Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
File: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft (raw, json)
Hash identifier: 0Cid/7AaC7Gg1RbxUl1UzYBTTVTNtKpnPDS9UEGx8uc=
Subject key identifier: B0:35:E4:15:9D:75:1C:33:BC:3E:D9:9E:16:A2:AD:EB:A8:B4:66:40
Authority key identifier: 3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
Certificate issuer: /CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Certificate serial: 01965794738984D04269BA57728C5113B517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
Manifest number: 01F2
Signing time: Mon 21 Apr 2025 09:01:08 +0000
Manifest this update: Mon 21 Apr 2025 09:01:08 +0000
Manifest next update: Tue 22 Apr 2025 09:01:08 +0000
Files and hashes: 1: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl (hash: 7Kzc7c5Z+KvTbGQK2odTxLa0VA55XCg7LMg40QXSFXs=)
2: x_RfurRNedmEj2hSqHVNcrKbV_E.roa (hash: 8G+RNYkhEQwOffPjlh7thkZsriDB79Nwv1PSXlUOkh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:73:89:84:d0:42:69:ba:57:72:8c:51:13:b5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Validity
Not Before: Apr 21 09:01:08 2025 GMT
Not After : Apr 22 09:01:08 2025 GMT
Subject: CN=b035e4159d751c33bc3ed99e16a2adeba8b46640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:89:f6:87:9a:5a:11:de:3d:f0:82:a3:72:
b1:aa:52:89:92:37:18:9a:ec:2e:8e:5e:10:f6:87:
82:0b:d1:6c:e0:89:f8:50:22:0b:4c:f8:96:8a:3b:
ad:24:c7:c4:bb:d8:4e:0e:b8:06:1f:9a:fc:58:25:
8a:79:68:e9:16:09:ba:0c:17:24:9c:3e:eb:31:46:
f5:0d:ff:7a:53:5e:99:71:3e:9c:1b:f3:60:15:80:
92:c8:5b:f5:c8:c4:f0:b3:db:e1:b1:b8:35:08:14:
24:0e:bb:a4:52:5d:80:40:4c:64:50:a4:81:ef:3c:
a2:e4:73:2a:a7:4d:ba:c1:94:82:03:3f:78:91:e5:
f8:bf:d5:f6:cb:8a:3e:03:3f:e9:10:52:c6:a9:bf:
c9:2c:09:10:be:02:e6:2d:2c:a4:33:19:58:f8:67:
6a:56:7c:af:61:4e:8d:d2:4c:2c:67:4d:73:0a:a7:
84:04:df:72:a4:93:83:8d:99:10:a0:5e:5d:27:9d:
17:ab:80:f4:f5:fa:6a:ff:6c:41:30:d6:f6:d4:27:
fa:3a:02:53:73:d5:d0:66:1b:71:d8:6a:b7:cd:dd:
87:9d:eb:88:2f:d6:0b:93:41:cd:15:79:b6:1b:02:
65:c7:48:e5:ab:b2:b7:d3:c5:52:5e:4d:9b:46:9d:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:35:E4:15:9D:75:1C:33:BC:3E:D9:9E:16:A2:AD:EB:A8:B4:66:40
X509v3 Authority Key Identifier:
keyid:3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ff:63:63:b2:91:af:4a:a7:4e:32:69:18:ea:b9:19:f6:b9:
a9:d3:e5:6d:61:97:97:b1:60:f7:52:ec:61:6a:99:70:07:fb:
ec:58:4c:b0:a3:39:39:9e:a1:e2:af:64:5e:9b:b7:d6:7e:ed:
67:6f:24:a3:e2:b3:ec:f6:f8:41:d5:fc:43:be:08:25:f8:31:
d3:3b:f3:25:cd:47:62:cc:67:1d:35:37:ac:ba:b6:cb:3e:a3:
7a:b6:96:81:18:0e:a4:c8:cc:b4:f6:61:c9:e3:f3:d7:14:0e:
66:61:ac:16:7c:e0:99:39:36:69:55:9b:90:5b:3a:19:42:00:
8c:96:3e:59:c1:67:00:db:4d:18:32:b5:e9:cb:53:d5:f6:13:
29:36:b0:7e:1f:db:4b:92:56:1a:55:5c:c0:7a:fa:d9:88:06:
37:c7:cd:29:15:24:2e:ba:7f:d1:02:43:e3:67:50:32:19:8e:
7b:be:81:ba:25:91:96:00:c9:63:01:2e:92:38:ce:b5:21:3f:
b4:55:06:f3:18:13:97:51:ad:77:85:b0:98:64:d3:68:89:80:
ef:6e:68:a5:39:41:e1:f9:cb:eb:1a:8b:b6:5e:cb:59:06:68:
17:4d:48:bd:12:41:4b:fd:46:8d:51:90:8c:4a:25:f0:ef:7a:
76:30:9b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:23 2025 by rpki-client