Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: 57nF/pejJofkSYWbPVH/Vb4BqSqI0xtYWS0Nw2WUOcg=
Subject key identifier: AB:98:F7:BC:0D:27:50:1E:17:21:7C:00:E6:B4:FE:F2:E9:F1:45:23
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 01962527ED4DC8C71BCBFEA7B8D4A988A08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0BCC
Signing time: Fri 11 Apr 2025 14:01:35 +0000
Manifest this update: Fri 11 Apr 2025 14:01:35 +0000
Manifest next update: Sat 12 Apr 2025 14:01:35 +0000
Files and hashes: 1: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: FKtQEWdHOXcShcr6KFoviJOryX1+X6jmlLR1U8C/ajc=)
2: x9hUxJfn47T_kDyiFQOIzJ-cz6A.roa (hash: xdaaD+GtntD/xfR79byZL40UTK4Nd3mN7SfVEUnzNx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:27:ed:4d:c8:c7:1b:cb:fe:a7:b8:d4:a9:88:a0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Apr 11 14:01:35 2025 GMT
Not After : Apr 12 14:01:35 2025 GMT
Subject: CN=ab98f7bc0d27501e17217c00e6b4fef2e9f14523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:e2:60:72:cb:c7:96:e9:cb:51:26:5e:f9:
25:53:e3:e6:ad:59:a2:96:c4:97:37:8f:5a:61:b4:
4a:7b:e7:e2:48:63:ea:5f:48:5b:a7:81:2e:d0:36:
6c:96:ef:9a:89:b5:e2:98:bf:02:96:8a:29:e2:ac:
af:08:4a:cc:e0:de:a7:39:d7:f7:63:c9:58:b5:66:
4b:d6:bf:85:2d:f2:91:89:db:68:1f:48:fb:a7:18:
85:d6:32:eb:5b:b4:ff:05:fc:1b:6e:b3:8e:60:6c:
85:cc:db:90:91:01:7b:fc:00:3a:44:c5:9e:04:3e:
7e:16:f8:38:8f:26:9f:c4:05:18:53:b3:4f:8b:5d:
6f:d2:78:6d:ee:c2:a8:80:7f:1b:77:c7:44:81:b6:
f2:7d:8e:3e:f1:60:4a:b5:e4:aa:a6:24:8e:3b:ad:
57:df:85:dd:20:25:e4:f2:71:7e:b8:8a:c9:87:8b:
75:48:3c:64:5e:55:ea:f1:d9:b2:ec:04:ae:f2:32:
9f:70:97:65:c3:08:dc:25:e1:aa:7a:e6:5c:60:da:
52:12:cb:8d:ba:28:45:76:5d:db:82:79:64:6c:4e:
8e:65:40:97:43:c9:73:d0:97:70:7c:11:aa:18:f5:
52:95:51:9d:99:bb:ed:20:31:65:f2:3d:28:1a:ba:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:98:F7:BC:0D:27:50:1E:17:21:7C:00:E6:B4:FE:F2:E9:F1:45:23
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:59:ee:17:a5:06:82:2d:51:e5:2f:fe:bd:b8:f3:d6:d9:03:
4f:f6:99:2f:ac:2b:e5:66:3c:17:77:86:9d:56:e7:34:63:91:
70:9e:50:f7:7e:41:ae:6c:98:39:1a:79:92:bd:84:b2:f9:07:
3c:87:6d:ce:66:86:bf:b6:15:20:63:2f:f6:3c:d4:ee:41:e2:
6c:bc:e2:45:f4:0d:09:b9:cc:8c:c7:0e:08:e3:85:8f:6d:7b:
1e:97:85:f0:bd:7d:9a:5d:1a:3b:9c:f4:51:b3:39:53:a3:76:
8a:82:ff:33:29:74:fa:c1:9c:eb:24:d4:69:79:50:12:28:ba:
7d:04:25:87:cc:78:27:a7:c3:a7:e9:37:96:24:11:09:94:99:
7a:f3:48:30:52:01:96:e2:5c:db:0c:8a:85:73:47:77:ff:5a:
89:64:df:f1:7b:44:ef:f3:7b:27:c7:0a:19:31:f0:2f:34:64:
44:d8:9a:05:9a:23:60:cd:5f:6c:13:ef:af:54:3c:0e:5d:9d:
db:90:f7:d5:51:f9:f7:4b:9e:99:2c:99:58:31:dd:8a:e3:08:
d4:1a:bf:19:52:e2:e7:2f:86:fc:a7:2b:b0:2f:45:09:f7:9f:
d9:cc:a1:0e:f4:e4:a1:47:df:e5:dc:98:d4:fc:bb:5b:1b:d1:
48:10:ec:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:57 2025 by rpki-client