Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: D3za2vQTRJa54fYjuJqPIpc2RkXTIYbf2KlHyY+2llk=
Subject key identifier: 7A:A7:BB:2C:EF:AB:6C:B9:74:0E:13:B9:F4:37:4E:B9:12:F1:CD:D4
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 01962C730F7F7D11DCB94A81D1B22C8D8665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 122D
Signing time: Sun 13 Apr 2025 00:01:00 +0000
Manifest this update: Sun 13 Apr 2025 00:01:00 +0000
Manifest next update: Mon 14 Apr 2025 00:01:00 +0000
Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=)
2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: rRdqBglFBH7pchwH0dWAHeHtBx73LzyXYi8B6sIISOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:73:0f:7f:7d:11:dc:b9:4a:81:d1:b2:2c:8d:86:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Apr 13 00:01:00 2025 GMT
Not After : Apr 14 00:01:00 2025 GMT
Subject: CN=7aa7bb2cefab6cb9740e13b9f4374eb912f1cdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:65:97:91:ab:21:d4:0e:cc:54:6e:36:04:
a5:3e:a4:82:4a:fb:8b:81:e2:02:cf:a7:86:37:7f:
fa:36:5a:96:4b:13:13:ed:0c:00:17:e3:67:57:8b:
9a:4c:be:f7:33:40:1a:76:30:b9:7b:63:3c:fa:28:
09:fd:a3:4c:9f:a2:0d:50:a8:6c:8a:c6:4d:6d:e6:
fb:64:62:db:6a:8d:e3:11:b9:05:23:eb:8c:ca:08:
90:be:2f:52:5e:44:52:dc:80:ab:c9:c2:8a:0f:0f:
e1:0c:b0:7d:f5:c0:9c:09:b6:32:a5:b0:ec:c1:db:
90:c9:33:8e:50:37:7f:14:65:19:ed:78:53:42:ea:
b2:f5:43:37:90:de:e1:1b:1a:c2:14:80:cf:2f:b4:
29:fa:4b:bf:cb:73:f2:59:29:56:7f:9d:05:b9:ef:
53:b5:a4:0d:40:27:ca:b9:53:bc:11:53:6a:1b:77:
f9:a3:64:b4:e1:b3:6c:52:82:6e:64:d5:8f:3c:61:
1c:b2:bd:9a:94:00:85:68:e7:82:23:df:76:bd:d4:
9c:99:c1:0e:5a:3e:e1:48:b8:32:b2:12:bc:a6:bb:
0c:ab:11:dd:dd:d5:d6:fe:cb:9f:d5:5d:32:e5:50:
0e:ec:e8:d0:85:77:1c:22:f8:88:16:3d:a0:0e:6d:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A7:BB:2C:EF:AB:6C:B9:74:0E:13:B9:F4:37:4E:B9:12:F1:CD:D4
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:da:77:db:76:dd:f7:95:79:36:9f:92:51:03:d0:96:4a:b0:
52:d0:e5:cc:af:b7:43:4a:55:21:4c:20:58:ef:99:cc:ad:43:
48:21:b0:50:fb:db:45:80:b0:dc:76:fa:d5:fb:8d:35:e2:37:
14:02:70:3a:fe:ae:9e:38:4e:bc:ef:58:b2:c7:1e:16:64:94:
61:68:34:e6:d9:45:0b:db:3b:93:45:2d:62:88:7d:6c:c6:9b:
bc:34:50:dd:7b:cc:fd:c0:75:61:74:44:62:d6:53:82:6c:48:
6e:f4:3f:1f:d5:fc:05:3d:a2:55:ca:11:b7:dd:de:85:56:1c:
7c:29:8e:39:c0:09:bc:98:64:8a:39:db:56:87:f2:62:79:a5:
80:c2:3e:54:a5:85:12:51:fe:9b:f4:6e:bc:23:58:d3:da:e5:
a5:82:e9:41:36:be:ba:0c:5b:e9:15:76:dc:11:1a:57:d4:02:
ed:cd:be:7e:d9:9f:f9:2e:22:f6:7b:3a:77:17:54:a4:f5:e0:
d8:0a:f1:4c:a7:d7:61:cf:36:5c:2c:f9:0c:c7:4a:56:1f:15:
35:1d:22:c9:ee:4c:be:21:04:5f:30:6a:66:61:bd:48:a0:69:
00:18:f7:63:5f:93:12:24:55:5b:9c:bc:a2:33:b6:62:cc:8b:
24:71:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:52:07 2025 by rpki-client