Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
File: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json)
Hash identifier: ZNifQCJOPf61++u6Is1Xoh3Sx7+qwo9GVjEyypjUzG8=
Subject key identifier: D1:14:83:0D:3D:05:54:65:14:D3:08:4E:7B:BF:4D:BA:0C:EF:8D:41
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 0196120F538EF3CEC962D74301817D0B176C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
Manifest number: 14DF
Signing time: Mon 07 Apr 2025 21:01:56 +0000
Manifest this update: Mon 07 Apr 2025 21:01:56 +0000
Manifest next update: Tue 08 Apr 2025 21:01:56 +0000
Files and hashes: 1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: NMjfAp8zDpOYH1J0nARf6hY9W99QCnkD7FytXDF51Ps=)
2: D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa (hash: L98txIeHFCVTE5FfZdJjhE+NAuboMbn59/Tg8vXNf1Y=)
3: FPWYS5FPdi_36PocHDQv9w20hsM.roa (hash: lc1AFnplH2+Ms7H/N6TFQmmzCrwqddRkrKSWWiBizwU=)
4: GD4Ao9B2cz5WTYzecC-kGpGE8PU.roa (hash: EMPtxZQPJUmcPd6jCs0XXLsuloEWz1y/aD3A32qr1zk=)
5: W1awuHaHMUM8Quc80WAi-XtdIzY.roa (hash: +ggiQE1BpawHqA/zPCH8mung319bbE2FMHPQr3Jv5zk=)
6: dL_cPR3BvEV2FZeLKttQtUtkTJA.roa (hash: sW6C8Oel7oIOAbSvnZNd6R3ZV3AqqC/NBWFrXS1er6s=)
7: jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa (hash: mvV2l5CpWyu6M49qXSrw0SVIhjTViniokzpN0H6YY+0=)
8: vRRL6lXZDT1QQeeextawYFp6dTk.roa (hash: OGSPwUDB+II0bvau8QxtXKLAR/Lr2UnzedciO1U9Xfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0f:53:8e:f3:ce:c9:62:d7:43:01:81:7d:0b:17:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Apr 7 21:01:56 2025 GMT
Not After : Apr 8 21:01:56 2025 GMT
Subject: CN=d114830d3d05546514d3084e7bbf4dba0cef8d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:41:f2:ed:71:95:3d:96:06:54:64:df:68:
12:b1:eb:db:94:72:18:6c:bc:ff:ee:a6:f3:18:36:
4f:0a:34:9f:da:c2:0d:56:35:72:83:e5:32:65:0a:
e1:49:3e:5a:c2:2b:64:24:eb:bd:16:89:34:aa:47:
42:24:f1:87:3e:bb:80:f2:1b:4b:39:f6:e3:0d:3d:
41:7f:54:85:4b:3c:1c:c2:a4:ff:a7:e2:81:e7:cd:
0f:9f:07:ad:36:d7:70:bb:a8:0f:ab:4e:7c:d2:52:
7d:48:08:30:9e:76:fa:3e:0e:b7:b9:47:ea:05:cc:
97:5a:13:e5:30:98:b5:da:eb:9b:87:56:1c:28:aa:
7f:83:c4:0d:17:eb:04:76:12:db:cb:c3:50:15:d8:
4a:29:6d:9f:da:72:da:e4:7a:dc:ef:94:33:05:2b:
3a:ae:b9:90:83:b1:ce:46:22:af:35:8e:69:5b:72:
12:0f:6c:5e:c8:4b:9c:0d:ea:19:32:8b:4e:b5:71:
92:42:87:21:58:e3:a3:05:77:6f:28:0f:61:a8:68:
e2:5b:66:15:ba:17:6f:f4:24:57:c3:be:5c:f4:eb:
a6:b4:07:24:f2:b1:6a:fb:68:7a:5e:25:b5:94:22:
7b:ab:71:ef:0a:5d:1b:19:89:31:53:9a:a0:ab:c9:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:14:83:0D:3D:05:54:65:14:D3:08:4E:7B:BF:4D:BA:0C:EF:8D:41
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:01:5e:9b:85:d4:c0:6e:77:70:1d:95:c2:b4:1d:42:8c:2c:
be:c6:fc:4e:e2:f8:30:c2:ef:75:af:85:51:59:7d:ca:a1:8a:
a6:6b:5b:ef:9a:3d:8f:a1:e6:f9:92:ef:c5:c5:ae:2d:78:5a:
d5:b7:e7:de:c5:2a:41:9c:fb:2e:b2:6d:06:21:0e:3d:ca:61:
97:64:6c:70:cb:07:6a:f1:d0:5e:42:39:c5:37:91:55:78:35:
da:7d:df:e9:99:1e:61:df:ca:e3:d4:87:01:f0:01:75:23:0f:
c2:fc:7c:b2:ff:30:0f:93:2c:ae:65:31:4b:2c:12:72:ce:75:
72:bb:12:14:6f:28:7f:f1:17:25:3c:92:a5:1f:07:1e:1c:89:
17:3d:4a:f2:da:d3:2e:03:6e:60:1b:87:29:47:9f:f4:d5:a9:
52:6d:9f:6e:ad:b7:c0:f5:31:d1:2b:d1:44:dd:b3:97:0d:4a:
c6:41:7d:11:50:b1:cd:68:4e:c6:a7:2c:7c:25:10:44:1e:19:
80:d0:07:c2:63:63:8d:82:ed:cb:c2:6f:0f:ba:5d:54:27:69:
f3:a2:3f:c2:64:7c:e2:de:9c:13:9c:b2:7f:af:c9:ba:a8:90:
86:88:60:8b:c0:6c:8a:00:46:4b:60:5f:c8:0e:0d:dc:95:f3:
29:cc:45:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:54 2025 by rpki-client