Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
File: PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft (raw, json)
Hash identifier: OQ8FYTDZqgDmJY/t9M22txoqN54QiZ7qdgrd55VYU/k=
Subject key identifier: AA:C4:B1:E8:F5:D3:1C:6D:78:39:51:35:EA:F1:FC:A7:F3:CE:2F:73
Authority key identifier: 3D:2D:1A:DA:61:4C:68:E1:74:C4:DE:DF:55:99:6A:95:43:16:EA:E6
Certificate issuer: /CN=3d2d1ada614c68e174c4dedf55996a954316eae6
Certificate serial: 0195903DE5ED60B9C7184191158596BA485E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS0a2mFMaOF0xN7fVZlqlUMW6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
Manifest number: 1495
Signing time: Thu 13 Mar 2025 16:02:10 +0000
Manifest this update: Thu 13 Mar 2025 16:02:10 +0000
Manifest next update: Fri 14 Mar 2025 16:02:10 +0000
Files and hashes: 1: PS0a2mFMaOF0xN7fVZlqlUMW6uY.crl (hash: Ks9UwmT8k9RWzJF762FLyu4L0UaZUettC6Bw9wSUn20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS0a2mFMaOF0xN7fVZlqlUMW6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:e5:ed:60:b9:c7:18:41:91:15:85:96:ba:48:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2d1ada614c68e174c4dedf55996a954316eae6
Validity
Not Before: Mar 13 16:02:10 2025 GMT
Not After : Mar 14 16:02:10 2025 GMT
Subject: CN=aac4b1e8f5d31c6d78395135eaf1fca7f3ce2f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:5f:7f:80:db:15:ff:48:64:dc:dc:71:e7:
5d:a7:e8:75:3c:0c:99:7c:54:6f:2b:16:95:56:ea:
51:b4:b3:be:ca:8a:16:9a:f9:0a:48:ca:f9:88:1b:
ae:00:03:d4:e0:f1:44:6d:a8:83:43:fa:84:ff:f0:
1c:30:b9:fd:8c:d7:8d:16:26:92:8e:d5:99:1c:85:
9a:f3:df:1e:36:2c:e8:60:35:f8:ec:37:13:f7:a9:
02:6f:a0:d0:0e:f4:13:30:17:ed:76:6b:3e:b5:1f:
5d:4e:71:df:f5:23:f2:ea:ca:40:a9:05:c9:e2:89:
db:fe:9a:85:04:b9:d5:02:46:b8:ce:71:a7:ce:db:
62:61:0f:67:28:2b:01:e5:22:5f:9e:03:ec:ab:e4:
77:2b:74:38:5b:47:5e:c3:af:50:ce:0f:bd:6a:9d:
5f:27:b4:18:aa:55:f6:71:15:24:25:15:52:77:94:
fe:57:08:ff:73:30:3d:56:38:62:ac:bc:ee:cc:59:
84:73:b0:8d:1d:29:e6:8f:e1:1b:e3:5d:c7:3c:bf:
6b:27:b0:f1:ff:a9:3b:6e:b5:9b:96:50:90:9f:32:
1b:2a:a8:f3:c2:95:21:e9:d0:4a:ac:70:ad:33:62:
07:47:ba:ee:ed:67:f9:6b:b9:0b:98:56:b0:b5:a1:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C4:B1:E8:F5:D3:1C:6D:78:39:51:35:EA:F1:FC:A7:F3:CE:2F:73
X509v3 Authority Key Identifier:
keyid:3D:2D:1A:DA:61:4C:68:E1:74:C4:DE:DF:55:99:6A:95:43:16:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS0a2mFMaOF0xN7fVZlqlUMW6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b4:07:7e:70:c3:c6:a8:b5:9a:26:ff:7f:4e:78:7e:e6:04:
0c:b2:b2:75:e9:f7:15:21:77:d5:d9:a5:b8:a2:d2:ca:ef:e4:
fb:a7:f1:15:c6:b7:8e:31:f3:79:ad:10:e1:bb:f3:58:29:80:
c4:f7:98:3b:c6:a9:ea:17:28:59:2d:6e:16:37:68:50:3e:dd:
f7:4a:fc:ed:92:f3:dc:34:8d:e0:0a:5d:82:d1:ca:d7:bc:05:
90:51:38:3a:8a:57:9b:94:a1:be:92:fa:d7:ed:ac:f1:22:00:
79:4c:6f:7d:55:84:e3:5c:b2:dc:e6:21:66:c4:b1:96:93:17:
ed:76:07:a3:d0:fa:b8:52:9b:f9:db:46:22:2f:e6:a0:84:e4:
e1:f2:4d:7f:87:31:20:33:f2:22:a6:cd:26:a5:c8:67:1d:5f:
b8:e8:59:78:71:4e:81:d4:7e:15:4a:13:af:54:72:4b:d4:ea:
4a:f6:b8:a2:56:b7:7c:d0:be:29:13:11:22:04:8d:8d:df:85:
b9:73:29:ce:03:4f:7e:5f:eb:d2:02:fc:fc:a8:f7:0c:1b:8c:
be:ad:6c:7b:f0:96:b1:57:08:79:75:ea:db:3d:56:c2:d2:7a:
bc:fe:ab:3c:51:6a:5e:4a:b0:63:8a:4e:8f:69:8d:0c:bf:ae:
ec:2f:3c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:38:40 2025 by rpki-client