Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: ZVE3syeW1cHBzYE0h1g037uu0uXbErXF35xweLDlb/A=
Subject key identifier: D6:DD:46:E9:C3:A6:FE:4F:03:15:83:FB:5B:50:2C:C7:BF:14:6D:D1
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 019653B737EAE8F1C0ECEFAF08EEB0B728DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 34
Signing time: Sun 20 Apr 2025 15:00:38 +0000
Manifest this update: Sun 20 Apr 2025 15:00:38 +0000
Manifest next update: Mon 21 Apr 2025 15:00:38 +0000
Files and hashes: 1: ArxWoIoACVsuecj6oH-B8iFComg.roa (hash: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=)
2: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: RqWVJw5dSq3NCAPRzZ/+03q2B8fBvzXRilCl/DnibX8=)
3: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (hash: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:37:ea:e8:f1:c0:ec:ef:af:08:ee:b0:b7:28:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Apr 20 15:00:38 2025 GMT
Not After : Apr 21 15:00:38 2025 GMT
Subject: CN=d6dd46e9c3a6fe4f031583fb5b502cc7bf146dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:0b:ff:cd:31:20:92:ec:1e:19:07:f6:24:
69:7e:5a:a7:e0:2d:83:78:47:d7:6f:a3:34:c8:94:
0b:5e:db:48:f5:9a:f2:f1:92:38:ef:aa:51:9b:1d:
20:a3:37:91:59:fb:e8:33:c8:42:4d:4e:10:f8:b0:
3f:f9:80:c2:04:0a:ba:5e:50:72:56:a7:89:c7:bc:
ac:37:f9:b6:87:69:cf:b1:20:92:c4:d4:c0:3a:69:
d7:6f:56:9c:dd:07:56:aa:82:db:e6:8d:2d:32:3f:
02:aa:ec:3a:42:95:ee:6a:43:24:45:cb:21:08:58:
83:30:e5:a8:00:08:94:e6:18:f8:39:e9:1c:ba:49:
a5:31:5a:d3:c6:7a:4e:f4:92:79:9f:25:88:91:e9:
4d:20:2e:a9:ea:fd:26:82:06:5f:67:f6:18:5e:f0:
55:64:62:36:6f:f3:52:79:ca:ca:2a:88:9e:7e:d8:
21:fb:f4:b7:34:ed:11:38:40:e2:46:6c:76:88:94:
66:12:7f:e7:dd:69:46:7d:e1:cf:cd:b9:4d:64:d1:
ce:c2:06:30:c7:26:30:38:b6:a7:41:d5:21:12:63:
aa:3b:5d:6b:cf:0d:1b:cd:24:d6:2b:6b:a3:8c:2d:
40:90:78:9a:51:96:60:b4:be:58:11:0d:39:eb:be:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DD:46:E9:C3:A6:FE:4F:03:15:83:FB:5B:50:2C:C7:BF:14:6D:D1
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e5:83:0d:da:e0:b3:f5:e3:c1:40:18:38:42:bd:39:6f:2e:
0d:21:32:99:fe:d7:36:ec:ee:ac:e7:63:02:74:b8:39:f3:5a:
81:3e:f0:5c:c8:31:be:b7:f2:ae:0d:e7:cd:18:d9:56:72:22:
ea:2b:2b:f9:9f:25:bb:e3:d9:93:e6:51:3b:3d:94:30:73:85:
5a:9a:a9:bb:0c:2f:3b:8f:4f:60:78:eb:27:09:ab:0c:cd:76:
c6:7a:4c:c1:8d:95:7e:47:6e:e3:e1:f4:47:00:40:11:6c:42:
dc:67:7d:41:cf:49:44:e5:7c:5c:e1:01:66:15:a3:60:7e:a2:
77:59:44:60:57:73:45:5f:80:09:cc:69:59:27:b9:6e:fd:28:
ba:19:86:d9:7b:33:f9:d4:73:79:d3:28:ad:e1:93:ab:cd:ea:
18:24:ae:ee:31:b5:02:7f:18:72:53:23:d0:0e:54:d7:8c:98:
80:1d:ac:26:80:ab:35:a9:9b:d6:44:31:13:04:67:60:44:45:
86:c3:1a:88:aa:1a:b1:1f:cc:62:0e:8a:96:84:69:61:fa:cb:
fd:26:c1:1c:50:75:e5:d4:70:69:cf:f4:53:b7:85:35:6a:6b:
aa:f8:aa:2a:b9:ca:24:a9:7b:99:dc:bd:77:24:96:b9:d6:41:
a0:cb:a6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:00 2025 by rpki-client