Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
File: PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft (raw, json)
Hash identifier: 8VRW+Unkmh7bE0GmbPYMShcwKdMEgSlw/iIb4sAMeHg=
Subject key identifier: 94:B6:70:D5:6B:9E:AD:93:E1:AA:44:70:82:C8:06:F8:3E:70:ED:16
Authority key identifier: 3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
Certificate issuer: /CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Certificate serial: 0196556E8CB58E77B7612F15CD0CF6F88475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
Manifest number: 0C6F
Signing time: Sun 20 Apr 2025 23:00:30 +0000
Manifest this update: Sun 20 Apr 2025 23:00:30 +0000
Manifest next update: Mon 21 Apr 2025 23:00:30 +0000
Files and hashes: 1: FYDxNKC7eVGhTXJyh7DYdQpF13Q.roa (hash: QGlq0akFOdxYp0jPfxez742IAGFVAdJ6BpKN9aAo6FU=)
2: PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl (hash: WDDloeIScH1kpnvGg+PqJP5ed7lBx0BjkMqhMI/yn/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:8c:b5:8e:77:b7:61:2f:15:cd:0c:f6:f8:84:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Validity
Not Before: Apr 20 23:00:30 2025 GMT
Not After : Apr 21 23:00:30 2025 GMT
Subject: CN=94b670d56b9ead93e1aa447082c806f83e70ed16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:0c:42:0f:db:2b:b4:1b:37:da:4c:02:fd:
6d:84:42:dc:bf:13:54:20:02:bc:5f:05:99:59:cf:
ac:f3:b8:51:95:3d:8f:c4:86:80:50:12:18:6e:69:
b8:58:f6:e4:9d:d8:d4:28:3b:db:25:e2:d7:c8:c1:
3b:7a:d9:f5:b1:65:e2:56:35:b9:d3:65:e4:bd:f8:
3f:ae:95:f3:9b:a3:4f:e4:b5:23:2e:3e:9d:6b:24:
8a:4a:89:8c:63:8d:1d:dc:07:57:eb:11:2c:3c:db:
de:ba:69:36:7b:ba:92:9a:1a:9e:36:8e:b3:1f:48:
a3:2a:f6:09:44:3c:2a:47:ec:58:37:bd:fe:79:04:
3a:bc:71:57:2d:86:c2:8c:38:77:06:86:24:13:27:
7b:9f:c8:2b:27:49:c8:83:15:c2:a5:05:c1:71:7b:
0c:8d:31:20:b2:20:4e:66:74:14:e5:f9:64:52:41:
d9:78:7b:61:d6:b7:4c:91:bc:83:e5:a1:e9:b1:57:
7d:86:cb:6d:1a:22:ec:b4:c6:26:7a:10:3b:22:61:
5d:15:31:2a:c3:a2:f9:e4:83:ea:b4:01:02:58:a9:
ef:4f:b0:79:c8:b1:e4:5d:eb:a1:0c:b8:b0:ea:f7:
0f:b5:07:9d:49:5c:9f:5e:b3:37:ca:49:3a:b2:a0:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B6:70:D5:6B:9E:AD:93:E1:AA:44:70:82:C8:06:F8:3E:70:ED:16
X509v3 Authority Key Identifier:
keyid:3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:96:e4:d4:df:21:78:87:7d:08:bc:93:c4:c9:9f:cb:f1:e0:
d8:5c:5c:79:5d:db:43:03:9a:a7:58:ed:08:06:94:c3:9e:68:
1f:2b:25:32:98:e5:d3:c0:58:dc:d1:76:d5:2d:bd:88:a9:f6:
a4:5a:c1:9d:a5:39:0c:3d:35:e2:dc:14:94:7f:60:0e:67:19:
43:11:55:b1:a6:79:f4:d6:eb:fa:d4:29:5d:2f:be:b8:ca:56:
0d:64:3b:2e:b5:0a:16:e9:19:9b:98:06:09:45:cc:e3:a9:73:
7f:1d:f4:c8:59:16:df:b0:42:26:a9:b7:1f:7f:a3:cc:8f:28:
fd:e8:12:30:b8:f5:d8:5b:65:26:3a:ad:72:66:2b:86:f0:2a:
e1:4f:4a:c2:f6:60:4b:74:7a:86:17:59:43:2b:32:84:62:a2:
67:44:72:9c:ee:4a:80:6c:c5:2c:22:ac:88:c5:40:15:6f:41:
02:a0:32:6d:cb:3d:41:6f:26:28:95:22:09:cc:aa:c7:c5:b0:
24:36:63:67:c0:73:0e:e0:2f:98:50:ab:83:dc:71:e4:4b:aa:
14:36:cd:4d:14:2d:53:41:df:b2:44:f7:47:08:0f:98:89:cf:
54:0e:dd:a3:84:fd:e9:68:37:8e:1a:99:34:05:ff:90:be:3f:
1c:40:b2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:04 2025 by rpki-client