Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json)
Hash identifier: SJTRJjH8zuTdopBAmzifaC0v6oGG+dj+3w3u3XSuCEc=
Subject key identifier: 15:49:67:36:98:DD:98:E6:86:0A:E4:DD:B3:C6:87:5F:FC:F0:07:4F
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial: 0196594B17CC6B240A1E7240218766BB0B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 17:00:15 +0000
Manifest this update: Mon 21 Apr 2025 17:00:15 +0000
Manifest next update: Tue 22 Apr 2025 17:00:15 +0000
Files and hashes: 1: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: uqF1+mYTgcvz2sWnSz5TDLinmii9EKDINvuSCD5h1xA=)
2: idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa (hash: UXJcLdtFjpO9Edbh8qYFBpHmdjidm11out2Ag90FqaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:17:cc:6b:24:0a:1e:72:40:21:87:66:bb:0b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Validity
Not Before: Apr 21 17:00:15 2025 GMT
Not After : Apr 22 17:00:15 2025 GMT
Subject: CN=1549673698dd98e6860ae4ddb3c6875ffcf0074f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:a0:5d:40:dd:48:d0:2c:9f:e7:18:18:7b:
b9:71:a2:c6:29:22:19:a2:6f:16:f7:fd:08:26:af:
63:cd:f2:63:3c:54:34:d3:0c:56:48:1f:55:44:70:
6b:13:cc:68:06:d5:1c:cc:2d:e4:dc:29:d7:59:8f:
f9:20:59:d0:cd:80:56:c8:f2:3f:65:3e:99:f1:d8:
21:44:81:e8:c7:bf:f4:f9:de:dc:1f:2b:eb:3d:2a:
99:50:50:6d:65:57:19:68:fb:06:be:a1:98:f4:03:
67:a6:b0:0e:ea:11:19:ee:51:ef:f0:0a:98:33:a9:
5e:b8:89:7c:2a:33:60:68:78:78:46:0e:10:89:54:
8c:98:6c:1e:88:39:d6:cb:02:5c:ce:ad:bc:f9:59:
78:f2:81:f0:2b:fd:a1:80:e6:7a:37:c6:6f:7a:7e:
f8:33:d7:64:70:e7:a0:e2:d1:05:17:30:9b:bc:66:
4a:ed:f8:30:37:cc:4e:09:97:1c:12:df:f2:68:7d:
1f:02:3a:ef:04:33:d3:22:af:8d:a9:97:8e:5d:a3:
70:b7:6f:82:23:7a:0b:c0:56:d5:4d:41:33:41:5b:
2f:54:6a:f3:bb:4b:93:75:77:8e:25:99:51:8b:87:
9e:c9:f9:0d:e5:34:68:99:d2:56:5c:ac:e6:36:c4:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:49:67:36:98:DD:98:E6:86:0A:E4:DD:B3:C6:87:5F:FC:F0:07:4F
X509v3 Authority Key Identifier:
keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c1:63:44:d3:f3:31:89:13:fb:b0:0d:02:0a:1f:9d:bf:85:
e9:7f:38:9f:22:bc:75:13:30:52:87:3a:05:b9:68:0f:e0:22:
e9:c7:22:ce:fc:9f:06:b6:e9:c6:45:41:bb:1b:9d:90:93:89:
00:94:cc:7b:d0:92:b3:53:28:75:dd:94:6c:17:1a:c5:ae:81:
15:d5:b0:ca:4d:d6:1a:cc:40:2a:54:fb:c2:d5:c2:12:26:39:
5e:cb:b8:45:94:04:1e:9e:db:a4:fe:77:9e:47:c2:7f:f0:75:
d3:bb:10:02:0d:45:d6:5d:19:18:65:07:c0:8e:16:93:36:86:
ea:da:3f:5d:75:47:00:40:df:7f:29:48:27:e2:52:e3:c0:4d:
91:ce:f0:cb:95:01:98:c8:5b:f2:7d:11:33:cb:fa:19:e0:ff:
5e:6d:b4:be:cb:83:74:c5:b2:96:6f:19:2b:38:84:96:db:f1:
dc:3d:f8:e1:ba:f6:00:c8:04:e9:05:8f:1c:f2:57:b3:09:ac:
c8:d8:57:3d:49:78:df:83:d0:bc:20:53:32:ee:73:17:04:bc:
2d:31:04:d5:78:bc:f8:23:ff:65:bb:4b:0f:fe:5c:df:ef:8f:
e6:46:57:14:ff:65:3e:75:40:40:75:bb:bb:0a:96:65:48:6c:
9c:a0:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:22 2025 by rpki-client