Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File: pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier: TM3cgizYdQCZMfBEAGq10rAVYvuKYnPqiRSvi6a2xU4=
Subject key identifier: 21:97:63:E5:32:E9:40:9C:45:D4:BD:F4:83:E4:E6:3F:DC:99:4D:9D
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 01964D7E6AAEA376768D6C6998DA9A7DD3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number: 0E39
Signing time: Sat 19 Apr 2025 10:00:52 +0000
Manifest this update: Sat 19 Apr 2025 10:00:52 +0000
Manifest next update: Sun 20 Apr 2025 10:00:52 +0000
Files and hashes: 1: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (hash: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=)
2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: od2pXSwD07A++dnn9DxcnENREL1/SVyKQs2Zc6hDc6s=)
3: rXPM57-D6wTVhLckZD7CZVwkBW8.roa (hash: fUjK4fhETtHvQdYsLgWmfiWiFboo/MkwlvPD3alJWYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:6a:ae:a3:76:76:8d:6c:69:98:da:9a:7d:d3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Apr 19 10:00:52 2025 GMT
Not After : Apr 20 10:00:52 2025 GMT
Subject: CN=219763e532e9409c45d4bdf483e4e63fdc994d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:4d:19:66:a7:76:bc:6a:a5:5c:5e:fb:48:
8b:03:da:a9:b0:36:46:03:23:cc:d0:09:77:b6:ea:
dc:81:18:8e:22:93:45:47:e0:02:70:2f:1a:fb:46:
56:8e:d2:8f:9b:c0:9d:17:9d:dd:b3:8f:19:79:4d:
02:ef:28:48:02:46:a4:89:38:98:a8:ce:18:66:c2:
6b:4f:ca:23:c6:46:a7:63:f2:ff:1c:e2:dc:c3:c7:
93:a8:cb:80:d3:5a:c1:d8:c4:80:e9:47:2e:4f:e1:
e5:ac:9c:e4:b6:b9:01:4d:2a:c7:8b:10:71:9c:23:
7d:58:f0:e5:6e:df:d1:41:e8:a2:d6:da:f2:99:5a:
1b:ab:73:c1:b1:f9:17:78:29:d8:83:c7:37:b9:74:
f5:62:5f:9e:08:c1:85:c2:14:16:31:2b:c3:d8:2a:
df:7a:ae:82:70:6d:3a:7a:21:47:bd:de:bb:91:f3:
c1:79:64:cc:c0:8a:7e:60:53:ea:d4:33:52:d1:df:
14:55:ae:a6:97:3b:47:67:a1:b0:3e:67:18:34:b2:
b5:be:18:fd:5a:97:9b:e0:fd:c6:df:24:93:36:ac:
69:f6:d5:15:90:8c:50:6b:15:9e:f4:1a:06:b4:6b:
ae:02:e9:f3:6e:ef:3b:53:bc:2b:ce:8e:ca:f2:96:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:97:63:E5:32:E9:40:9C:45:D4:BD:F4:83:E4:E6:3F:DC:99:4D:9D
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:07:a6:2a:d1:54:a8:59:0c:d3:07:ef:da:54:96:ab:cc:0e:
ae:2f:a4:94:74:03:9f:81:c4:93:76:67:d7:81:90:98:a5:fa:
27:29:21:a6:a4:03:c9:7f:5e:36:ef:29:83:d0:56:c1:22:ea:
5a:67:02:c1:29:6a:fc:f2:a7:94:15:32:1e:d7:2f:21:72:8f:
ae:93:89:9d:41:98:bc:22:8b:90:70:8e:d4:3f:de:91:3c:65:
0a:e4:1b:d3:9d:a7:28:ac:29:53:36:3f:4c:97:7e:46:f3:ff:
fe:58:be:60:c9:1d:c5:69:a5:7d:cc:c7:ff:8d:a9:6c:6b:2a:
44:15:be:e8:36:b0:1a:70:43:1f:5b:42:b4:51:24:d8:3f:b9:
c7:2c:6c:cc:8c:b4:75:22:dc:36:b5:44:0a:b9:7c:67:2e:46:
58:04:19:cf:95:37:c8:00:e6:ce:23:e8:3d:d9:f6:2f:02:85:
6d:e1:7a:c7:77:e2:e0:e8:77:03:b9:d5:b1:86:73:87:e4:d3:
f2:1f:65:c4:9e:53:1b:3c:62:97:3d:90:12:ff:30:67:e2:ab:
a3:c6:58:e1:eb:f6:de:9e:a8:6f:b1:90:b5:f5:0e:c6:88:09:
ac:84:78:3a:60:95:68:48:70:15:1e:c2:8b:29:43:bf:b8:99:
48:c3:7a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:52 2025 by rpki-client