Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
File: PowYl2JPV7404PdguX8RCtW12jo.mft (raw, json)
Hash identifier: tvg8q3UfbsHUyymk9J/rW9ijIcPLp22Lkt5Lh7CG+t4=
Subject key identifier: 27:2A:D1:99:AA:2A:61:0C:A1:3F:BD:03:B1:1B:DF:A0:65:0D:51:46
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 01964F6D5C07973BDE2563CF330C7E41E111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
Manifest number: 14FF
Signing time: Sat 19 Apr 2025 19:01:29 +0000
Manifest this update: Sat 19 Apr 2025 19:01:29 +0000
Manifest next update: Sun 20 Apr 2025 19:01:29 +0000
Files and hashes: 1: OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa (hash: H6KoMJLLwg7EnqHTPVQLrBI8uOBDhlfqI6yQtfWr3zo=)
2: PowYl2JPV7404PdguX8RCtW12jo.crl (hash: iQW31NwqD3qibQ8DmRilb0kKfPO62R8cmsVW3Y7nThk=)
3: lFNEbA4WXa1kqpPRAFp7E-A0l2E.roa (hash: RLdKaSl14tW7ZrRmULGs2dhO8FMuiohKtUpmaqgzRYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:5c:07:97:3b:de:25:63:cf:33:0c:7e:41:e1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Apr 19 19:01:29 2025 GMT
Not After : Apr 20 19:01:29 2025 GMT
Subject: CN=272ad199aa2a610ca13fbd03b11bdfa0650d5146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:f7:c7:e7:c6:60:10:50:21:c9:78:96:d5:
f7:66:c4:e1:5c:16:19:f5:78:df:8a:82:91:88:af:
0c:8d:07:1f:7d:40:49:9d:fe:6e:e5:2a:44:a4:b1:
e7:4f:9d:57:3b:21:54:de:8a:cf:7e:29:1f:66:2c:
7d:8c:86:24:1d:a5:d3:c4:3d:1c:fe:42:dd:27:92:
20:0b:7b:b7:d9:aa:c6:52:84:a3:52:7f:42:d7:26:
e6:21:02:32:7e:76:bc:6d:ed:7a:31:ec:b3:e6:a8:
a3:4d:89:f1:64:c0:0a:2a:83:12:d1:6a:6d:b4:3e:
a5:dd:e7:88:b9:74:84:ea:09:ea:13:75:5e:ff:2d:
17:e0:08:c7:2a:da:71:7b:73:49:0f:d2:58:cb:61:
ef:40:1e:77:e3:9f:db:32:89:36:a6:f5:33:61:28:
a2:57:6b:4a:f3:b5:cc:b5:ed:db:a5:34:60:f4:1b:
52:a6:66:2a:ce:9c:4b:65:07:9b:4f:8c:82:cf:88:
78:16:39:9f:a7:12:72:bb:bd:1c:5b:f0:f8:74:d2:
c8:d1:3d:08:10:4e:74:20:ea:a3:b6:e6:39:db:49:
58:01:5a:4d:6f:d5:81:52:f6:58:cf:7b:b4:e2:c7:
54:ba:36:70:a1:55:88:f1:c9:65:22:ed:7e:84:a0:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2A:D1:99:AA:2A:61:0C:A1:3F:BD:03:B1:1B:DF:A0:65:0D:51:46
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:09:02:fc:bb:f5:b4:1b:23:a1:79:10:20:8b:ce:25:3a:b1:
0a:bd:43:1d:6b:2f:d7:56:82:16:6b:52:5c:88:99:df:67:70:
06:37:fd:dc:21:4a:72:25:61:70:83:eb:ae:f5:a5:38:d2:6d:
f1:c4:fe:12:72:20:00:dd:77:80:e9:3a:da:f1:c7:44:20:e9:
7f:54:ca:91:5a:04:04:08:e9:3a:c9:67:f1:12:63:3a:73:84:
21:1f:78:a9:8e:f0:f2:3e:7c:9a:0f:07:9d:52:5a:9c:4a:dc:
44:b5:3c:92:ae:7c:ea:5f:bb:f8:dc:11:af:aa:09:5e:08:fc:
f9:26:a6:2d:c1:71:80:f1:50:42:56:68:56:bf:c2:12:5b:0b:
61:5a:10:42:13:f7:a4:3a:d1:7a:bc:b0:a3:8b:79:ba:97:3b:
8d:fd:c8:fc:58:e7:a2:a3:1a:05:23:7c:4a:26:48:07:71:bf:
e5:42:22:0e:de:e1:b9:08:bf:de:d4:f4:a7:92:0e:c4:0c:9d:
0b:38:b9:70:51:bf:36:b4:09:e2:b4:9a:7f:b7:58:32:0d:bd:
50:5d:a4:73:43:7d:29:a6:eb:06:3d:f0:33:ef:c6:54:b5:b7:
f6:20:e6:fd:08:b3:7d:ab:92:71:83:8d:a5:51:7e:92:9c:d4:
a6:50:1b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:12 2025 by rpki-client