Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
File: Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json)
Hash identifier: +37H2p+cCXYPv6fot2/kaUsXyYATzua2Wpsr5xNM5Fo=
Subject key identifier: F8:DC:98:52:0A:6C:0D:A4:68:2F:43:C0:19:96:7C:7E:8C:99:D6:B1
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial: 01965500AF14CA40B5C29959A7FCA8AABAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 21:00:30 +0000
Manifest this update: Sun 20 Apr 2025 21:00:30 +0000
Manifest next update: Mon 21 Apr 2025 21:00:30 +0000
Files and hashes: 1: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: 4f80i9Qkhw0xJI40ioesnZ8fJuExh2hRfp9tnZk+iL4=)
2: yUqCwPk0Ei-cViitt4Gqnb4KxdE.roa (hash: rJJZNa4cHpwDRyt4aQOGhddvG2b+c/8oiLA2xlie2pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:af:14:ca:40:b5:c2:99:59:a7:fc:a8:aa:ba:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Validity
Not Before: Apr 20 21:00:30 2025 GMT
Not After : Apr 21 21:00:30 2025 GMT
Subject: CN=f8dc98520a6c0da4682f43c019967c7e8c99d6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:ae:14:f2:78:3f:02:93:ee:37:7b:68:7c:
1b:a0:68:13:7a:6e:dd:0b:19:df:92:4f:3d:5c:33:
39:52:49:03:af:41:cb:ae:00:0c:9a:4a:4d:6f:3d:
9f:65:a3:37:81:bc:d1:02:ce:89:83:0e:0b:7b:67:
f4:e8:2b:47:28:3a:3b:2a:dd:69:8d:2e:9b:28:c0:
77:f5:5d:08:32:d3:ca:f4:78:15:02:ba:a5:6c:1d:
de:ea:66:f4:6f:f1:77:f1:0f:7b:b3:43:90:14:1d:
4c:d1:f5:56:11:1b:10:38:3e:5b:c1:cb:a7:87:63:
d9:26:44:f6:0a:2a:f3:6e:be:b9:2f:5e:2a:c0:9a:
28:bb:bb:ea:9f:50:18:20:48:f3:d3:bd:42:f1:d7:
0b:d8:f6:80:28:7a:da:25:fe:9b:b9:57:9b:68:0c:
15:65:29:09:b7:0a:a0:e6:8c:2d:ce:00:e9:b6:13:
f4:60:da:c0:62:e0:4f:65:8f:88:bb:50:e8:66:0a:
ac:07:1a:8b:74:3a:c1:35:5c:ff:f6:4d:5e:27:76:
2b:f0:22:3a:eb:f0:01:da:e6:1d:03:02:4e:a8:9b:
4e:c0:1d:57:85:97:75:b5:a9:d6:99:4a:fe:b4:9c:
c9:71:d7:dc:a0:9c:2f:9a:43:d2:00:6b:79:8a:e0:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DC:98:52:0A:6C:0D:A4:68:2F:43:C0:19:96:7C:7E:8C:99:D6:B1
X509v3 Authority Key Identifier:
keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:fe:12:af:6c:52:57:82:6b:d8:f4:a1:73:15:1b:5a:b9:bf:
97:7e:ee:7e:d4:ef:e6:01:50:0e:0f:af:fe:1b:32:77:a6:15:
83:6c:54:9d:bf:01:04:5c:e8:fc:53:a8:c8:9d:e9:b1:34:68:
5c:c6:a9:ad:9a:54:45:d1:7d:a6:a9:a7:ea:8f:bd:e2:3a:be:
ce:71:e1:ab:08:c8:72:0b:59:5a:66:17:23:98:98:ff:ff:44:
aa:b1:49:0a:f2:a9:d7:03:45:c5:d7:00:8e:a2:06:94:87:f2:
70:6a:81:29:60:03:75:52:03:ad:95:28:a6:5e:80:c8:49:e6:
fe:64:42:4b:ae:a5:a2:31:eb:ce:91:49:16:e8:ad:72:19:3e:
22:9f:b2:28:8b:13:34:e0:68:89:59:39:09:67:31:d4:af:b3:
cb:9c:6a:1c:34:8d:5e:6b:c3:fb:3a:93:3b:07:be:d8:67:ef:
64:6d:d3:58:36:20:8a:a7:94:c5:ed:7c:cd:22:57:78:90:6d:
f6:b7:15:0e:be:e0:c9:2b:a6:79:be:da:ca:4b:5c:f5:10:56:
ad:fa:e2:d4:f5:59:f7:00:27:d8:fe:13:07:90:f3:60:bb:6b:
aa:75:29:5f:c2:1f:68:e1:1d:11:97:d4:3f:3b:2c:d4:a6:5d:
21:92:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:30 2025 by rpki-client