Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: YwPcFp7IvrtHUVAMqqJ3wcBr58hvwxVSvrrEF4zWosI=
Subject key identifier: 00:1A:6E:F9:95:F5:84:69:AC:1B:A4:1B:08:8D:39:D3:EE:09:E0:95
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 019659147DF9B98A7AA51C26B844B82ADD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 142C
Signing time: Mon 21 Apr 2025 16:00:37 +0000
Manifest this update: Mon 21 Apr 2025 16:00:37 +0000
Manifest next update: Tue 22 Apr 2025 16:00:37 +0000
Files and hashes: 1: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=)
2: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=)
3: DYfn4v-d9LSJeRa5vvT-XfYyk70.roa (hash: 8mWNIGwTXO4I48gUsi1UHbc5uoPvj6DJfzAi/IGU5v8=)
4: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: /DuxKgBfAtt+Fw9PYEa1+uUEZ+WfS6jBaA1yp7ikMOE=)
5: lSP4K3mfoxcgowofKtKedL6Fcrk.roa (hash: ejPoRQTQJw87tbzyuSoPJnPZJPT0D2gWvsWUm5z3CsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:7d:f9:b9:8a:7a:a5:1c:26:b8:44:b8:2a:dd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Apr 21 16:00:37 2025 GMT
Not After : Apr 22 16:00:37 2025 GMT
Subject: CN=001a6ef995f58469ac1ba41b088d39d3ee09e095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:3d:5e:26:11:19:a1:fc:fd:28:97:cb:b6:
67:f1:bf:77:67:5f:5c:1d:a5:a3:2c:20:3a:89:94:
7f:97:7f:6b:82:5a:ac:43:f8:27:b5:d2:f0:42:30:
bb:db:22:7b:cb:6e:31:79:dc:33:d6:2e:36:85:5c:
22:44:ef:e1:a1:54:fe:8e:a5:6a:33:dd:10:0f:68:
ac:06:6c:1e:c2:9f:60:e8:05:92:11:23:7a:aa:f9:
af:c3:e9:8e:ac:18:dd:ee:14:e8:35:89:7b:d2:45:
dc:5b:db:06:7c:16:cc:0c:4b:ab:6a:ab:0c:d9:a0:
71:c8:d1:e1:dd:5d:e4:b5:7e:22:da:7d:2a:f2:6a:
fd:d5:36:5c:03:70:ca:25:b8:f6:ec:63:10:72:4e:
44:11:7a:b6:d3:c6:94:d0:53:11:cd:b1:f0:e1:eb:
5d:2c:bc:38:3f:98:9e:cf:6b:8e:4b:07:11:c8:d7:
da:45:d7:e0:56:22:0c:4f:c0:77:e8:91:3c:f0:f3:
29:bf:6b:1d:1a:a6:f5:dd:30:45:f6:72:f6:d5:bb:
06:65:2d:73:7e:bd:fc:d0:7f:1a:14:1d:28:df:6b:
2e:d6:55:11:d2:55:d4:6a:ae:11:03:91:7b:b1:0a:
3f:2f:37:4e:8a:e4:a8:4c:40:c8:d3:47:e3:63:ee:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1A:6E:F9:95:F5:84:69:AC:1B:A4:1B:08:8D:39:D3:EE:09:E0:95
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:16:bc:70:1a:e0:b1:f4:88:94:e5:27:ef:be:a8:a6:ff:ee:
cc:e7:4d:6f:f1:b3:75:7f:95:9a:36:d0:8e:8b:00:1c:1e:90:
da:e5:8b:b8:06:f1:29:b0:ae:12:c4:67:93:37:eb:ea:b2:74:
f6:8c:81:60:8c:f9:a7:77:e8:08:d4:98:20:36:85:51:8a:7f:
91:e3:e8:5f:91:e9:f0:cc:b6:4d:41:69:0a:8b:39:17:87:5a:
e0:78:af:9c:dd:c5:0d:d2:0c:b7:7d:c4:dd:bc:99:8e:f9:95:
1c:8b:85:d1:ff:6f:6a:f8:80:b6:60:19:0a:c4:ec:3a:0f:e2:
c1:7d:18:7e:cb:b3:21:03:ea:8e:8d:78:2f:6c:2d:6f:4b:5c:
11:e5:01:09:aa:c0:96:c7:64:d1:f5:c0:7b:f1:9d:b7:f8:ee:
91:e4:5e:e6:92:b5:5c:2c:76:1c:38:74:80:15:69:31:5c:49:
09:fe:00:4f:96:65:a9:4d:b8:88:97:d9:e7:34:e8:fb:e2:0b:
d5:3e:69:ab:19:5e:ad:19:a3:35:bf:33:52:f1:39:9e:ac:03:
78:54:5e:d8:31:e7:1b:76:f3:08:21:49:fe:1c:36:ba:15:7e:
48:ec:33:c9:dd:cd:58:89:56:82:c0:dd:7f:e9:4a:47:32:d1:
c3:e6:a2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:22 2025 by rpki-client