Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File: PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier: Ppw0raCrdvupOEtzWmWBmN5WpBnZ0F2XvFdIEGBhxt8=
Subject key identifier: AA:B5:25:DE:41:9A:B9:D2:EB:A4:DE:1E:77:38:9E:07:4C:A8:08:FC
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 019652364A87D90C588394DF6024B4EF54DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number: 0DFF
Signing time: Sun 20 Apr 2025 08:00:11 +0000
Manifest this update: Sun 20 Apr 2025 08:00:11 +0000
Manifest next update: Mon 21 Apr 2025 08:00:11 +0000
Files and hashes: 1: K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa (hash: j54MZjizcVLzs5xFTxfuwkhp1hDwpOUSaYB4Ws5FVDc=)
2: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: z0vRXpbnlp3x2BEMEa/YpDfN1aOldYl/j8k+lyKTAqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:4a:87:d9:0c:58:83:94:df:60:24:b4:ef:54:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Apr 20 08:00:11 2025 GMT
Not After : Apr 21 08:00:11 2025 GMT
Subject: CN=aab525de419ab9d2eba4de1e77389e074ca808fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:0e:d1:59:37:25:4e:71:68:8e:e5:89:ea:
6b:cd:95:d9:cc:94:27:0d:a4:8a:ca:36:ad:bc:c5:
40:27:05:b7:1a:a0:03:97:ef:1d:31:a0:22:19:9f:
10:a5:b2:44:c5:b8:70:a3:61:62:26:28:05:8b:4b:
52:6f:12:90:fa:18:ee:d3:49:c3:89:6c:a1:38:33:
6b:a0:cd:8e:9e:98:77:e1:36:7d:c4:22:15:ef:85:
50:10:95:37:2f:7e:01:43:b1:97:a3:16:f9:ce:56:
b4:0f:89:e4:c0:82:99:2b:7e:d7:bf:8f:bb:e9:f7:
45:d5:48:c3:ff:61:68:82:ad:cb:fe:ca:8a:9c:c6:
7c:cd:22:78:8c:0e:0d:fe:66:3d:82:9c:17:c8:86:
65:96:98:97:fe:82:e8:c4:2b:e5:a3:bb:78:13:22:
01:44:b5:50:0a:50:34:37:a4:04:41:ae:1c:ed:b3:
13:dd:de:c9:eb:60:94:18:74:92:6b:8a:7c:df:3f:
6a:67:e2:e5:2d:9f:ef:68:a6:05:0f:80:5f:52:bf:
5f:5b:73:9c:14:9b:86:52:68:3c:59:77:64:c3:5a:
09:a2:b3:f6:48:1a:15:99:59:ff:b5:29:6f:0f:58:
87:97:40:6e:50:86:ac:e0:4c:31:31:92:e7:d9:9d:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B5:25:DE:41:9A:B9:D2:EB:A4:DE:1E:77:38:9E:07:4C:A8:08:FC
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ea:f1:49:0f:39:b2:09:5b:01:84:23:70:d7:d6:d8:82:e0:
86:40:2c:c0:b4:2b:87:98:43:3b:32:b8:bc:b7:b6:94:92:27:
42:0b:af:9e:8b:55:b4:d0:b1:fb:db:29:a0:f6:22:9d:c6:3a:
13:d9:9d:9d:8b:f1:be:31:15:6c:78:be:c6:98:ff:05:86:74:
f1:90:96:90:e2:e8:51:bb:11:70:4c:64:b7:33:a2:aa:81:c9:
2b:9c:d2:ad:0b:60:00:a5:00:0c:49:59:1b:30:af:b6:ae:57:
69:89:0c:a0:1c:7b:1c:fa:ed:61:7e:f8:4f:cc:c0:66:4c:79:
5b:f6:64:9a:d2:e5:ac:2a:b5:87:7e:b6:97:2d:0c:25:ed:67:
38:97:32:12:93:6f:42:a4:61:b1:16:f6:a4:41:de:ef:58:ed:
e1:51:a2:9f:76:8a:06:7c:5e:bb:9a:df:ad:46:ae:9e:f0:d7:
4d:c8:db:9b:95:e0:0e:f8:b8:df:a4:95:4a:96:6f:82:75:b6:
c1:08:d8:13:af:cf:31:3c:17:49:20:0d:01:c9:ff:f8:71:1c:
51:ee:55:3a:ad:c1:ec:39:35:44:30:cf:37:3f:32:16:dc:a0:
7a:c6:90:e1:e3:cd:e9:93:b2:46:84:d6:d8:80:c1:1f:67:db:
43:04:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:19 2025 by rpki-client