Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: kXnpGXAAJ1v3vKWsnQmrSkaznE+ojXU/NwEkX7By78o=
Subject key identifier: E3:04:98:24:35:83:99:E8:B4:C4:9A:E0:D4:42:21:92:0D:30:7B:0B
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 01964BFE18C2A91841FEC38D7569A253839D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 03:01:05 +0000
Manifest this update: Sat 19 Apr 2025 03:01:05 +0000
Manifest next update: Sun 20 Apr 2025 03:01:05 +0000
Files and hashes: 1: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (hash: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=)
2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: rwBP/H1DBYrJft5q5fHIe6qsiLmehtqRaYwuykuqtm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:18:c2:a9:18:41:fe:c3:8d:75:69:a2:53:83:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Apr 19 03:01:05 2025 GMT
Not After : Apr 20 03:01:05 2025 GMT
Subject: CN=e3049824358399e8b4c49ae0d44221920d307b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fb:64:2f:e5:eb:f5:f4:18:ea:9e:fb:b9:90:
e8:84:10:cb:bf:b4:54:91:60:33:4e:85:5a:ec:37:
77:a0:41:4d:14:4c:c4:f7:7e:fa:a1:9e:3a:a4:77:
4e:05:ac:bc:61:27:7b:be:32:d8:5d:c5:cc:d0:3f:
d6:53:d6:bc:5e:61:fa:ac:4f:95:9d:8c:43:41:40:
09:c9:49:c0:d5:d7:7f:69:db:65:58:9d:67:52:88:
b6:c6:e4:e3:8f:17:9e:c8:53:a7:00:2f:e4:4a:61:
cd:86:36:b6:d3:1e:ca:dd:52:8a:12:04:56:a1:f2:
03:84:57:cc:db:a3:44:52:9d:f5:6a:8b:0b:53:7a:
3a:7f:a2:ad:06:79:30:b2:f1:54:a7:5d:82:79:4b:
f9:bd:56:11:c4:d6:d1:fa:24:2f:1e:1d:14:47:2a:
0e:2e:c6:d1:3d:99:82:4b:c3:ad:a8:68:c7:3f:b2:
4e:eb:9d:32:7a:2a:eb:02:a2:44:8c:0a:35:60:95:
b7:f2:c1:15:b0:ba:16:e3:ef:1a:8a:0d:54:3a:fc:
b2:50:84:8c:69:df:ff:ad:9d:57:97:72:b9:d9:58:
7c:af:64:4d:b0:b2:e4:25:aa:4c:34:0d:72:e1:47:
bf:fb:ba:b8:fb:cb:c0:23:77:38:8b:fc:11:b4:02:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:04:98:24:35:83:99:E8:B4:C4:9A:E0:D4:42:21:92:0D:30:7B:0B
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c5:49:72:fc:4a:b2:00:66:6c:4f:df:de:da:aa:7f:dd:0f:
13:73:ce:49:46:34:8e:06:76:53:71:de:d3:a4:1b:d5:b9:3b:
c8:10:a6:27:23:15:cc:24:14:15:5b:33:9e:57:d7:d6:e6:9f:
9f:82:6c:8d:f9:0c:de:b6:4d:41:4e:6f:bc:6e:d4:bd:53:c7:
16:5d:11:f9:30:c8:f2:c3:0d:c2:f0:13:42:38:39:85:75:b4:
d7:37:31:ec:9c:b2:5f:67:8c:24:a1:cc:43:ab:8e:0f:6a:cd:
17:04:fa:47:a3:28:78:b7:14:12:57:d2:cb:87:4d:02:c9:85:
67:c6:36:3a:54:c1:d5:30:63:75:3c:71:81:9c:1a:bb:d7:9e:
69:5b:72:74:9b:4d:82:0a:33:5f:6c:71:d9:d4:c0:ef:05:60:
0b:fd:0d:43:40:d8:f8:5b:a5:70:21:37:30:70:22:c8:0a:23:
52:cf:3f:ba:58:cd:e7:01:97:46:e7:ba:a9:ea:19:e4:bf:e3:
20:82:7a:94:32:12:16:23:17:41:16:97:b9:e9:60:2f:ba:93:
93:0b:d7:3a:17:be:8f:73:6d:87:3f:14:09:38:32:77:11:1e:
a2:5e:f4:8a:ea:8e:32:4e:df:16:c5:2a:45:07:31:a6:6e:62:
4b:e9:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:08:24 2025 by rpki-client