Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier: WjddQEhSsRE/3R1S56JIARkH8HrT1cJHJIvsmscqOvw=
Subject key identifier: CF:3C:CE:D7:72:EA:EE:EA:DA:E0:36:EA:12:44:97:F0:3D:7D:E1:29
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 0195797E90F9696F934F991B9F1BB96FFE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number: 1015
Signing time: Sun 09 Mar 2025 06:01:32 +0000
Manifest this update: Sun 09 Mar 2025 06:01:32 +0000
Manifest next update: Mon 10 Mar 2025 06:01:32 +0000
Files and hashes: 1: CaL9jYSTc-IdChBXaiMWMez9mXg.roa (hash: KSdlQjcVUmbuNppz/t/DKjZyc/L+OBaFoRGPDIpwznQ=)
2: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: 6y5WgzMCQ4LU0ARz1PJkCbfk9C5UkJfQ8WjZ8V8b4i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:7e:90:f9:69:6f:93:4f:99:1b:9f:1b:b9:6f:fe:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Mar 9 06:01:32 2025 GMT
Not After : Mar 10 06:01:32 2025 GMT
Subject: CN=cf3cced772eaeeeadae036ea124497f03d7de129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:76:37:f8:54:60:51:03:ab:11:26:46:8b:
6c:cc:1f:45:f3:33:61:99:00:72:f0:d6:83:17:f8:
0d:ea:d3:79:53:1d:d8:e9:96:6f:bb:39:9f:6f:6e:
06:d9:ea:7e:20:7e:5e:75:73:0f:7a:04:b3:d4:11:
75:b2:44:75:f5:3a:61:a8:b8:a8:11:53:2f:df:7f:
9f:30:e1:20:bd:45:73:60:d3:88:38:ed:0c:8d:48:
5b:c0:7b:fb:5e:95:ba:21:09:48:8a:b7:50:48:dc:
ba:a9:6e:b1:aa:53:ba:36:c7:c7:83:3a:9f:ce:32:
23:b1:ad:8e:32:82:a9:81:32:b3:48:19:da:5f:9f:
61:3b:db:c6:8c:06:34:78:64:ee:91:d0:94:a2:52:
02:df:46:f5:52:39:4e:83:52:89:04:fe:24:26:30:
8c:17:7f:83:d1:de:f3:0d:ed:61:f2:6b:3c:5f:28:
a8:6d:72:b3:53:22:10:0e:a5:16:38:48:8e:8f:07:
eb:d9:7b:bf:e8:d2:c1:e7:21:50:d5:e2:87:42:18:
65:9b:17:cf:87:fb:46:53:e8:f3:7b:ba:3e:70:68:
9a:1a:5c:64:65:cd:a5:75:c3:d9:5d:b3:f4:19:5d:
74:d6:dc:09:b7:52:bf:b6:79:41:2c:9e:0b:b1:fd:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:CE:D7:72:EA:EE:EA:DA:E0:36:EA:12:44:97:F0:3D:7D:E1:29
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:98:19:1a:4d:a8:a4:d4:bf:7b:b9:b3:05:72:81:69:22:5c:
6c:9c:5c:72:8e:39:81:dd:ff:35:d6:ff:a1:e1:10:e6:53:bb:
b2:70:b1:56:03:9e:ea:f6:58:f8:7e:1a:9f:0f:c7:71:b2:b1:
5f:54:f4:52:00:4b:5f:6f:05:bc:fd:90:31:14:e2:0e:ba:a6:
88:fb:cd:81:8c:fb:a2:80:db:db:66:af:91:c3:6f:4b:a5:98:
78:33:aa:74:84:77:75:a3:90:58:40:2e:d9:26:0a:fb:b7:10:
1b:11:e1:a4:4a:35:3f:05:02:17:d3:b5:ec:2b:43:40:50:97:
af:f8:2a:04:64:8f:3f:8d:cd:f9:6f:5d:75:30:69:81:a7:ab:
63:2c:01:66:9e:ad:8e:8a:f9:1e:22:1c:a5:bc:66:80:ac:9f:
e4:4b:a6:e1:ce:c2:9a:dd:b2:de:ea:48:88:cc:04:f9:05:6e:
1b:25:74:5a:58:60:f9:3b:64:4d:12:73:d3:64:ac:1f:30:09:
59:4a:de:30:1c:4d:be:49:71:e3:88:5d:4b:47:f0:46:a3:12:
2f:6b:f8:d2:51:f5:f0:f2:56:0a:59:ba:09:af:ba:68:cb:7e:
7b:3f:d3:62:ab:fd:66:96:04:8c:d5:83:b7:a9:d7:c1:a8:40:
13:4b:43:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:19:25 2025 by rpki-client