f:18:d3:da:58:9a:
16:61:ba:34:90:64:d9:f8:e0:3c:71:79:89:df:7f:
01:e9:b6:54:c0:bc:37:03:fa:51:0b:93:7c:9d:1f:
b0:b1:53:2a:2b:45:e9:83:72:47:e0:f9:2d:a2:99:
bb:e0:6a:73:d5:c2:78:a3:4c:65:28:69:bc:ef:3c:
30:c8:1b:44:f6:bd:2b:26:f5:68:4c:30:d9:68:11:
c2:0a:49:18:a0:bc:40:5c:89:74:ea:4a:bc:51:bc:
d5:b2:bb:ca:cc:83:78:32:9e:86:02:f5:41:80:ba:
67:86:8f:cf:c1:92:3b:45:36:31:f4:4d:55:7d:09:
b7:5b:85:c2:19:7e:2a:8b:d8:43:b2:fc:ba:fe:fc:
9e:58:fc:27:61:0d:48:61:84:10:ec:ea:8b:5e:5c:
cc:0b:71:1a:96:be:b6:db:18:5f:3a:e0:55:41:fc:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:0B:A0:9E:2E:CD:69:FE:E5:92:4F:99:53:02:53:10:D8:63:0E
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:aa:ee:3d:87:8f:6a:42:91:76:e6:72:18:37:66:11:a5:b1:
ab:7c:75:18:db:88:d8:78:20:f5:11:be:29:dc:da:86:3b:03:
2e:c8:9a:80:24:88:11:8c:45:cb:50:26:95:85:51:61:7c:0c:
a5:69:88:ae:f4:81:57:ae:be:71:de:51:9d:57:37:8d:2d:d3:
4c:81:62:f7:36:ab:1c:54:37:8f:bd:30:64:f5:bc:fd:69:ea:
4e:7a:56:76:d7:26:b7:3c:e2:37:7b:11:30:60:ca:fd:2b:70:
4a:e0:46:ea:fe:9c:1f:07:0b:4f:2d:1c:0d:aa:ac:8b:8f:af:
51:53:42:eb:db:e1:25:a4:05:b4:2f:e5:4f:79:bc:3f:58:5c:
48:13:29:e7:bd:e3:1b:3e:15:15:31:24:66:8a:ec:0b:7f:e3:
9b:7e:b0:4c:63:1d:b4:63:2b:43:45:ac:1e:19:65:2b:95:15:
b9:61:86:19:d6:c5:40:b3:ee:ce:8b:3b:7e:7d:22:2d:df:7c:
d3:8c:81:7d:34:f5:66:a4:bc:f6:01:e6:12:cf:ba:af:ec:04:
bb:65:72:b4:72:c8:62:e2:1c:99:23:4d:35:9c:8c:d5:04:25:
9b:cf:44:56:87:cb:ee:1f:ca:92:7c:06:b6:0f:98:e3:6f:f0:
ed:b1:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:18:20 2025 by rpki-client