Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: jVLtzqrBKhKBcYSdpXjZ4QkCHeygEvGxWg5D5nlwPjo=
Subject key identifier: C6:0F:D0:8F:13:CB:3D:E0:2A:E2:C5:E5:D3:4E:34:1D:44:E5:F5:19
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 01958FCF2C50D2DD4269FA9ED22544FD6333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 0379
Signing time: Thu 13 Mar 2025 14:01:13 +0000
Manifest this update: Thu 13 Mar 2025 14:01:13 +0000
Manifest next update: Fri 14 Mar 2025 14:01:13 +0000
Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=)
2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: 4L+XrZCS5Vipo29kgBaPPoL0VK+QDtAkYz2C17aFa7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:2c:50:d2:dd:42:69:fa:9e:d2:25:44:fd:63:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Mar 13 14:01:13 2025 GMT
Not After : Mar 14 14:01:13 2025 GMT
Subject: CN=c60fd08f13cb3de02ae2c5e5d34e341d44e5f519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:4c:67:0c:25:2a:b8:49:b1:2e:f0:2e:4b:
1a:ac:c9:1c:98:29:51:fe:59:4d:0a:87:e4:ae:ee:
fd:6b:cd:b1:cb:b6:68:b1:79:bd:71:f4:18:64:cf:
bc:98:57:30:2c:33:16:85:30:56:76:bb:47:f0:03:
07:21:68:20:18:51:b0:9a:f8:bf:da:34:ee:57:3a:
8d:e0:17:75:ba:65:2a:26:2f:e4:c0:23:09:8e:2e:
85:a1:0f:08:24:f2:5d:a6:8b:5e:78:6a:1b:6a:52:
89:1d:9a:e0:7f:36:41:96:2e:0d:9d:0e:1d:81:bc:
e1:43:d4:c6:7e:6e:8d:b9:05:51:67:50:d0:53:67:
66:b4:c8:f6:ca:00:0a:c0:1a:d9:8d:55:5c:f3:48:
d0:33:0b:63:64:2b:e9:7a:90:e0:c7:04:23:01:8e:
2c:f2:55:34:01:1e:ae:04:68:3a:8c:8c:ff:bd:60:
23:7a:1d:46:4e:04:97:ba:fb:12:c9:b4:49:6c:9e:
6c:3b:0e:88:aa:02:1a:e2:9b:36:6b:39:74:cd:11:
2e:a4:b0:58:93:bc:34:d5:92:75:b1:e3:80:45:db:
1f:82:31:2d:60:24:e3:a0:b7:2a:ad:3b:79:0e:21:
48:d8:c0:ed:66:d4:5e:ff:f8:c9:bb:2f:6d:54:0e:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0F:D0:8F:13:CB:3D:E0:2A:E2:C5:E5:D3:4E:34:1D:44:E5:F5:19
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9e:56:77:72:14:4f:12:75:ca:08:18:41:22:ad:bb:3e:aa:
ef:e6:3b:ad:4a:30:fa:f7:45:72:9d:c8:96:c1:e3:ed:7b:9e:
b4:6e:b5:04:d4:42:af:be:96:94:16:10:ab:18:e6:03:5f:99:
d0:c2:d3:68:7b:4e:c9:9c:3c:52:1e:9e:61:13:41:24:c3:81:
ac:da:81:0f:fc:18:a0:b5:cd:e5:fa:34:4a:a8:c1:02:be:71:
7d:64:b3:4c:79:38:ba:90:86:66:1f:21:d5:af:22:b9:98:21:
b8:92:e0:92:22:4b:61:08:05:b9:4d:12:e5:7e:7b:58:ee:db:
f2:b9:0b:44:9b:a5:2d:6b:1e:32:b4:59:3e:72:e8:cd:ff:13:
76:60:11:07:72:db:90:08:3f:96:9d:82:da:57:f2:a8:28:06:
a1:28:82:11:5e:ef:2c:ef:6d:48:c5:16:dd:20:ea:af:7e:46:
85:e2:15:71:df:36:52:48:68:54:ad:bc:ec:8c:39:09:4e:51:
2d:09:f7:55:a9:49:83:95:44:02:b7:42:27:ef:9e:0d:95:f6:
87:b6:bb:2a:13:21:9c:67:01:fe:0c:0a:31:3e:33:a7:31:de:
4a:b2:ab:b3:cf:43:66:98:39:95:8c:69:7c:61:94:14:99:45:
95:47:3b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:04:16 2025 by rpki-client