Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: tz8kxXywsVHExwYxWTdhh8kCShSo/tUPqrMOsF3Ll8c=
Subject key identifier: AD:96:8F:FA:1F:DE:10:EB:6E:1B:04:2E:2C:29:9A:2F:C2:1C:46:A6
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 0196440CF8AEE7C68375B48E5249ED40FF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 13DF
Signing time: Thu 17 Apr 2025 14:00:22 +0000
Manifest this update: Thu 17 Apr 2025 14:00:22 +0000
Manifest next update: Fri 18 Apr 2025 14:00:22 +0000
Files and hashes: 1: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: yKkyCnx3RC0D7LQzGGCLVloH3s5KaE0sI1QhZkwh0EY=)
2: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0c:f8:ae:e7:c6:83:75:b4:8e:52:49:ed:40:ff:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Apr 17 14:00:22 2025 GMT
Not After : Apr 18 14:00:22 2025 GMT
Subject: CN=ad968ffa1fde10eb6e1b042e2c299a2fc21c46a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:a8:42:0c:29:6e:d6:c3:e4:bb:c4:ff:3e:
96:c6:da:4d:ee:61:8f:78:17:64:a0:99:35:77:76:
f5:a5:1f:b0:e0:db:46:cf:be:c7:6c:2b:e7:c1:f4:
41:be:60:0c:4f:b5:4c:df:dd:66:ce:2b:0e:21:81:
d6:f0:42:4b:86:37:04:13:57:cc:43:4a:3c:d2:18:
79:5d:cd:ff:c3:ef:d8:dc:86:84:05:68:67:8c:0e:
13:bd:fd:c2:6f:fb:c2:d7:1b:b1:08:69:ba:cf:2b:
ef:5d:2d:4f:8d:d2:e8:77:c7:0b:e1:cf:9d:99:b5:
31:d2:05:fc:70:cd:76:0f:1b:1c:3d:77:56:36:95:
63:8b:91:8c:2f:26:d8:d4:89:d0:a9:43:8d:39:23:
02:2f:63:61:b4:d5:fb:c2:f8:2c:e8:0e:af:d5:8f:
d2:54:ef:48:7e:fa:44:66:8d:0f:89:77:2b:b3:a7:
f5:bd:da:4f:ee:c8:a4:3d:c1:22:01:d2:f9:9e:e8:
07:42:a9:96:b9:a3:23:d6:23:b8:a6:83:a8:5d:eb:
37:5c:a4:33:db:dd:14:5b:6b:e2:d4:5f:11:ca:c5:
e6:10:ee:9d:0b:af:5a:03:10:23:91:e8:31:db:38:
9b:01:a2:1f:90:8d:04:3d:25:eb:a1:09:84:eb:ce:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:8F:FA:1F:DE:10:EB:6E:1B:04:2E:2C:29:9A:2F:C2:1C:46:A6
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c5:7b:5f:0f:c8:d7:3e:4f:74:b7:0c:cc:0d:92:3e:9a:52:
ef:95:56:c8:10:f5:10:fb:e9:c5:43:ce:95:c7:84:72:6b:81:
88:72:0f:6a:1a:90:2c:01:5e:08:2b:e6:38:a3:31:3c:4f:af:
fe:95:2b:be:aa:b0:e7:b9:bd:7a:38:43:2a:fc:86:63:dc:e3:
76:3b:0d:88:6d:69:5e:93:00:b5:6a:c4:ab:99:25:f3:97:34:
55:02:2b:58:e8:b1:bc:37:99:c4:0a:bd:66:e8:3a:af:65:39:
34:bd:2b:7c:d8:ce:67:ab:3d:63:fb:a7:58:ae:f1:2f:22:59:
1b:c3:e9:77:51:eb:43:ff:7d:69:79:1d:ba:8a:30:8f:82:5c:
3a:89:2e:a4:5f:97:44:3a:b4:cb:06:61:fb:d2:90:05:4c:53:
40:f9:26:1a:54:7c:28:ed:d2:e7:c2:31:3f:8f:fa:20:2e:e5:
6c:92:5f:86:b0:f7:f1:17:9d:3e:4c:76:2e:60:e4:90:0f:6f:
9e:5f:ac:86:07:87:b5:13:10:5e:36:e7:b2:be:16:e1:ae:84:
00:97:6d:a3:17:ee:a2:d9:3d:7c:17:5f:bb:cc:34:05:70:3d:
be:d2:a6:0b:bb:56:6d:1b:9d:a2:c2:76:4a:46:aa:f3:b5:34:
18:d0:f8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:23:41 2025 by rpki-client