Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: iRHJyxHVAtskHzQj0fetlvn+DW/YEgR7cARoq1USUPo=
Subject key identifier: 82:51:B6:50:BF:6E:99:C9:20:9D:B1:E2:CD:A2:9E:26:F1:DE:A2:24
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 019608D51960AC74B15E23E608C9D03207CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 108C
Signing time: Sun 06 Apr 2025 02:01:45 +0000
Manifest this update: Sun 06 Apr 2025 02:01:45 +0000
Manifest next update: Mon 07 Apr 2025 02:01:45 +0000
Files and hashes: 1: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: S2IyNo2iIfIS1NP0igI4D1VbQjgipZxHrogoSFHBYLI=)
2: mvLDmuyuUuZFiCTIw_g9i8uNgFg.roa (hash: GZj+Xi5SIMQUMGweRfOhuKIks60lK9TTGOmmhsaxut8=)
3: zURslIPoCzmuF9cVBs91SF_jfZs.roa (hash: PBlZSBkxr5D+YnPFObnzHQvndsM2zZG1fAG0x5+wRk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:08:d5:19:60:ac:74:b1:5e:23:e6:08:c9:d0:32:07:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Apr 6 02:01:45 2025 GMT
Not After : Apr 7 02:01:45 2025 GMT
Subject: CN=8251b650bf6e99c9209db1e2cda29e26f1dea224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:25:54:f5:cd:1c:43:63:52:fd:fd:09:a5:
b1:a0:52:2c:39:ca:cc:76:18:c0:1e:3e:48:fa:ad:
c6:04:57:3a:76:11:42:1b:99:7c:71:34:35:55:df:
7a:58:5e:cb:a8:32:2e:a3:54:a5:bd:6a:64:23:0a:
bc:ac:09:43:97:2c:d1:7c:4c:cf:69:45:c8:f6:ac:
a5:1f:01:8d:dd:36:58:38:52:7e:dc:85:2e:40:c6:
be:c5:86:1e:78:2f:cf:b3:c8:aa:f0:4c:7e:f6:02:
a6:e5:62:fd:ee:57:8e:a5:c9:af:e1:36:da:9e:fd:
37:bc:52:7d:1c:d2:89:37:1d:a3:0e:55:13:26:8b:
ad:2e:55:87:a3:4d:14:b8:36:3b:d5:e1:ef:f9:f7:
eb:a9:b9:a2:f5:ba:53:44:03:9d:ad:55:ad:88:8e:
f0:bc:b0:cb:4f:fa:1a:75:33:15:68:44:c7:5d:14:
05:8c:9b:06:29:bb:f7:95:bb:8b:74:65:3d:d8:3e:
1b:f7:c0:3a:02:2c:c6:86:f4:ea:1e:83:95:5d:f6:
f8:16:82:48:da:54:bd:58:89:f5:d3:db:b1:4e:d4:
56:90:b6:7a:e6:be:ec:52:14:8a:df:95:0e:92:ab:
58:ea:63:79:73:45:07:75:7b:8a:b8:0e:e4:7f:7f:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:51:B6:50:BF:6E:99:C9:20:9D:B1:E2:CD:A2:9E:26:F1:DE:A2:24
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c6:2e:35:08:85:6c:e3:41:f5:9b:44:5d:4d:7e:23:14:5d:
96:fb:f9:51:15:bc:4e:4c:ee:c1:51:41:d4:d4:16:54:f4:e8:
ea:aa:7c:35:74:04:79:dd:90:f1:f7:31:63:93:9f:53:a9:f4:
c4:26:4f:04:d6:e7:fa:6d:6c:26:08:c4:b2:7e:20:f9:43:71:
4c:5b:b7:5b:3b:a3:48:04:eb:f0:95:44:87:7e:cd:aa:f2:e8:
96:0c:8b:8a:91:58:a9:3a:91:c2:67:7c:c8:21:2b:b9:44:88:
4f:f3:bb:16:34:eb:ef:7b:d6:b9:e8:1b:fa:5a:31:fd:a9:fd:
0e:a9:fa:5f:a1:a9:6a:d3:c0:1e:ef:fa:90:a0:e1:f2:6a:46:
9b:c0:7b:12:7f:f5:50:35:31:88:40:fa:29:1a:21:c2:8f:c6:
4d:23:aa:18:e4:78:14:35:1f:37:8e:df:40:10:6c:2c:31:23:
76:28:5b:ca:67:39:37:4a:30:b7:f9:45:09:04:f8:77:c7:08:
f9:32:db:0a:8c:f4:0e:a1:50:99:39:95:0e:ad:63:0f:0f:0c:
90:aa:d3:84:be:32:df:68:27:c9:71:6c:ec:4e:50:85:a6:ef:
c4:b6:0d:45:12:b3:6f:3c:1c:7c:c0:c5:27:97:54:47:b4:6b:
a3:e4:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:11:52 2025 by rpki-client