
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
File: pTJy83vudp-iPqZUueOPsCNGjZI.mft (raw, json)
Hash identifier: UAwZ0JH5cf/RGn0yUWYzJBf3QTs2WQYzbrIK0RxNiNk=
Subject key identifier: 9B:16:3E:3C:07:3E:0C:CB:09:02:56:72:D4:77:E7:23:72:55:6E:F1
Authority key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
Certificate issuer: /CN=a53272f37bee769fa23ea654b9e38fb023468d92
Certificate serial: 0196549295E3891C4044A11972480D66A03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
Manifest number: B3
Signing time: Sun 20 Apr 2025 19:00:14 +0000
Manifest this update: Sun 20 Apr 2025 19:00:14 +0000
Manifest next update: Mon 21 Apr 2025 19:00:14 +0000
Files and hashes: 1: kl_zb47rnd8AaAP4vBoCuK61hPA.roa (hash: e2T6+pFfv8tCYwWL0QcrJLWjz1NsTR4Qy2fxVQvCN8Q=)
2: pTJy83vudp-iPqZUueOPsCNGjZI.crl (hash: wZbg9++9KLHbU1kntBayhiaYpd9R+NCa2Qe1PoegmoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:95:e3:89:1c:40:44:a1:19:72:48:0d:66:a0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53272f37bee769fa23ea654b9e38fb023468d92
Validity
Not Before: Apr 20 19:00:14 2025 GMT
Not After : Apr 21 19:00:14 2025 GMT
Subject: CN=9b163e3c073e0ccb09025672d477e72372556ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:2c:37:0f:49:3b:49:f6:13:53:a7:b9:af:
92:c1:b5:d7:cd:ae:8c:6a:cf:b5:3f:77:f1:46:10:
29:eb:c7:18:94:fc:3b:89:26:45:3b:c4:a7:37:69:
ee:09:24:45:2f:3f:95:55:6a:40:cd:bb:61:2a:4a:
3f:9e:c4:60:d1:e4:47:6f:e4:47:54:d8:23:fd:04:
06:93:07:6d:52:6f:5d:3e:34:69:d6:bb:a3:87:46:
cb:12:c0:8a:e2:6d:da:e3:da:5d:ca:ff:72:80:fa:
8b:3a:c1:25:f3:53:f0:71:54:b5:b6:73:e0:ba:32:
61:80:2a:26:42:18:91:fe:bb:31:63:1d:8e:bd:ea:
a5:8b:56:fa:c9:c7:05:be:3f:af:bb:95:ad:7f:29:
ee:69:2e:ba:53:33:b9:5a:6b:12:53:3f:94:c4:f6:
fb:30:0e:ba:3f:8b:18:1b:b6:04:97:9f:3d:9a:48:
2b:2a:5b:d6:ad:22:03:f3:84:41:fc:95:c6:e6:53:
64:dd:d8:91:f8:11:a2:ce:56:ce:10:23:92:c0:29:
5c:5f:ee:88:fd:60:f7:f1:3d:b1:37:9c:63:e7:6a:
dd:09:54:82:5b:c9:1f:12:53:da:f8:0b:2b:23:ae:
c7:9a:0e:68:0f:9d:6f:bd:9e:53:49:34:0b:3c:ad:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:16:3E:3C:07:3E:0C:CB:09:02:56:72:D4:77:E7:23:72:55:6E:F1
X509v3 Authority Key Identifier:
keyid:A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:63:91:3f:89:c4:cb:a9:ab:fa:6e:a8:b8:9d:ae:93:7a:47:
05:7b:10:26:0f:55:b3:ab:ba:27:bd:3b:b9:a5:3b:5f:a3:b1:
42:8f:43:9a:42:d7:28:d7:88:4e:dc:e0:ba:94:fd:00:be:ce:
d6:49:1d:b1:01:89:3a:06:7a:79:e4:da:6b:7f:86:86:d6:cb:
43:be:03:8e:49:e2:b7:7c:70:37:1f:30:82:b6:55:0d:da:5c:
ae:64:50:29:41:40:1c:2d:5f:5d:6d:d7:56:33:f5:f3:03:b6:
c1:2f:c7:9b:ec:32:50:ef:d3:d7:b9:e8:c0:5b:42:d1:78:ed:
93:ef:9d:1e:18:44:13:1f:a6:ea:05:34:15:c6:b2:b4:e4:e2:
a5:3c:84:87:a9:c6:df:a4:f6:57:73:2f:c3:13:0e:72:7b:77:
a7:f8:2b:78:08:26:e1:6b:28:f6:41:94:04:95:7e:ac:22:70:
c4:aa:4f:35:06:ae:3d:7f:18:ab:18:53:34:86:a1:c6:b5:bf:
9b:64:67:ec:03:db:de:9f:2e:95:f0:54:74:f3:99:fb:a8:9f:
0b:79:ea:3e:45:0f:7f:74:a4:25:99:a2:ce:20:04:7e:af:e7:
ad:ed:18:56:37:6b:1e:4e:d9:3a:5c:74:fd:34:92:ff:fa:43:
25:49:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:58 2025 by rpki-client