Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
File: PmxFIHWfOk74uamifiUzznMsVBE.mft (raw, json)
Hash identifier: rIOBZmnuEz13lVN7Ukf5XdzbjWPdlz6LCFS/Bm5GO0Y=
Subject key identifier: EA:56:5E:32:42:FB:5C:87:37:81:B1:21:D4:26:38:1A:6C:FF:37:6D
Authority key identifier: 3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
Certificate issuer: /CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Certificate serial: 01964F355C8E5EBA9DF3950240EE53593C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
Manifest number: 148E
Signing time: Sat 19 Apr 2025 18:00:19 +0000
Manifest this update: Sat 19 Apr 2025 18:00:19 +0000
Manifest next update: Sun 20 Apr 2025 18:00:19 +0000
Files and hashes: 1: PmxFIHWfOk74uamifiUzznMsVBE.crl (hash: VaW2uGp6icjW7O/lPU0bLXKzBnZ864SWe4Fsp5pZ6MQ=)
2: f62uVetw4VLEAcyA7iUss0CmbKk.roa (hash: KfBTV0RaWF6oQ2oIYy/lZbeXGP7Rdv40K79+xRa2szk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:5c:8e:5e:ba:9d:f3:95:02:40:ee:53:59:3c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Validity
Not Before: Apr 19 18:00:19 2025 GMT
Not After : Apr 20 18:00:19 2025 GMT
Subject: CN=ea565e3242fb5c873781b121d426381a6cff376d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:ba:ce:e4:76:9d:28:59:cc:58:59:31:a5:
53:b1:ca:75:33:9f:50:db:72:1c:11:0a:07:26:87:
55:3a:45:7b:81:de:c7:da:b5:81:ef:d1:b9:ac:03:
df:6f:ef:85:79:16:d4:20:84:4b:f9:5f:9d:3c:4e:
21:6c:0b:84:95:a6:f4:03:3f:13:14:57:e9:cb:d2:
b3:83:95:41:c6:de:33:3d:53:70:57:e8:f5:67:79:
73:3e:69:d1:e6:11:1b:56:5f:25:ae:dd:07:ec:26:
52:49:0c:d1:5b:f1:c6:b3:33:f7:ad:dd:29:e0:a5:
c8:53:bc:c4:cf:d3:51:f4:40:a7:b1:9d:ca:64:4f:
c2:67:f7:1f:24:bd:fd:dc:34:47:17:a8:58:60:76:
a4:e3:d6:fb:50:e9:3c:51:81:49:a5:b6:3e:d2:f6:
d8:21:6f:af:48:46:1c:bf:c9:31:6c:84:90:a3:40:
94:cf:2b:1b:4c:cb:85:7a:4a:0f:99:fe:66:f9:99:
e1:24:6e:fd:6b:59:68:99:a9:d1:28:98:ba:4e:6d:
a8:3f:13:11:6f:9a:63:78:1e:4b:24:d2:74:b4:5e:
9a:0c:af:b2:e1:f7:a4:45:de:b3:9e:59:fc:1a:e9:
8f:05:2a:a5:45:69:f5:94:be:eb:61:75:a7:0e:df:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:56:5E:32:42:FB:5C:87:37:81:B1:21:D4:26:38:1A:6C:FF:37:6D
X509v3 Authority Key Identifier:
keyid:3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:02:7e:fa:16:42:64:78:f9:aa:8a:8a:da:fd:bf:5b:ec:eb:
2f:ac:f9:91:36:43:f5:08:f7:3e:f4:fb:67:b3:8e:cb:0e:21:
b4:ec:8c:b5:23:d7:49:90:8f:5a:38:08:57:a1:2a:fe:69:a8:
6b:fb:9c:41:9e:88:8d:b2:f0:74:52:7d:4d:8a:32:21:7e:dd:
66:97:96:51:6c:84:fa:75:a0:c4:bc:9d:2f:66:35:32:66:55:
dc:02:01:c5:00:1e:c5:ea:91:ca:79:73:19:d6:c0:76:2e:20:
f4:fe:87:ae:f6:b8:a9:31:15:8c:2b:8b:59:af:82:62:90:93:
42:65:03:49:6f:f3:6a:ab:01:77:0e:14:1d:be:ad:86:4f:26:
f9:76:f5:15:72:e8:ed:73:a4:93:94:22:05:71:e6:21:88:74:
43:06:2d:c0:a8:c1:4c:18:ce:b2:79:a3:a0:28:19:94:b5:ab:
c0:b9:09:a0:ab:aa:0b:8a:39:86:7d:5e:85:31:bd:45:2d:4c:
ed:ab:61:93:a4:a0:21:cf:68:41:72:f2:0b:2e:46:66:e0:e8:
0d:e0:4a:82:85:43:3f:9d:3e:c6:11:e7:57:8e:02:5e:e4:fa:
55:66:8a:67:36:2f:6a:9c:e7:50:4e:6c:b2:65:cc:13:1b:71:
f4:cf:c8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:50:06 2025 by rpki-client