Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: 3GGeFdlhLHfrFojsMt2fa5mrFcSzBKTTjzCvR9UEU58=
Subject key identifier: 9F:94:F7:8E:6E:22:0A:C6:0D:21:2A:99:59:74:2B:F5:49:ED:66:A1
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 019646698ED01F87E23C9F5125B70FC95364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 11F4
Signing time: Fri 18 Apr 2025 01:00:45 +0000
Manifest this update: Fri 18 Apr 2025 01:00:45 +0000
Manifest next update: Sat 19 Apr 2025 01:00:45 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: H+jEXTV/LAC40Tky98q2q7R949YqTt1f3Ls/07aQyoA=)
2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:8e:d0:1f:87:e2:3c:9f:51:25:b7:0f:c9:53:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Apr 18 01:00:45 2025 GMT
Not After : Apr 19 01:00:45 2025 GMT
Subject: CN=9f94f78e6e220ac60d212a9959742bf549ed66a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:93:47:65:74:f2:64:0c:60:2b:13:44:cc:
04:d7:8f:26:b7:48:d2:e0:b2:a0:05:78:4e:d2:d0:
47:79:45:cd:b8:8e:9c:6c:2e:4f:3c:c9:10:10:f9:
0d:f7:53:23:6a:5b:88:43:0a:53:df:9a:da:fa:d8:
b0:07:6a:e8:a7:f4:ef:2c:9d:10:29:67:e8:6a:21:
21:8d:52:0d:88:f1:3e:e8:3a:d1:68:82:05:16:21:
bd:b8:e8:f7:1b:c3:61:ee:2c:e3:45:b9:38:16:dc:
94:f4:c2:22:14:e6:55:fc:a4:ea:18:2f:11:9b:f7:
f5:8f:a3:ea:d4:da:d0:5f:c3:b9:d1:c0:11:15:9d:
ac:dc:28:c7:8a:3c:70:38:87:a5:11:6f:35:9b:ce:
a0:a9:8e:ec:e6:cd:a8:db:be:7c:aa:79:6d:43:77:
a1:d1:ee:e6:02:6d:4e:98:19:04:82:be:65:b0:4c:
cc:b2:66:3f:0a:48:77:b4:f1:b1:52:8e:ca:20:58:
01:0b:8e:24:ff:df:66:ee:eb:78:cf:a4:35:63:bb:
58:ab:64:a5:65:57:e7:f3:72:04:41:c4:f8:f1:db:
ac:b6:7c:0d:43:75:2d:68:50:90:47:4b:ab:6b:fa:
61:0b:98:f2:1b:7e:5e:8e:d8:d1:18:21:95:8a:9a:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:F7:8E:6E:22:0A:C6:0D:21:2A:99:59:74:2B:F5:49:ED:66:A1
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8c:e0:52:bb:32:d4:47:02:90:98:3d:58:05:49:1c:77:a4:
87:ad:28:26:7c:cf:3e:7d:89:06:c0:2b:a0:ad:70:5e:e7:14:
61:44:6b:12:bc:72:7b:66:4a:70:23:e8:f4:71:c4:48:73:61:
4b:0f:bf:8a:04:a7:1f:00:49:b4:39:fd:a3:91:c3:eb:f4:f1:
4b:3a:e2:00:70:5e:fc:d3:e8:ab:26:5e:8a:7f:18:6f:14:7f:
2b:27:9a:37:45:b0:8c:17:f1:39:4d:85:a0:42:fd:0e:dd:83:
72:44:8e:61:14:fb:49:e4:e3:9d:17:8e:6a:01:cc:84:b1:d6:
7e:1f:00:5d:6d:40:d5:45:81:0e:0f:dd:e2:d1:aa:c6:3f:14:
df:1c:0a:29:85:dd:bd:a7:b2:7a:f3:23:03:d5:2e:eb:68:f0:
95:1b:7e:6e:63:89:14:fa:29:0b:d5:82:48:b5:ee:48:41:c0:
ec:e8:dc:ff:47:5d:f0:13:3a:fc:45:d7:2b:e3:ea:dc:5f:f5:
98:89:53:b6:5b:92:d2:70:60:cf:67:87:43:81:4f:d3:7d:56:
5e:7a:2b:33:ea:5c:bb:ea:57:d8:24:ae:93:79:b1:3c:ca:83:
14:40:a0:3b:ba:97:ec:45:ce:9a:8f:bc:95:39:de:10:aa:c1:
dd:d4:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:53 2025 by rpki-client