Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: QhvhZr67HlkUOb7rUZoK42j748CYwmDhLGF3sTbOFTQ=
Subject key identifier: BA:12:68:49:C6:23:95:E2:E6:54:94:AF:E3:B5:2A:8F:7E:67:A4:1F
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 019653490B92B97DEE951AB98237D97CE93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0BAA
Signing time: Sun 20 Apr 2025 13:00:17 +0000
Manifest this update: Sun 20 Apr 2025 13:00:17 +0000
Manifest next update: Mon 21 Apr 2025 13:00:17 +0000
Files and hashes: 1: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: 3ImubG7KcSZhrNAgy7w8tEVpg7DwUqTuMEr5u02AFXY=)
2: RPdruY8oCYU-NG_cdmDTyaYXs9w.roa (hash: i9rNw7/5XltvLVBXot4AXkRNS8YKs+TQnC29q/66MR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:0b:92:b9:7d:ee:95:1a:b9:82:37:d9:7c:e9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Apr 20 13:00:17 2025 GMT
Not After : Apr 21 13:00:17 2025 GMT
Subject: CN=ba126849c62395e2e65494afe3b52a8f7e67a41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3d:37:7f:ab:3f:7d:5d:9c:35:83:51:bb:ae:
69:65:4c:ed:a1:1e:26:c1:35:77:24:7a:af:b5:79:
c6:07:38:07:59:7b:46:3a:4c:79:a2:81:40:20:c9:
c7:d4:09:98:46:c7:04:95:60:06:f2:bf:bf:13:ed:
85:08:ec:e8:ff:25:75:20:f8:fb:c8:46:d7:02:0f:
87:45:66:9c:4a:46:c0:ed:40:52:98:e3:a6:31:8f:
83:4f:49:ed:c1:45:24:b6:50:ef:ff:74:4e:15:48:
b6:b5:71:2a:40:e9:d3:72:53:75:d0:43:78:62:3a:
1b:85:a1:f4:0d:e6:7a:26:bb:10:e2:a2:cc:63:3c:
b5:21:69:1f:4d:84:55:84:f5:78:e0:ff:bc:6f:f5:
94:58:b8:18:ca:86:f6:90:ca:8e:be:8d:3a:70:c5:
d0:fb:8b:f3:48:71:f3:74:b9:8a:cc:00:ca:b3:07:
69:ef:d0:7b:3e:96:1e:6b:c8:70:06:7b:6a:fe:a7:
9c:54:fd:f5:55:2d:2f:ca:28:06:14:9e:8f:7e:a3:
1b:67:da:d4:e1:c7:c9:3a:05:52:5f:b7:21:9a:a2:
5d:a0:31:73:f3:32:3c:91:c4:14:97:bd:18:cb:5a:
3c:50:b8:34:09:47:ce:2b:74:db:64:97:da:f9:84:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:12:68:49:C6:23:95:E2:E6:54:94:AF:E3:B5:2A:8F:7E:67:A4:1F
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a1:09:01:87:b1:73:b7:3f:6c:0c:e0:be:84:97:1f:e1:71:
58:39:27:65:59:b7:ea:42:91:ba:ae:9d:fe:a0:ac:79:c4:83:
48:86:5c:28:7b:ec:c1:e7:a9:a7:0d:53:e6:71:fd:22:52:0c:
25:da:bb:81:d2:9f:38:d3:94:4e:39:13:ce:1f:6a:90:68:39:
16:6f:84:3e:2e:6c:59:30:6f:fa:14:d5:91:b6:a3:2f:18:a1:
c8:27:9f:3a:3f:a1:db:bb:e4:fa:ff:60:76:43:a5:49:9d:7f:
9c:2f:c2:0c:15:73:f1:28:55:78:11:d5:6a:3a:1b:bf:67:d0:
78:78:05:df:f1:57:70:c7:8c:8b:cc:eb:c9:53:95:df:0c:8d:
4f:6a:e8:48:b8:22:33:fc:f6:3d:78:d4:11:1f:f9:aa:df:0b:
53:12:a1:77:97:92:b9:6d:42:ba:be:36:4e:3e:f3:d3:40:20:
93:0d:bc:b5:60:3d:13:99:a4:a8:73:89:f4:cb:5b:7a:0a:d2:
10:42:1a:22:4c:b4:01:94:da:c0:59:68:ea:c4:ee:be:96:cb:
4d:dd:1e:03:63:9f:69:e9:3a:05:84:68:12:44:b3:0a:cb:eb:
ef:2a:61:9c:15:7f:fd:2c:71:76:6f:09:6c:bd:00:f2:00:d3:
b9:aa:36:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSQuSuX3ulRq5gjfZfOk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzdkMmJmYzNmYTc4ZTcxMDBhMWI4OTM1OTA1YWZmN2E0
OTZiYzkwHhcNMjUwNDIwMTMwMDE3WhcNMjUwNDIxMTMwMDE3WjAzMTEwLwYDVQQD
EyhiYTEyNjg0OWM2MjM5NWUyZTY1NDk0YWZlM2I1MmE4ZjdlNjdhNDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8D03f6s/fV2cNYNRu65pZUztoR4m
wTV3JHqvtXnGBzgHWXtGOkx5ooFAIMnH1AmYRscElWAG8r+/E+2FCOzo/yV1IPj7
yEbXAg+HRWacSkbA7UBSmOOmMY+DT0ntwUUktlDv/3ROFUi2tXEqQOnTclN10EN4
YjobhaH0DeZ6JrsQ4qLMYzy1IWkfTYRVhPV44P+8b/WUWLgYyob2kMqOvo06cMXQ
+4vzSHHzdLmKzADKswdp79B7PpYea8hwBntq/qecVP31VS0vyigGFJ6PfqMbZ9rU
4cfJOgVSX7chmqJdoDFz8zI8kcQUl70Yy1o8ULg0CUfOK3TbZJfa+YRoFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoSaEnGI5Xi5lSUr+O1Ko9+Z6QfMB8GA1UdIwQY
MBaAFD7H0r/D+njnEAobiTWQWv96SWvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQt
YmE4ODExMjJjYTYzLzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQtYmE4ODExMjJjYTYz
LzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKEJAYex
c7c/bAzgvoSXH+FxWDknZVm36kKRuq6d/qCsecSDSIZcKHvsweeppw1T5nH9IlIM
Jdq7gdKfONOUTjkTzh9qkGg5Fm+EPi5sWTBv+hTVkbajLxihyCefOj+h27vk+v9g
dkOlSZ1/nC/CDBVz8ShVeBHVajobv2fQeHgF3/FXcMeMi8zryVOV3wyNT2roSLgi
M/z2PXjUER/5qt8LUxKhd5eSuW1Cur42Tj7z00Agkw28tWA9E5mkqHOJ9MtbegrS
EEIaIky0AZTawFlo6sTuvpbLTd0eA2Ofaek6BYRoEkSzCsvr7yphnBV//Sxxdm8J
bL0A8gDTuao2Bg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:28:53 2025 by rpki-client