Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
File: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft (raw, json)
Hash identifier: E0h0dStpK0MEhO5fenglgSmsqLQcAprggA1MU7EwdO4=
Subject key identifier: 4D:26:53:7F:6D:9D:CB:E9:95:DA:5B:17:7D:9B:11:38:F7:54:D7:1D
Authority key identifier: 3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
Certificate issuer: /CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Certificate serial: 019647E9D94D782B0DEBF563C9935BE7A30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
Manifest number: 0995
Signing time: Fri 18 Apr 2025 08:00:29 +0000
Manifest this update: Fri 18 Apr 2025 08:00:29 +0000
Manifest next update: Sat 19 Apr 2025 08:00:29 +0000
Files and hashes: 1: 1-zwO4Bnz3Ual-zgnG201JvaWkY0.roa (hash: d0O7JzfUI0auiFcqxl2U8Q+1vT7/+BPs1dhy7hNLrrs=)
2: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl (hash: qbj86aPXYzqmqDDTST53ATQfz1DjlY5w/M7wYno7EPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:e9:d9:4d:78:2b:0d:eb:f5:63:c9:93:5b:e7:a3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Validity
Not Before: Apr 18 08:00:29 2025 GMT
Not After : Apr 19 08:00:29 2025 GMT
Subject: CN=4d26537f6d9dcbe995da5b177d9b1138f754d71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:21:82:33:68:f7:b1:19:ef:06:8a:17:5a:af:
7e:0a:75:2c:15:36:e5:eb:b0:b5:96:e4:d7:b9:c4:
ca:df:19:1f:74:2a:47:86:99:08:e5:2a:2d:55:ec:
df:62:bf:a3:c1:c2:bd:95:f5:96:e6:ee:98:28:22:
df:7c:4a:66:20:3c:e3:1f:32:30:22:cd:77:92:66:
a9:08:0d:69:c0:cf:7d:b8:74:8f:5a:bb:7c:7a:22:
75:03:59:eb:a3:0e:4b:10:67:ae:4e:b9:de:ec:32:
b8:9d:51:c3:f4:55:3d:8b:e5:23:05:d1:94:dd:5f:
16:6e:4b:00:d4:63:8c:fe:d1:ff:06:e5:0a:76:c2:
7f:ec:ab:ae:9b:ac:27:68:4b:eb:41:21:f0:dd:11:
d7:64:61:8b:8d:86:4e:cc:84:25:05:16:b1:df:ce:
6c:8b:43:91:81:58:4e:a8:1a:e8:9f:9b:bf:59:a6:
83:27:a6:d8:4e:be:20:98:58:ef:95:da:45:c0:45:
f9:9a:06:ef:33:63:58:b0:48:7a:62:00:67:84:38:
95:61:42:ce:48:b9:79:ed:c2:20:0b:82:ce:0c:76:
a4:d8:1e:71:c7:88:06:31:35:6e:80:14:27:51:f7:
cd:19:37:8c:ae:ad:e9:a8:6b:59:ff:09:d7:e2:20:
8a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:26:53:7F:6D:9D:CB:E9:95:DA:5B:17:7D:9B:11:38:F7:54:D7:1D
X509v3 Authority Key Identifier:
keyid:3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a2:4a:f4:78:22:ed:6b:02:be:b3:78:5c:78:be:60:40:24:
33:a0:22:d6:87:86:4d:2b:e4:76:19:ea:b0:b7:78:eb:d1:6f:
a9:e7:00:ee:dd:46:06:0c:ce:92:aa:9c:9a:b8:21:da:a9:88:
e1:2d:1b:33:ba:3b:1f:75:bb:d3:6f:22:0a:88:25:54:23:96:
f6:0e:6f:c1:bc:17:54:db:8b:b0:c5:ba:c9:21:34:cd:4a:e5:
8e:0e:aa:93:e4:e9:08:37:a9:12:4f:bc:81:4c:55:2b:03:77:
18:96:76:fe:3f:6b:ba:29:58:84:79:2b:32:77:02:6a:75:90:
fc:ba:55:2b:5f:3f:ba:b7:66:b6:0f:3e:48:e2:ad:3b:73:06:
8e:d1:e0:c9:05:92:3d:33:ba:4e:80:41:86:b0:ec:09:fe:26:
55:92:5e:f0:8b:c0:41:05:5e:30:7b:e7:b7:ec:1d:fb:5d:ca:
bf:11:67:18:63:54:34:ab:35:f9:c9:c8:cb:d6:5d:3c:59:60:
ad:f3:48:44:d6:42:6c:c4:3c:c3:5d:3e:06:27:3f:a0:b7:c3:
05:3c:8c:6e:aa:a7:42:56:88:82:45:4d:fb:e0:d8:eb:b0:5a:
04:15:68:e1:e1:5f:01:74:d7:78:6a:30:a1:64:85:2b:d7:93:
0a:6b:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:46:07 2025 by rpki-client