Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File: PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier: Uss58y2cL06GZD9wQ4l1lrKj3GQMsLONlFa6Xk/SluM=
Subject key identifier: A8:C9:D6:44:C3:2F:5F:26:D9:76:88:A4:7B:94:4A:24:30:79:F4:52
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer: /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial: 019654929417C8F675AE8EED745EC67377BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 19:00:14 +0000
Manifest this update: Sun 20 Apr 2025 19:00:14 +0000
Manifest next update: Mon 21 Apr 2025 19:00:14 +0000
Files and hashes: 1: 3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa (hash: bNvleSp/4QB52V4DZ5fxsf4u+utsXgrzdigeABa48Cw=)
2: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: WnYGqlO/AVapvaQhmgQGcdHIWRiWeo+U0NshY1p1VjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:94:17:c8:f6:75:ae:8e:ed:74:5e:c6:73:77:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Validity
Not Before: Apr 20 19:00:14 2025 GMT
Not After : Apr 21 19:00:14 2025 GMT
Subject: CN=a8c9d644c32f5f26d97688a47b944a243079f452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:a7:dd:7f:bd:c8:da:75:0f:12:dd:e8:b0:
21:27:59:57:46:09:0b:20:22:6c:81:30:6c:ee:fe:
db:61:41:85:f1:20:f1:30:3c:db:0d:54:0c:01:c8:
3f:df:8b:06:e8:23:56:fc:b9:47:16:55:8f:33:34:
e4:96:ad:08:c8:f6:e0:bc:12:b8:dd:80:a8:15:ec:
d1:25:3b:02:18:18:8d:0f:9a:4c:cc:19:7a:87:41:
31:6f:dc:7c:02:47:88:d7:21:db:cb:1d:cb:e1:72:
d0:a0:27:a4:6e:97:3f:9b:04:fd:59:a3:5a:2a:c4:
c7:79:f7:80:56:7a:f7:74:bf:20:24:68:5c:2b:bd:
2a:42:d5:9f:56:f0:55:32:af:71:a8:9e:84:9b:4d:
be:05:93:71:68:5a:05:10:40:0b:a0:79:62:2f:44:
30:fe:59:fe:d3:93:c2:05:9b:3e:e0:dc:14:6b:f4:
35:41:3a:36:1f:5c:a3:56:2a:04:7f:f7:f8:b9:b8:
f9:6d:37:d5:83:a4:df:9b:92:b9:9f:b6:c6:e4:8a:
fd:02:97:2c:e5:19:4b:39:f9:b4:85:0e:dc:eb:ec:
a0:d7:35:58:c0:af:cd:e5:65:21:ce:e9:6a:e0:78:
f6:79:b5:6a:5f:f0:d4:70:cc:3e:36:08:55:80:91:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C9:D6:44:C3:2F:5F:26:D9:76:88:A4:7B:94:4A:24:30:79:F4:52
X509v3 Authority Key Identifier:
keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ab:bb:a1:87:d9:59:7a:b2:b1:91:81:52:cc:d6:44:b1:3d:
d2:d9:ac:bb:3e:04:de:7f:d6:79:09:f6:f7:fb:99:5d:db:57:
53:94:d7:dd:bd:1b:21:07:d1:ed:cf:d7:93:7b:6f:85:b2:c8:
a7:51:e8:db:8e:9e:f0:cd:89:42:b8:cd:7e:4c:5c:07:d3:8a:
1a:61:97:78:67:c0:5a:65:f6:be:9f:ed:90:e0:c1:80:63:08:
cc:a1:55:c5:d5:4f:a8:0f:d6:25:bd:7d:02:b9:f9:cd:0e:c4:
ac:9f:c6:13:61:78:8a:06:ea:69:c1:a6:48:16:b0:8e:68:30:
dc:bd:f7:3f:22:bb:63:72:d0:67:ca:84:9c:03:57:81:79:5b:
0b:53:33:0f:66:4e:6c:8d:8e:d0:45:e9:f3:dc:f2:41:6c:9c:
cf:c8:07:82:b5:95:17:e7:85:1d:21:c1:15:32:9a:6b:d1:30:
ce:f4:0a:43:5d:91:03:e4:b7:34:56:6d:d4:86:88:37:ce:be:
db:65:99:c6:04:1c:0b:05:8e:9e:75:a1:b7:36:0e:ac:79:b7:
cb:ca:4d:b1:d7:2d:a0:fd:df:74:79:87:3a:d0:1f:0a:2f:48:
82:bc:3a:47:56:9f:8f:bf:b9:77:12:d2:9e:98:f9:3f:80:ca:
77:3a:db:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:29 2025 by rpki-client