Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier: yX+4ZP2kNAmDM3LvYsHzLWGwy0M/i1pczcVVP5XIdMw=
Subject key identifier: EA:A7:63:8D:D4:62:1D:BC:03:D0:77:26:A4:03:44:EC:73:7F:85:83
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 01965838BE4510F935BE75B22815BE248C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 12:00:35 +0000
Manifest this update: Mon 21 Apr 2025 12:00:35 +0000
Manifest next update: Tue 22 Apr 2025 12:00:35 +0000
Files and hashes: 1: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (hash: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=)
2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: /Qffp6Fe2iOntCFDsA4eK5KL0RH9IqNt4HJOv1OPHvQ=)
3: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (hash: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=)
4: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (hash: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:be:45:10:f9:35:be:75:b2:28:15:be:24:8c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Apr 21 12:00:35 2025 GMT
Not After : Apr 22 12:00:35 2025 GMT
Subject: CN=eaa7638dd4621dbc03d07726a40344ec737f8583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cb:d7:e1:5c:66:28:01:c0:11:0d:4a:8b:d5:
12:6c:97:4f:24:b8:64:b8:a9:bf:88:ef:9b:8f:6c:
7d:8a:43:ad:98:57:b5:23:fb:ae:1a:32:3a:7e:28:
2a:e6:f7:de:82:18:e9:ad:78:c8:11:99:53:87:4c:
3f:8b:8b:80:1d:a7:41:48:fd:ff:77:37:a0:ee:b7:
24:10:99:13:2d:c9:b3:f6:b6:89:18:a6:09:48:32:
77:43:67:7e:b0:d3:cb:35:86:d7:a8:ae:bc:f2:d4:
84:76:8c:1f:85:af:34:7b:fb:63:0c:3e:46:e0:fc:
48:19:9e:45:f3:ed:b7:67:9b:c8:db:9f:21:3e:76:
91:1b:b2:5b:2e:79:4d:82:ef:90:a3:0b:68:72:08:
02:87:82:ea:74:a3:f9:69:f4:c9:6a:59:15:22:b5:
29:c3:a4:10:d4:4e:f7:bc:a6:5e:99:ca:3b:fb:17:
cb:9d:1a:d8:04:fb:3f:bd:46:52:f6:23:0f:0f:f2:
ba:37:9d:9d:91:05:cc:89:10:4f:62:59:3b:35:0c:
17:8d:c7:a9:36:b9:f3:52:cf:75:ea:da:ca:a9:9b:
e9:20:9d:e7:6b:a5:ff:1b:c6:f4:cb:35:9d:d0:fe:
94:cb:66:67:a9:b2:6a:70:be:d1:6c:00:03:ae:4f:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A7:63:8D:D4:62:1D:BC:03:D0:77:26:A4:03:44:EC:73:7F:85:83
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e8:68:2c:4c:15:3d:7b:d1:05:d7:ab:91:08:58:c7:77:40:
67:b6:69:ad:fd:58:0a:29:e0:6f:d4:ff:f4:e2:20:8e:21:44:
7e:3f:da:97:db:98:a2:a1:8e:64:7f:f9:47:88:e7:fd:b2:52:
39:df:20:bd:b2:ae:c4:b9:93:52:0d:70:e3:8a:3c:21:64:2c:
e4:00:c8:07:3b:a7:c2:0f:ce:97:3b:04:fc:71:1d:7c:cd:4a:
f4:56:9f:40:b5:74:91:75:fc:74:45:7b:2b:a0:0d:7e:06:b7:
ef:5d:d8:4d:4e:ab:83:a5:90:fa:a2:f1:88:1d:e8:1e:e6:84:
b4:1e:08:f2:1d:22:cb:a6:7a:fa:e5:0f:21:e2:b1:4b:69:41:
fc:64:9c:fd:68:30:ca:5a:69:22:12:d2:1c:13:1f:56:1f:23:
a2:c4:83:49:52:9e:99:27:99:80:52:73:8e:10:93:00:47:91:
cd:c1:7d:f8:0d:fd:f8:d2:e6:9e:60:9a:45:5a:96:bd:6c:82:
3f:a4:b2:f9:8c:73:16:2f:78:f2:97:37:36:0c:08:9d:4f:bc:
90:6d:ee:da:94:02:7f:d6:f4:3f:82:6e:92:db:4d:d1:83:29:
c5:ca:aa:f3:08:25:61:67:47:85:9b:ca:d8:7f:8d:f0:0d:f8:
81:e2:d0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:01 2025 by rpki-client