Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: 9yLWlkwkVW4nLoC/ZNdAA8SeS1J0sDmUCXM8QMQCn+Y=
Subject key identifier: 7B:A5:F5:0A:C4:DD:4A:5E:0A:EA:9E:39:08:25:9D:15:69:8B:20:47
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 019638E498D869F2B70E5531B1336C154BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 14ED
Signing time: Tue 15 Apr 2025 10:00:27 +0000
Manifest this update: Tue 15 Apr 2025 10:00:27 +0000
Manifest next update: Wed 16 Apr 2025 10:00:27 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: WfAVoPizeRGy6m+HPKg4FnCmj147Kij/LX19HZ6d40Q=)
2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:e4:98:d8:69:f2:b7:0e:55:31:b1:33:6c:15:4b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Apr 15 10:00:27 2025 GMT
Not After : Apr 16 10:00:27 2025 GMT
Subject: CN=7ba5f50ac4dd4a5e0aea9e3908259d15698b2047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:1a:9d:97:ff:68:38:bb:43:9f:14:be:c3:
00:8e:86:fe:81:4b:e9:8d:62:a7:a4:76:54:bc:1b:
41:a2:ef:38:08:0d:5d:b6:ac:b9:fa:30:2e:b9:2b:
e8:18:79:3a:38:67:2a:04:1d:5b:7e:a2:d6:ca:0b:
00:6d:73:3a:67:12:c2:68:76:33:78:69:b2:f6:16:
97:12:57:2a:fe:4a:2c:2d:78:99:a2:19:16:30:b3:
78:cf:04:11:35:c1:08:be:48:0e:0f:a5:88:8f:97:
d9:0a:96:86:d8:71:09:55:2d:59:6a:a2:56:22:69:
31:78:ed:4b:52:e0:0e:24:00:e4:61:a2:30:a5:b3:
db:3a:cc:04:c6:1e:2b:70:cd:5e:09:e0:c5:d1:3e:
8a:6c:bb:aa:01:bd:fb:13:b2:29:f2:4d:f6:b9:c2:
34:c9:5d:a2:3f:a6:1c:2e:c5:a9:90:1f:f5:c4:14:
4b:3e:e2:a3:ea:47:b1:46:1a:64:83:14:01:e0:73:
57:4a:44:8d:15:18:c7:d7:70:0d:bc:21:06:f5:71:
52:2d:b8:2b:ab:24:7b:ea:02:0f:3a:a0:0c:34:56:
cf:2d:65:ff:5b:8d:c3:be:1f:2e:6c:5a:07:5b:b7:
19:43:aa:f6:36:f2:8c:bc:5b:99:0a:14:ef:de:fe:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A5:F5:0A:C4:DD:4A:5E:0A:EA:9E:39:08:25:9D:15:69:8B:20:47
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c0:30:2e:f7:99:0a:a7:28:de:a7:a9:76:ee:2e:5b:2d:37:
39:31:ff:c6:db:02:d1:78:f4:04:68:f7:33:e1:7a:0c:bd:e5:
93:05:64:3b:57:6f:e8:48:12:16:1a:a6:f8:51:b1:6b:d3:0a:
85:0b:8c:ff:e3:c1:d4:fb:7f:6c:94:0f:d7:ea:60:7f:54:de:
86:f7:33:b9:f1:62:fa:3f:bf:b0:9c:c6:cf:13:1e:c3:78:f0:
d6:f2:02:6b:e7:e0:74:48:69:53:08:4c:a9:0f:2c:ae:f6:81:
6f:55:aa:dd:a1:70:20:78:e0:50:89:b7:69:f0:a2:35:23:0a:
03:fc:4d:36:59:23:cc:e1:1a:74:76:8c:f4:f9:24:30:64:44:
c8:d4:2d:a3:b5:00:08:f2:a3:f1:9c:d3:3a:91:6e:7e:e4:c6:
3d:57:1b:dc:e7:28:d5:20:1f:76:7d:e9:08:13:e1:11:0d:25:
19:18:42:8e:71:4b:0e:a9:ef:7a:2b:07:f8:d3:7e:59:49:3e:
bc:6e:f4:13:51:20:23:59:6a:0e:b6:47:3f:80:c9:c7:a8:86:
6b:27:8d:47:19:cc:21:8d:48:4b:14:15:06:9e:5f:02:af:57:
9b:5c:bb:51:f4:03:84:36:a1:fc:03:89:36:0e:46:d9:4c:02:
f9:54:45:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:35:07 2025 by rpki-client