Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier: zNIVGvcE8+cleBzbLYsEER7gKTo23UaLj6YfGAmHVH4=
Subject key identifier: AB:53:4C:62:E2:80:2A:0C:4F:47:7A:AB:E5:59:72:67:CC:E5:92:A6
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 01963EAFFA7FB0BA2A965A4D9E66D84D712B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 13:00:42 +0000
Manifest this update: Wed 16 Apr 2025 13:00:42 +0000
Manifest next update: Thu 17 Apr 2025 13:00:42 +0000
Files and hashes: 1: 4prfTAA9HBYIWFQscXuDZvPOJfU.roa (hash: zMicpYmGFLFzW1lGiXS7QLLBWvT2YuAYQEgxuNA/2gA=)
2: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: b54QVqPp1CGRXOojGAayfqDa8blMkeGEeLMAdBcVP7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:fa:7f:b0:ba:2a:96:5a:4d:9e:66:d8:4d:71:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Apr 16 13:00:42 2025 GMT
Not After : Apr 17 13:00:42 2025 GMT
Subject: CN=ab534c62e2802a0c4f477aabe5597267cce592a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:50:db:56:aa:91:8f:70:3e:9d:53:43:a7:
55:ad:2d:9b:6f:bf:f1:f6:e4:ac:34:26:b8:75:ba:
96:ef:84:e8:ed:02:d8:18:6c:1c:14:77:7f:fd:0c:
8d:7a:c9:bc:ba:91:c2:a5:62:c5:8c:56:60:1a:3a:
96:00:15:94:e5:84:cd:1b:97:62:f6:cd:f0:f2:af:
18:72:21:cb:67:8b:50:75:82:3a:bf:9c:08:7e:26:
f8:90:74:9a:ea:ed:be:fc:1e:bd:c0:bb:a1:06:d2:
2a:63:9c:b5:78:ea:c6:f4:31:45:7a:76:1e:88:c5:
cc:31:91:54:7e:82:ca:ba:ee:f3:46:37:d1:e0:f1:
cf:a3:34:a1:c3:16:e0:c6:be:22:8b:6e:e4:bf:5b:
aa:03:2d:0b:73:10:36:b6:18:08:25:c2:f9:ae:26:
35:20:c5:54:9a:82:8d:b6:f5:24:24:50:97:34:e2:
0b:10:9e:04:35:9d:3c:b0:6d:7c:83:a1:74:11:d0:
29:ff:d0:81:78:de:6a:dd:a9:4a:b2:3d:c5:66:75:
43:c8:37:79:02:7b:69:3b:ee:90:9a:5d:da:03:89:
bb:92:7a:38:38:9c:91:ed:e1:0f:18:39:01:6a:77:
4e:43:98:fe:04:0e:9d:e2:62:9a:82:94:c5:3f:2f:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:53:4C:62:E2:80:2A:0C:4F:47:7A:AB:E5:59:72:67:CC:E5:92:A6
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2f:02:de:88:0c:62:bf:43:49:71:f6:61:1f:29:c6:0b:72:
cd:45:f0:e6:13:53:fb:bb:ef:82:e0:05:ff:6c:ba:ad:ec:91:
7d:de:71:23:e5:89:c7:30:ba:bd:46:c0:47:a8:af:a7:c5:50:
cd:a8:e6:eb:f8:67:d7:96:2b:a8:57:76:75:c8:ac:5a:a9:08:
4f:9b:af:04:8a:c0:59:36:4b:b0:63:9e:44:69:e8:54:51:a8:
a4:05:84:84:cd:86:e8:93:0d:23:ae:3d:bd:b2:3b:40:84:bb:
c5:d7:c2:a0:23:a2:67:b5:e6:87:3a:49:b1:39:f4:84:2f:65:
96:b0:6f:c6:11:14:24:72:2c:6d:23:6d:2f:7f:e3:4f:34:6e:
c4:c9:e7:38:87:a5:37:cb:87:79:15:25:e8:f5:82:d1:06:cf:
e4:07:15:d8:cb:61:4b:5d:24:e3:79:8d:9d:a2:cf:1a:c5:7d:
24:fd:f4:6a:bf:0e:85:a6:45:13:26:d0:8b:00:e8:ea:ba:58:
2e:80:65:ae:f5:78:53:d5:15:03:ae:36:f6:c4:6a:b8:0f:8a:
6b:32:f6:b8:4e:a5:8c:36:50:2b:0f:8b:a4:00:66:4a:ec:c8:
1a:7a:10:47:f4:6f:01:a5:8d:37:ed:07:d8:32:f4:e0:95:a0:
e0:f0:32:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:34:19 2025 by rpki-client