Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: P1vjPEEwiVDWv5SzrQadxi7DBvyQZmGv1CMzE1F25W0=
Subject key identifier: 17:B7:96:C7:B0:CD:AD:59:59:1B:2F:B1:10:73:DD:30:33:5F:D9:75
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 019675306AFE19400E1A01FFBBAC40849F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 08FF
Signing time: Sun 27 Apr 2025 03:00:29 +0000
Manifest this update: Sun 27 Apr 2025 03:00:29 +0000
Manifest next update: Mon 28 Apr 2025 03:00:29 +0000
Files and hashes: 1: J_w-klg8Fz7usxtg6f6kBplmW2Q.roa (hash: wSUiP/GQT3afkhYb4zAVk2weNrXx80BBBUvY2crSbB8=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: os3GpygSmfWQeVlSkZiPbuJb46UW4kPedYW5kg7NA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:6a:fe:19:40:0e:1a:01:ff:bb:ac:40:84:9f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Apr 27 03:00:29 2025 GMT
Not After : Apr 28 03:00:29 2025 GMT
Subject: CN=17b796c7b0cdad59591b2fb11073dd30335fd975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4d:99:53:4a:78:d9:ec:bb:ea:45:08:66:57:
d4:0e:af:ab:43:75:6b:76:54:48:98:ec:a8:47:15:
78:de:d5:99:cf:0e:64:fb:b2:f7:76:bf:47:f0:99:
d7:5a:63:15:32:9a:2f:89:9d:df:6b:a7:58:3a:ce:
30:2c:2f:8d:88:1e:22:fa:08:4c:b0:27:c4:ef:64:
16:ae:6e:77:f9:1a:47:d7:ab:7e:d3:1f:59:89:a1:
4b:44:ea:0f:ab:53:51:2c:78:cc:fc:7e:7b:db:4b:
68:d9:6c:6a:d4:34:1c:0f:25:63:03:d2:34:f7:a5:
f8:59:9b:b3:62:dd:96:8f:53:6e:c5:e7:32:50:64:
04:aa:a6:9b:c5:99:e4:a4:a5:6c:e5:a5:aa:55:67:
49:ad:27:3c:88:a3:5b:22:be:31:28:96:eb:9a:7d:
11:47:ff:35:6e:a2:21:fe:5d:fe:c1:76:f0:3c:e7:
17:2e:dd:b6:e0:8c:cf:cf:53:f5:d6:4c:ce:8b:f2:
8a:7e:44:dd:86:2b:ca:17:e4:cb:55:fa:94:b6:ed:
19:29:48:c7:c1:b3:18:35:cc:8f:d4:af:5c:f9:d8:
33:23:73:5d:d4:93:e8:0f:80:ad:69:11:4a:ff:ec:
20:78:46:49:57:50:46:09:ea:16:62:ba:b4:6d:35:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B7:96:C7:B0:CD:AD:59:59:1B:2F:B1:10:73:DD:30:33:5F:D9:75
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:92:9a:83:50:a1:4a:ec:29:2a:1b:06:b4:2e:cb:c4:2c:79:
57:d2:93:7a:7d:be:87:56:86:d3:61:0e:8b:bc:fd:6d:60:92:
0d:bc:53:cf:a0:e6:e0:ae:26:9e:32:ac:59:1f:e8:e1:3a:a8:
0c:fa:7f:3b:08:a6:f0:df:3f:ff:37:a4:72:bc:73:d2:36:a7:
9b:53:fe:cb:cf:90:95:7d:0c:64:fb:ce:0a:9d:14:92:c7:e9:
c9:43:b6:da:e8:9b:e2:c4:0a:d0:09:7d:06:84:ca:88:8c:28:
03:7d:6c:80:0c:83:df:93:bd:52:17:6f:2b:15:98:7c:da:bf:
60:39:57:44:c8:ef:a5:a8:a0:b1:79:9c:d9:bc:a8:9d:cd:04:
41:49:17:24:d8:2c:90:30:9c:37:5b:5f:1c:11:5a:b9:a6:62:
09:17:20:9d:7f:0b:00:35:24:3f:fd:68:a6:52:6a:98:87:fd:
10:40:98:c4:a8:07:1a:8a:2f:96:38:41:36:68:e8:9b:34:bf:
65:86:d4:b7:2f:e6:1d:63:a5:4d:cc:6c:b2:a6:23:9c:df:b6:
0b:49:2e:65:ce:e0:b5:1e:b2:0b:e6:49:d5:11:c5:13:c0:79:
52:9e:84:d1:59:bc:7c:c4:88:99:c2:ab:e4:43:6f:fe:28:63:
d6:91:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:56 2025 by rpki-client