Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
File: PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft (raw, json)
Hash identifier: p7McsFBI/BmdX3L00yA6JnRuwmIYB++iFZS0iPbnaU8=
Subject key identifier: E0:9F:E5:2B:69:BB:5B:43:68:20:85:A5:E8:93:87:DF:A6:AF:D1:46
Authority key identifier: 3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
Certificate issuer: /CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Certificate serial: 01965B02FD6B8F7289EF57371BE769405A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
Manifest number: 12EF
Signing time: Tue 22 Apr 2025 01:00:44 +0000
Manifest this update: Tue 22 Apr 2025 01:00:44 +0000
Manifest next update: Wed 23 Apr 2025 01:00:44 +0000
Files and hashes: 1: PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl (hash: XXw7bqzUovtRVEhZEbh2U4NzcoTi13e4Cw/p+JZ+Nnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:fd:6b:8f:72:89:ef:57:37:1b:e7:69:40:5a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Validity
Not Before: Apr 22 01:00:44 2025 GMT
Not After : Apr 23 01:00:44 2025 GMT
Subject: CN=e09fe52b69bb5b43682085a5e89387dfa6afd146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:6d:9a:0b:ee:4e:85:30:37:52:1c:5d:8d:
0a:f8:90:3e:66:cb:4c:dc:6e:65:42:b1:a9:30:ee:
4f:f8:99:90:cf:fb:ab:65:6b:15:1f:67:44:38:28:
5c:62:28:1a:97:3b:e8:3a:d8:bd:d5:67:e7:6a:11:
15:f2:dd:5e:1c:a9:93:5c:b4:c4:21:51:da:c0:d3:
96:8e:b6:e3:65:4d:2e:0c:2b:d1:ba:95:9a:f2:39:
3f:1e:31:3d:5a:33:62:26:68:62:84:ca:94:0d:48:
54:86:44:52:20:1e:6c:2b:c3:46:26:fa:5f:28:88:
6f:85:73:9b:7c:a0:af:19:6f:35:df:fd:3d:c4:46:
23:00:88:e7:2c:b0:9f:2b:28:3d:2c:57:38:62:bf:
47:09:b7:46:f3:93:d3:12:a1:be:53:cb:ac:22:3d:
44:a8:55:8d:e2:ce:7a:dc:58:71:12:4b:7e:ba:12:
f3:79:ef:8a:da:44:02:7a:49:55:c7:a1:02:a5:f3:
d8:be:d8:b6:e5:5c:97:21:26:6f:13:fe:88:d8:86:
1e:17:20:75:ba:b4:31:45:b4:28:e8:c9:f2:48:8a:
3b:52:84:f0:dc:9a:0f:2d:d3:c4:38:6b:1f:1a:86:
4e:25:0a:ff:9f:c7:96:56:91:9b:77:3b:b9:6f:2b:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9F:E5:2B:69:BB:5B:43:68:20:85:A5:E8:93:87:DF:A6:AF:D1:46
X509v3 Authority Key Identifier:
keyid:3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:90:79:53:30:11:b6:c3:3e:5a:65:2b:ae:8b:27:0c:37:11:
18:1e:99:04:0c:55:2d:8d:6a:e9:5d:57:a2:16:08:2b:89:5f:
b4:1f:ee:ed:85:09:ec:3d:e5:ea:0c:b3:c9:74:7e:7c:04:e2:
35:48:fa:82:5f:af:0f:e5:7a:7c:72:ed:32:c3:aa:86:bd:16:
87:2b:df:3d:c6:ef:2d:c4:12:12:4b:62:15:fd:1c:83:e5:89:
f6:11:3e:c8:9e:94:41:65:0d:2e:02:95:ba:75:71:f0:eb:7a:
54:be:82:54:32:05:63:1f:be:4f:67:82:48:11:3e:96:16:5f:
2e:d8:b3:b1:c2:4e:55:88:36:9f:cf:4e:9e:13:8c:a4:53:4d:
3a:71:fe:59:66:0d:91:45:db:de:50:3a:36:54:24:d9:fd:be:
31:08:a6:02:2f:6b:e0:39:0c:96:bd:2c:0b:59:d8:96:34:a6:
2c:11:ec:8a:a6:fa:42:2a:ae:31:51:98:f6:0e:b0:e4:f3:59:
52:34:af:f4:2a:8f:dc:df:b2:a8:78:c0:4c:50:70:89:30:c8:
97:6e:5a:c8:c5:04:28:6d:db:86:c4:ed:b4:79:4e:61:d7:b3:
bf:3a:87:9c:94:9d:bc:90:30:7d:67:ea:a3:11:b1:62:5b:99:
12:ae:21:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:30:27 2025 by rpki-client