Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File: PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier: 7FagJ6XdyxElQE/vG4er3q5ztHjcfDrvqOtaSy2aTXo=
Subject key identifier: 1E:31:68:B0:CE:45:8A:7F:18:6D:9D:50:C2:9D:62:D1:4C:33:18:BA
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 01958B4E0570672619435D3B9335EE850358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number: 0D98
Signing time: Wed 12 Mar 2025 17:01:40 +0000
Manifest this update: Wed 12 Mar 2025 17:01:40 +0000
Manifest next update: Thu 13 Mar 2025 17:01:40 +0000
Files and hashes: 1: K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa (hash: j54MZjizcVLzs5xFTxfuwkhp1hDwpOUSaYB4Ws5FVDc=)
2: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: D0CYXPVRDpTx8XqUdfo1SGdF0JYtVdMDnPdvqqpBrvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4e:05:70:67:26:19:43:5d:3b:93:35:ee:85:03:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Mar 12 17:01:40 2025 GMT
Not After : Mar 13 17:01:40 2025 GMT
Subject: CN=1e3168b0ce458a7f186d9d50c29d62d14c3318ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:c6:6c:4a:2f:59:5e:2c:d9:22:38:7a:2b:
7d:2f:b2:7a:36:8d:f8:40:75:e8:d4:99:1f:11:d1:
b0:37:82:7c:aa:b9:ee:e9:29:22:54:5a:a1:8c:83:
71:79:35:1f:b7:f1:df:d8:87:b6:70:59:dd:1a:58:
3c:a6:95:09:be:0b:5d:ab:66:f0:3f:cf:c6:a0:15:
57:6b:9d:14:f6:17:71:82:d8:55:ae:69:fd:73:ae:
e7:a9:dc:e7:91:f9:94:bf:69:77:67:df:f9:9e:60:
c0:27:89:1a:38:be:77:37:10:d1:9a:54:76:e0:15:
b5:88:98:d1:0c:95:47:fc:5d:e8:ae:ff:ff:63:16:
45:7e:d8:f0:9a:e0:a2:26:a7:64:33:04:99:9a:be:
ec:62:8a:0c:63:a5:66:d7:ab:18:68:09:48:4c:2a:
a6:db:6f:22:0e:94:e7:74:13:9f:28:32:d4:13:5f:
97:ef:c1:09:ae:45:1b:e6:4e:69:96:93:b9:78:be:
b9:d5:55:3d:34:c3:97:7d:65:93:43:cc:81:fb:42:
9f:6e:b4:b9:25:c9:fd:c0:fe:57:d9:b3:b4:84:c6:
cd:76:4c:ee:3a:dc:db:a9:10:56:23:5c:cd:f7:e1:
25:57:d0:3d:0b:cc:18:3a:c0:8e:d9:4a:4f:02:5b:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:31:68:B0:CE:45:8A:7F:18:6D:9D:50:C2:9D:62:D1:4C:33:18:BA
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1f:5f:fb:f1:e9:45:92:ea:2f:56:05:37:22:e9:4c:b7:0b:
f8:9f:cb:65:81:f0:06:b0:0e:25:bb:5b:55:15:bb:e2:32:ef:
53:18:e3:a3:ce:13:02:46:66:b2:81:02:d9:13:6b:1a:62:ac:
86:52:5d:0a:c4:68:f1:b2:84:50:f7:fb:dd:2f:56:8d:3e:18:
06:11:e7:cd:74:b1:f3:3a:4f:30:b9:c4:c5:86:90:56:42:2f:
ff:04:cd:7e:03:71:47:ad:57:5e:e3:24:ef:2b:d9:4e:57:b4:
d4:52:8f:5b:7d:d1:10:e3:02:bf:a8:b1:1e:e1:80:d4:81:b5:
9d:91:1e:a4:79:58:c6:1f:a4:c4:f9:eb:7b:d7:14:71:0a:58:
f7:39:c0:1c:66:65:0d:0b:d6:97:ab:77:cb:f8:5c:c2:10:05:
7f:38:d7:a4:30:23:9a:62:13:73:50:81:36:27:ef:df:c2:f2:
d5:85:6d:00:cf:96:ac:ed:65:10:bd:0b:98:7c:64:69:d6:79:
25:e3:9f:ff:29:0a:f4:73:4e:1e:33:25:f8:b9:0b:ce:54:96:
d6:87:dd:40:e7:f9:4e:09:66:8e:42:6d:3c:af:5b:b1:61:fa:
fc:2e:f4:c1:de:63:26:69:b8:29:14:00:34:99:25:9d:3b:1a:
db:b8:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:25 2025 by rpki-client