Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
File: PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json)
Hash identifier: BZVDrtBGq5P8+lgrkm3G4dNFrpT9dI6t5MW6AGpK2ig=
Subject key identifier: B5:46:37:3B:AF:EB:7A:2A:F3:F7:FC:30:91:CA:D1:01:D4:95:08:EE
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Certificate issuer: /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial: 01963D6665F6CFFBC8EE89480FAC38B81714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 07:00:42 +0000
Manifest this update: Wed 16 Apr 2025 07:00:42 +0000
Manifest next update: Thu 17 Apr 2025 07:00:42 +0000
Files and hashes: 1: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: bwhoCyhizsCoLWy2RTx45G1iyE5DSmw7tuInyXEIC6M=)
2: dNeuYEAQmOoidPn9sPTHpBf3kwM.roa (hash: XKk9IUkG18VeN9nDomy3arFXLgPu8Jw+AjyCy/j87MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:66:65:f6:cf:fb:c8:ee:89:48:0f:ac:38:b8:17:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Validity
Not Before: Apr 16 07:00:42 2025 GMT
Not After : Apr 17 07:00:42 2025 GMT
Subject: CN=b546373bafeb7a2af3f7fc3091cad101d49508ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:17:da:58:e2:64:f5:97:06:82:3f:6c:74:a4:
14:f5:9b:dd:a9:27:49:2e:86:b0:09:b7:84:a4:3b:
2d:d9:95:08:02:a3:0c:f0:f3:07:36:a0:bd:55:66:
ea:74:3c:9c:98:77:b9:11:59:39:67:41:6b:4a:a7:
16:66:c1:ce:97:8e:d8:72:6e:28:c7:d9:03:60:ce:
ef:5c:1d:c0:89:67:9c:22:6e:42:f3:b9:3c:46:18:
e8:08:02:72:8b:11:6c:27:0c:a4:c7:c8:8e:80:8e:
78:a6:67:3b:01:b4:0a:92:de:bd:d9:5f:d3:70:0b:
2c:57:f7:c8:c9:d7:34:0d:33:a1:79:9a:57:cc:13:
85:67:af:4f:28:c4:87:a0:e9:9c:0b:bf:5a:ff:8c:
7c:9c:ba:ad:98:e6:48:4a:a5:c4:97:9c:37:10:c7:
a3:37:ba:9a:91:fc:1c:15:0c:7b:59:ec:b6:dc:b6:
f0:58:86:c4:b1:29:2e:c3:6e:70:6c:0e:40:e1:d8:
24:80:cc:9e:68:7b:6f:1d:3e:b8:52:9b:90:04:e6:
d7:2c:df:9b:54:28:05:33:12:e0:21:16:0b:47:ed:
b9:46:35:39:8d:dd:90:37:e5:03:5c:75:ce:54:c3:
a1:24:5e:9f:82:a0:19:94:6b:c0:67:4f:47:c3:16:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:46:37:3B:AF:EB:7A:2A:F3:F7:FC:30:91:CA:D1:01:D4:95:08:EE
X509v3 Authority Key Identifier:
keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:36:58:1c:00:d4:10:13:58:03:1f:f8:66:64:49:c4:52:60:
9a:49:aa:63:05:e2:83:68:3a:47:17:fe:e7:65:ca:07:91:c3:
b7:0f:5b:b1:e6:88:e7:71:fe:a9:2a:e0:97:21:65:5a:f0:79:
29:87:7e:fb:ea:5e:52:2f:34:c4:76:05:e3:95:ed:1b:3c:ed:
ba:38:1b:6a:7f:af:7d:8a:a8:38:6c:49:90:b2:4a:50:71:8a:
0a:20:2a:96:90:26:1a:de:33:f4:02:04:67:b8:fc:70:6f:3e:
8e:89:e4:70:c5:55:03:ce:d5:e9:73:ef:78:9a:1c:0a:b4:10:
41:d3:ff:ee:b6:2d:d7:df:28:0d:08:1c:e8:0c:92:54:eb:3f:
2e:b7:11:aa:d7:77:a9:be:f9:cb:76:8e:7d:f9:d2:26:3b:3e:
69:ba:ac:e8:0e:86:86:95:17:48:05:f7:9c:50:dc:5b:ee:2f:
8b:e1:f3:63:18:9f:17:df:19:ce:e1:0d:e9:e1:74:61:4a:19:
3b:41:bc:1a:d1:2c:ca:4a:d1:7a:27:77:43:51:ee:95:1b:70:
22:3f:a9:2b:ed:d0:5f:1c:1d:76:da:35:5d:cb:5f:a1:d4:f1:
80:d1:6c:17:c7:3e:39:65:48:3e:4b:67:21:6f:36:61:4a:31:
e3:cf:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:38:17 2025 by rpki-client