Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
File: Pr6uqg8H3D1UvBFcziAq2pggsdU.mft (raw, json)
Hash identifier: GC3NEgM+r+AC7jkirxAZjSDwRUgKFBDrAdQpcYDFZ/A=
Subject key identifier: 85:A3:86:4A:F9:39:70:1A:5A:E7:B5:53:C2:9A:9D:05:D8:B1:B8:01
Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
Certificate issuer: /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Certificate serial: 019658A67FD6BF1E118402A356D676648CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
Manifest number: 0692
Signing time: Mon 21 Apr 2025 14:00:28 +0000
Manifest this update: Mon 21 Apr 2025 14:00:28 +0000
Manifest next update: Tue 22 Apr 2025 14:00:28 +0000
Files and hashes: 1: Pr6uqg8H3D1UvBFcziAq2pggsdU.crl (hash: 0npBCe/HOICT4FclXGMN77MZ56kHL7FBUiitWP5F4NU=)
2: nV3wzH_1I5VE4qLJ5nCrt9MPHjQ.roa (hash: db3hfBEW1jL4gbyVu0D2s50T0rgPqR4B0mvJEYFg7lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:7f:d6:bf:1e:11:84:02:a3:56:d6:76:64:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Validity
Not Before: Apr 21 14:00:28 2025 GMT
Not After : Apr 22 14:00:28 2025 GMT
Subject: CN=85a3864af939701a5ae7b553c29a9d05d8b1b801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7a:95:88:84:1a:f9:20:a8:5d:6e:04:6c:cf:
5c:fb:83:96:f5:00:e5:2c:c2:97:6b:6c:8e:71:5b:
a1:16:fe:27:ce:f9:12:88:f3:45:71:0b:d5:18:22:
d3:3e:35:b1:09:cc:98:69:4d:87:72:9e:58:8a:3b:
1b:8f:64:82:c6:e9:26:14:aa:14:64:5c:51:19:8a:
e5:42:5d:c6:f0:49:2d:e3:f9:17:de:15:73:15:e5:
17:c2:5b:10:a3:17:12:7b:e9:b8:9d:22:fa:44:39:
d8:21:9f:2b:de:ae:15:de:12:49:c4:54:d3:3f:48:
f4:1a:2e:86:03:1f:16:14:dc:0b:b7:35:b5:9f:c4:
35:31:15:47:3b:f0:7c:04:c7:3a:eb:4b:73:54:d1:
99:64:11:83:33:2b:52:0e:ad:2e:89:24:59:ff:16:
0e:e6:60:7f:e9:84:3f:86:e2:2a:2f:77:19:01:1b:
70:50:bb:25:80:16:a8:a6:50:f4:f7:5b:d0:10:7c:
ee:e7:70:7e:51:e4:65:3e:43:cd:4b:f3:ea:d8:fb:
0d:2a:63:4a:c0:ad:9f:4a:06:b9:c3:8e:44:1b:67:
ff:bf:05:35:32:41:cd:9d:d9:66:e9:3a:8d:40:60:
98:f6:c5:17:76:09:23:8b:02:7a:1a:75:c5:e7:2d:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:86:4A:F9:39:70:1A:5A:E7:B5:53:C2:9A:9D:05:D8:B1:B8:01
X509v3 Authority Key Identifier:
keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a2:7a:1b:16:0d:a4:59:ac:61:eb:95:54:de:3f:7d:57:61:
f0:9e:5c:a0:84:7c:e2:61:1d:c3:6c:36:bb:3c:1e:7c:6a:9e:
56:7e:c8:63:da:f3:ba:f1:85:48:2a:96:27:1d:87:8e:37:2e:
a8:c9:67:37:f8:64:73:98:7f:2f:53:f0:45:65:dc:5e:45:8a:
5e:68:22:72:6d:a3:29:fb:7d:4d:db:59:ef:73:81:8b:e6:aa:
45:47:c4:01:7a:86:c2:40:ff:14:50:bb:26:a9:88:71:c7:64:
99:96:25:07:a3:70:b5:17:5c:58:fa:cb:31:8b:4b:01:5d:7e:
14:46:f1:72:89:bc:e8:e3:54:ef:c0:42:ae:80:76:b0:75:13:
20:36:31:fc:21:c5:5d:3c:91:55:74:65:83:dc:a5:36:50:eb:
37:05:13:1b:4f:9a:3e:52:85:3e:50:47:f0:12:c7:22:08:b8:
6d:58:33:76:61:52:97:f6:b7:55:df:9f:3a:ff:41:47:fe:87:
14:dc:11:68:b9:d3:3d:3a:d5:1c:2b:90:c6:76:b5:fd:a1:43:
03:8d:ae:00:35:9f:de:ac:b0:05:ca:9c:53:fb:9a:5f:70:1c:
74:9b:75:8f:2e:88:c9:d0:3b:9b:0c:0f:61:43:ca:ad:5c:3e:
5f:e3:b2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:56 2025 by rpki-client