Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json)
Hash identifier: SVJuzDWeOtsBAL/06typNlq4QtilZDc5dMv/Yp8viWE=
Subject key identifier: AF:FA:84:57:7A:A6:52:36:FD:B4:17:5F:88:39:61:D0:B5:91:75:6D
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 019674F9EC134B0FEB65120F8C5886F57360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
Manifest number: 0BC4
Signing time: Sun 27 Apr 2025 02:00:58 +0000
Manifest this update: Sun 27 Apr 2025 02:00:58 +0000
Manifest next update: Mon 28 Apr 2025 02:00:58 +0000
Files and hashes: 1: mjQr1y7CThAMWtspCv07qky-Fa8.roa (hash: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=)
2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: YOU1Ct6R/mA+MskXzxQAk4CxP1sLmUKtx32oLlKVo1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:ec:13:4b:0f:eb:65:12:0f:8c:58:86:f5:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: Apr 27 02:00:58 2025 GMT
Not After : Apr 28 02:00:58 2025 GMT
Subject: CN=affa84577aa65236fdb4175f883961d0b591756d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:08:93:64:a4:1a:cb:17:db:68:b5:4c:9a:
88:53:19:e4:5c:b5:47:c1:18:ec:c5:ec:f1:cb:a6:
31:42:35:f4:d5:07:25:05:9c:b1:f3:e3:43:e9:75:
ad:ac:bf:e6:5e:ee:0c:a2:e9:50:33:ce:a8:fe:73:
7c:fe:28:80:b4:79:2a:70:88:1d:07:b4:69:76:3a:
aa:a1:cc:56:be:a8:82:45:5c:5f:a7:eb:c9:ba:d7:
c1:ed:cf:d6:5d:68:c8:7e:08:23:32:36:45:46:9b:
51:8e:77:55:15:17:85:f4:01:fb:0d:1b:6b:59:39:
28:21:4e:03:68:31:7d:8a:f3:3d:ea:91:15:a8:ef:
75:8e:93:21:c6:28:f4:b0:4c:47:12:f5:e8:99:b3:
a3:8f:75:21:27:00:35:89:f0:a5:b2:04:da:75:b9:
d7:c5:7a:37:f3:7d:d3:1b:93:5d:c8:b2:fc:c6:8c:
58:5e:70:b4:50:0a:be:27:bf:8e:12:00:b4:34:ff:
c2:a2:c4:0a:77:26:30:51:83:12:62:07:53:b1:73:
a9:e8:f6:d9:85:d8:71:d7:e0:c9:0a:df:ba:c2:9d:
85:9e:85:21:4a:bb:03:b8:fe:c3:d4:70:27:ca:4b:
5c:72:ae:71:b6:84:ea:84:82:ae:ef:db:f0:b9:49:
45:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FA:84:57:7A:A6:52:36:FD:B4:17:5F:88:39:61:D0:B5:91:75:6D
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0c:0d:87:ea:17:0e:04:d4:c3:04:04:1f:ba:60:a8:e7:e0:
7f:43:72:55:fe:9a:a4:b4:13:8a:e3:bf:69:b6:ff:2b:d2:1e:
c3:d6:1f:ba:8a:3c:3d:16:5f:03:c7:42:96:8c:d8:33:fe:b5:
74:4f:de:75:c7:44:2b:c6:ab:f2:d3:b6:c8:16:e0:14:fd:26:
cd:f4:ed:a0:ad:99:64:44:9c:1b:ba:15:5e:7d:c5:af:91:53:
cc:3b:49:59:39:59:ee:7a:02:95:88:2f:51:48:1f:e9:c0:a9:
24:ad:d3:d2:2f:ab:ce:1b:eb:8b:7d:56:e3:08:13:aa:8f:23:
c4:b2:1c:69:12:f0:80:ad:f9:d4:0f:ef:6b:04:cb:83:88:a3:
6a:d1:16:23:71:82:96:7a:6d:0e:1b:80:a4:f1:b8:74:63:ea:
e4:88:a6:21:42:ac:33:2a:41:ba:26:8e:e4:60:70:a1:70:c0:
34:0a:a4:e7:03:54:6a:ce:89:23:7b:11:fb:9b:e8:81:1e:2a:
bb:12:60:e4:6e:04:de:bd:a9:ef:d8:a0:c9:87:47:32:78:52:
b8:0a:67:14:3b:5b:29:f1:ac:2d:e4:49:6e:bb:dd:e0:80:33:
93:41:8e:84:b7:c0:5e:56:19:d2:4a:d4:f3:fd:f1:42:48:fd:
a6:ea:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:42 2025 by rpki-client