Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
File: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft (raw, json)
Hash identifier: 7/XEzP39mv5CQ6RuoLwYYLuffEyQ1dtpBUZn+ItDXgE=
Subject key identifier: E5:79:82:1A:C8:C3:C2:74:D2:14:6F:FE:41:6C:21:22:55:15:29:8B
Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Certificate serial: 019651C92A51A82A46B4DD286CDBDF0E7E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
Manifest number: 0C76
Signing time: Sun 20 Apr 2025 06:01:00 +0000
Manifest this update: Sun 20 Apr 2025 06:01:00 +0000
Manifest next update: Mon 21 Apr 2025 06:01:00 +0000
Files and hashes: 1: 9-fbWWjNC4mOvVefigl9UV2UFJs.roa (hash: tWgz0w4Sqnk4S40gqRVMtTMDJNe1eyYOZFDB5oZ2xOA=)
2: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl (hash: 42Tawk1RacECT73/Y9w5YO7qOD/8Ss8poTOokjWWB6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:2a:51:a8:2a:46:b4:dd:28:6c:db:df:0e:7e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Validity
Not Before: Apr 20 06:01:00 2025 GMT
Not After : Apr 21 06:01:00 2025 GMT
Subject: CN=e579821ac8c3c274d2146ffe416c21225515298b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:28:6c:fb:09:1a:59:23:7e:26:c6:8b:b9:
b7:42:a1:6b:d5:38:e9:29:6f:cb:ea:91:fc:ad:9f:
27:4c:54:3b:7f:12:97:ad:68:47:b2:07:d8:4d:29:
95:13:ab:52:6f:10:27:94:46:59:de:6f:ca:04:50:
31:1b:7c:ed:69:4e:5b:b5:13:81:ab:62:51:80:85:
6d:b1:41:32:5a:67:a5:76:1b:76:56:ad:b9:ef:d9:
f5:77:7b:ec:78:54:b5:4f:28:f1:4b:92:c1:5b:d9:
94:5a:6e:ac:4a:86:be:28:4b:70:7a:58:7d:f6:bf:
63:16:94:f2:5d:4a:2c:d7:37:de:5a:b9:87:d0:a7:
fd:25:3f:1e:77:76:03:63:9c:1d:55:24:cc:48:fe:
75:e9:5c:be:6c:c1:71:0b:89:8b:39:c4:7e:4e:a7:
e9:52:dd:32:d3:00:04:84:ca:5a:88:06:14:88:09:
e4:ed:4a:c2:d9:a3:f5:2e:ac:25:c9:31:12:4c:51:
27:07:f0:99:42:bf:7e:e7:eb:b4:5d:ab:59:70:1f:
be:7c:32:ae:e1:79:7b:f7:d8:7e:b5:6a:6e:47:69:
44:de:d7:21:7d:ec:6e:af:1d:66:da:e7:48:33:cd:
02:0c:85:d7:dc:ed:4d:d1:d9:1d:9a:e4:65:8c:7c:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:79:82:1A:C8:C3:C2:74:D2:14:6F:FE:41:6C:21:22:55:15:29:8B
X509v3 Authority Key Identifier:
keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f8:60:93:5a:75:08:e3:13:64:5c:e6:70:f4:64:9a:70:2d:
1a:69:ca:40:39:6b:43:46:8a:6b:fe:0e:53:a4:35:07:73:21:
f4:25:f0:f5:00:81:8b:76:36:90:db:a5:67:3b:d1:ed:ae:aa:
5f:61:eb:d5:ae:67:08:79:d6:b9:07:f7:78:3a:45:ac:35:40:
32:47:ac:9c:67:32:ad:4f:61:d5:6f:b5:cc:a9:74:48:19:5d:
f3:bd:5c:52:6c:90:62:99:ea:86:1f:6c:3e:4c:58:cf:09:1b:
65:2b:e1:e0:f9:02:c6:54:d0:11:bd:b7:5c:aa:ca:22:48:0a:
51:0e:98:80:11:33:61:92:a4:b5:96:26:67:83:62:ec:48:bd:
77:91:cc:87:39:bd:44:03:00:17:34:74:1b:dd:19:c8:aa:f0:
74:b7:fa:62:9c:08:51:7d:16:5c:de:6a:96:93:37:39:37:73:
74:20:9c:53:72:ca:c0:78:cd:49:01:d9:25:eb:33:e9:15:92:
b8:b1:40:56:1d:a4:4c:1a:77:95:30:64:27:bd:fc:5b:e2:95:
fe:d7:fa:fc:3e:f6:fa:1f:fa:0e:0d:4a:b5:bf:29:18:aa:84:
32:08:75:75:19:de:30:9e:5e:2b:35:ba:18:d4:b0:37:18:1a:
c0:84:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:08 2025 by rpki-client