Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: j6HMUjpjSmJiuNQsRa6JtZ19h3NoasMkQaV8VPZJHHg=
Subject key identifier: 02:E3:21:C3:3B:43:C5:65:83:D7:C3:4F:50:19:F9:57:03:1A:C8:44
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 01964AEB0793F16059EB2CCC60FB1AD11320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 22:00:38 +0000
Manifest this update: Fri 18 Apr 2025 22:00:38 +0000
Manifest next update: Sat 19 Apr 2025 22:00:38 +0000
Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: BIRYIeSBkutFrqj37yh1+zMyhkd2iOLKpmIeCPFDKl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:07:93:f1:60:59:eb:2c:cc:60:fb:1a:d1:13:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Apr 18 22:00:38 2025 GMT
Not After : Apr 19 22:00:38 2025 GMT
Subject: CN=02e321c33b43c56583d7c34f5019f957031ac844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:f4:04:0c:90:fe:16:51:23:5b:5b:97:6a:
dd:bd:86:55:75:c8:25:c8:77:23:47:3f:56:73:c1:
8a:fa:13:96:39:54:67:3a:e8:3a:19:27:07:59:ed:
b0:76:59:54:05:a8:17:e2:cf:21:f2:38:f2:51:2e:
c7:44:a0:67:e2:64:d7:46:ac:60:52:ac:0b:4a:ef:
96:09:ce:f6:24:64:39:71:45:a7:6c:f1:c5:6f:9f:
9e:84:23:19:8f:fb:ba:ce:72:f5:62:c2:b1:a1:1c:
70:2f:60:7e:3d:f9:58:93:e5:99:3a:a7:28:19:9b:
50:db:f7:b8:43:d9:e2:14:b7:21:4a:71:aa:2a:3c:
08:9e:f9:6c:66:04:bb:88:ee:3b:09:38:a6:f7:09:
8d:00:8c:fd:c2:54:60:96:59:0b:f1:4e:72:4f:aa:
0f:2b:26:0f:62:9c:00:35:7f:34:7b:c7:86:a5:7b:
13:59:48:59:22:8b:8b:0b:b7:c0:b8:07:92:d0:ec:
20:75:c3:c8:17:59:2b:1a:75:6b:b2:3d:85:d0:95:
d3:16:9f:9e:f3:5a:45:87:88:0c:38:9d:02:db:4b:
e3:2d:54:dd:bd:e9:ae:7b:aa:e0:25:90:aa:18:71:
f4:d4:ea:ec:69:5c:33:04:f2:3a:3a:0f:34:2f:91:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E3:21:C3:3B:43:C5:65:83:D7:C3:4F:50:19:F9:57:03:1A:C8:44
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9c:a6:e6:64:53:3e:77:7d:21:95:60:39:8a:94:ab:60:6a:
dc:8f:77:91:b1:2b:c4:43:37:85:c4:f0:a2:55:36:97:de:14:
09:9d:59:19:76:a6:f1:58:5e:e9:f6:62:7c:7b:87:0e:d9:c6:
ec:37:a7:77:cd:fa:06:1d:c2:45:67:a0:6e:ea:95:00:e5:0f:
e1:f9:2c:b1:5e:1d:a2:be:9b:27:54:ee:ae:f7:14:65:7b:3b:
6b:4d:17:da:82:94:de:ca:43:07:83:d8:d9:a3:4d:c1:1b:b0:
61:3e:f1:35:c5:ae:e5:6f:b3:0c:d8:be:9f:4a:10:72:7e:e6:
48:d2:b4:6b:00:96:fb:b4:f9:77:ab:6f:34:e7:0c:8a:69:3f:
56:1c:f3:17:4f:bd:b1:98:a1:eb:08:94:42:a7:0f:78:5b:7c:
56:89:7d:06:d9:5b:46:33:7b:fa:c9:34:b9:d7:58:4b:43:3c:
1d:84:9c:59:3a:d1:df:33:fd:02:ac:f1:a2:c2:c0:0e:b5:7e:
52:b0:16:6e:dc:cc:27:f0:17:97:36:59:14:ec:58:60:eb:25:
d1:f8:5c:c7:f6:8e:6f:07:14:67:3e:00:82:ae:4b:ca:40:8d:
f0:19:a3:16:07:2f:df:4b:79:cc:6f:2d:28:8c:b0:7c:77:16:
7a:3e:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:00:37 2025 by rpki-client