Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
File: PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft (raw, json)
Hash identifier: F6p7/IJKjG/zxzExeeDP6eg1xgElvaoAWFtreYBHe/E=
Subject key identifier: E2:1E:D1:1D:FD:CB:70:8B:48:56:AF:62:F6:B0:06:A6:A5:48:9B:17
Authority key identifier: 3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
Certificate issuer: /CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Certificate serial: 01965BA7B4D44B5737FFF8873146ED8AE91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
Manifest number: 0C2B
Signing time: Tue 22 Apr 2025 04:00:39 +0000
Manifest this update: Tue 22 Apr 2025 04:00:39 +0000
Manifest next update: Wed 23 Apr 2025 04:00:39 +0000
Files and hashes: 1: AuOuUKhz7LbWM9xXAFqUFIS1KQI.roa (hash: yQUlcBfkC7CQTeK1Wv3DBode7pqw+A1kJYyGEQOXp9g=)
2: PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl (hash: 1k5GgIKirnu30LX83wlFJnEDdYkctcq4rPAzDg+08HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:b4:d4:4b:57:37:ff:f8:87:31:46:ed:8a:e9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Validity
Not Before: Apr 22 04:00:39 2025 GMT
Not After : Apr 23 04:00:39 2025 GMT
Subject: CN=e21ed11dfdcb708b4856af62f6b006a6a5489b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:fe:f0:26:70:c1:fa:31:a2:63:21:ee:7d:
2f:e6:a6:d8:0f:b4:df:0e:9e:0a:f0:ce:a8:71:33:
e5:89:11:00:25:1e:9e:b7:ba:b6:b7:65:26:8e:04:
13:f6:d8:da:1e:78:e6:90:60:1d:a7:0e:1a:9d:5e:
13:6e:64:5c:fa:3c:cd:de:24:1e:98:02:0e:ea:d4:
a8:0d:bb:82:9e:a0:78:a0:d2:09:3f:5d:03:6d:6e:
54:4a:eb:0c:2a:40:4e:d1:34:f3:1d:7d:5f:51:31:
63:4e:25:65:d6:b4:d9:83:de:91:20:a5:4a:fb:a8:
24:29:cf:2e:a4:a9:64:1f:59:1b:3d:56:80:a7:72:
cd:37:55:c8:5f:6c:6e:25:6e:19:ca:d8:63:b8:ab:
82:6f:69:e5:e8:08:5f:6f:a9:5e:0f:69:95:ce:9f:
c9:d2:6a:ba:4f:af:df:c4:ab:73:2f:0b:a0:3e:d0:
fb:98:40:85:01:0c:1f:c8:8c:1d:a3:8a:ab:2e:b1:
42:e6:5c:60:ed:0d:55:a9:fa:90:3b:e2:a8:b2:c6:
46:0f:2e:fd:2b:09:c0:63:6d:f0:1f:64:ef:60:b5:
3d:6c:6f:ea:9e:3b:b8:fd:ea:91:22:38:8c:08:6b:
d2:61:35:6c:f1:55:15:58:63:9e:b3:46:36:9c:a5:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1E:D1:1D:FD:CB:70:8B:48:56:AF:62:F6:B0:06:A6:A5:48:9B:17
X509v3 Authority Key Identifier:
keyid:3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:87:6d:f4:11:3c:97:35:64:36:bd:69:2e:12:a6:e9:ef:6e:
95:fd:59:96:2a:62:09:8a:bc:e3:de:f0:0d:84:33:a1:b6:0e:
a0:f6:e3:3c:d1:4d:6f:c9:7a:a6:ca:e6:d7:ab:60:aa:be:35:
a3:d5:fe:11:8f:6e:4d:7b:76:f0:7e:04:e2:9c:56:0e:c6:28:
11:3a:d4:9a:fd:99:6c:5d:44:02:95:eb:d2:3e:dc:43:0c:98:
a8:c0:fa:9d:42:44:e6:75:53:7d:01:87:4d:04:6a:a8:e4:53:
5b:82:48:2d:07:57:92:03:16:79:5d:d7:91:b2:8a:55:ba:85:
73:da:c7:bf:bf:bb:5a:c1:02:63:66:f8:ab:fa:5f:3a:eb:63:
d6:f0:91:0b:a9:d9:52:95:e5:0a:3f:18:0c:b4:ad:18:dd:da:
db:ba:44:62:c7:ae:54:bd:e8:99:f3:3e:a8:b8:52:9d:da:66:
f9:9f:99:ef:62:55:1d:85:38:4c:fe:45:f3:9c:90:a5:58:57:
a5:e8:e6:b3:c0:da:4f:dc:19:f5:40:27:98:b6:6e:bc:7c:fe:
53:a0:98:ae:40:0e:19:7a:4c:df:c2:82:8e:a6:a3:76:de:6c:
04:4f:87:17:52:b4:97:b4:61:14:5c:06:0b:22:ba:71:99:0e:
6f:d9:7a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:57:34 2025 by rpki-client