Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: /ZRQ2AezkByeK93n0I1KdIhrrgho7JHZFNgi+cysOeI=
Subject key identifier: D0:2C:C0:86:2A:72:BD:0E:4E:19:55:44:AE:DC:8A:1A:4E:CB:8E:1E
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 0196120F4DABB2D5E4912B07953985DF8F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 08D3
Signing time: Mon 07 Apr 2025 21:01:54 +0000
Manifest this update: Mon 07 Apr 2025 21:01:54 +0000
Manifest next update: Tue 08 Apr 2025 21:01:54 +0000
Files and hashes: 1: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: yNIJkIdOApsNIiX6Hz/bTeFqGwMq1WSqN+Vga4dxzkM=)
2: u6X_yWkVLE-C5GUl8sRlcXUfprI.roa (hash: G/Od4mhlmhQvTsBF+RYMonju3qrggKqYt06lJi4x8BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0f:4d:ab:b2:d5:e4:91:2b:07:95:39:85:df:8f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Apr 7 21:01:54 2025 GMT
Not After : Apr 8 21:01:54 2025 GMT
Subject: CN=d02cc0862a72bd0e4e195544aedc8a1a4ecb8e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:5a:d0:7c:6a:fe:df:0b:e3:73:86:9e:e2:
6b:f5:45:cf:bc:7b:e1:81:eb:68:e0:cf:36:0c:b5:
22:93:e9:94:84:a3:b9:53:1c:c9:48:d1:b6:22:9d:
fc:b3:69:39:ae:94:b1:be:9f:7d:bb:07:dd:d2:47:
c3:5f:b6:b7:dc:d7:b6:67:a5:e4:65:06:b6:56:93:
b2:a1:47:ac:cb:5a:62:d7:6f:2b:61:e1:40:91:17:
3b:25:64:dd:ac:a4:44:17:f2:6e:14:32:10:89:67:
80:64:38:36:b1:75:cf:e2:e4:f4:a3:82:59:fb:ce:
ef:3a:3b:a4:a7:31:3b:e3:eb:68:a4:ab:5c:64:fb:
8a:7a:b8:0a:a1:f2:92:8d:32:fa:62:05:05:12:bb:
af:81:f6:22:25:00:7e:43:5f:c3:6d:65:9d:be:13:
b4:c9:7d:d7:b3:4a:4c:d2:46:fd:e7:cc:37:4a:a1:
1b:7b:00:d3:eb:79:69:f5:4e:68:9a:9f:bd:de:69:
28:3b:3d:67:28:c1:08:4d:ef:ff:c1:55:ca:8e:eb:
0f:5f:8a:f8:ee:81:46:94:85:fc:5a:97:e6:cb:eb:
3a:41:4a:5c:e8:69:ed:84:1b:06:7a:a4:1d:14:93:
7c:b3:e0:4e:6d:c4:ab:af:97:47:57:6c:33:9d:9b:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:C0:86:2A:72:BD:0E:4E:19:55:44:AE:DC:8A:1A:4E:CB:8E:1E
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2f:de:a2:df:e2:a9:c1:5d:6d:e8:1e:2d:da:4c:c9:e0:a4:
14:b0:87:f1:33:fe:9c:72:62:a8:fa:b6:81:37:b5:d6:2d:3d:
e4:26:54:9c:11:4d:b9:46:e9:ec:39:4d:85:51:33:44:1b:52:
26:8b:b7:08:3d:66:f7:8a:1a:1a:fa:c5:75:6e:96:5a:e7:98:
6d:f6:c2:79:13:6f:c7:f4:28:50:a1:db:f3:77:b9:78:ab:60:
a3:26:77:66:0f:5d:8a:79:d0:c6:9e:2f:49:4d:99:54:8b:fe:
d4:90:72:a9:51:25:63:6e:4e:8c:9b:1d:0d:b0:aa:e3:fc:37:
7d:0a:95:67:7d:09:b8:63:9b:41:22:0f:3e:9a:7f:2e:f1:12:
83:28:d3:61:86:8b:1e:20:77:bc:19:04:55:d7:c9:3f:61:7e:
74:27:0f:6b:29:11:a5:b1:63:b0:bb:03:22:f7:c4:35:cf:85:
c2:62:ca:aa:92:44:a0:a1:7f:f6:dc:e3:b5:83:5d:16:72:e0:
67:aa:9e:c8:c7:c5:e6:55:24:eb:94:0f:2c:bc:25:25:a0:c5:
33:44:38:d2:45:e9:49:dc:42:9b:45:95:3d:12:45:1c:0a:0a:
a7:d6:63:76:63:05:95:f0:b2:ff:fc:28:d0:84:fc:c1:b0:0b:
1d:e6:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:05:07 2025 by rpki-client