Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File: PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier: vJAmAZ4BgW76XOXU+6nlvJDtgDtpLeLLd450569ao2E=
Subject key identifier: E9:17:F1:AE:0A:05:95:76:B4:55:53:F3:D8:92:37:3A:E7:47:68:6B
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 01964D7E2E45645A345F3C6BEAB9BC8F48BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number: 1221
Signing time: Sat 19 Apr 2025 10:00:37 +0000
Manifest this update: Sat 19 Apr 2025 10:00:37 +0000
Manifest next update: Sun 20 Apr 2025 10:00:37 +0000
Files and hashes: 1: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: NLDXCGvcZ3/bs0mqL8ItU+l7R7UfT6KyWI52+RbrKRE=)
2: UMngkvwaRjIoN5eBBlFi84sCo3g.roa (hash: a8obNUaAoXy5QpQYwb8sCwj2NbkRTv7ZWZ/OkpJ4CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:2e:45:64:5a:34:5f:3c:6b:ea:b9:bc:8f:48:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Apr 19 10:00:37 2025 GMT
Not After : Apr 20 10:00:37 2025 GMT
Subject: CN=e917f1ae0a059576b45553f3d892373ae747686b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:1c:b9:eb:a5:6d:d4:16:af:d7:18:ba:1b:
b7:34:e1:17:39:fa:62:b1:a9:0b:ad:3c:b8:5f:61:
da:0d:30:bf:ac:1c:4a:dd:b9:86:f4:df:6c:04:ee:
98:8d:7d:2a:c9:bd:33:f7:e1:e6:ba:46:ac:fc:24:
c2:60:12:4f:e5:76:b7:3b:da:0d:f0:bd:14:9a:80:
f2:60:db:6e:a3:4a:83:e8:e1:cd:d1:71:b7:82:dd:
ed:f6:7e:40:6c:96:66:af:98:54:f6:24:48:1e:19:
4f:6f:ea:c2:31:b7:0a:7a:9e:3f:50:d9:95:5b:d1:
cc:d6:99:14:08:ad:16:7e:69:62:5c:28:6e:3b:4c:
4f:b5:76:11:a6:19:83:cf:53:07:fd:10:ee:d0:60:
dd:8f:61:7f:84:1f:2b:ee:bf:ab:67:fa:da:b4:91:
0b:33:7c:7d:58:0d:c1:16:fe:fc:a9:09:79:dd:d2:
4e:a5:1d:05:41:95:80:8e:c0:42:17:97:6f:50:15:
b7:99:3b:c5:d1:7a:8f:d9:51:f1:4f:0b:f6:df:b4:
03:e9:94:ab:99:ae:c7:dc:7f:ed:80:fb:9e:f7:b2:
2a:bc:d6:2c:5b:e5:37:0a:72:2d:f6:ca:dc:23:68:
fe:a9:87:e8:74:41:b4:04:78:3d:77:b1:e8:6b:43:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:17:F1:AE:0A:05:95:76:B4:55:53:F3:D8:92:37:3A:E7:47:68:6B
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5c:6c:b0:2b:6b:e7:26:65:56:5f:ce:f7:b7:e3:00:bf:52:
0d:2d:a9:1a:b8:ff:30:45:9b:fd:31:6c:73:d1:20:57:d9:bd:
75:dc:e9:5c:f0:c9:ba:ac:6f:ab:e7:07:ec:e0:d7:1f:50:ae:
f6:36:cf:bd:8f:0a:54:b3:ce:30:3b:94:15:35:34:38:2a:34:
62:6a:61:21:36:1d:8e:c4:c8:87:3e:07:13:f3:46:38:39:b7:
d5:42:54:4e:74:93:99:6f:4b:b1:46:9d:bb:df:8b:16:e1:a2:
2e:17:78:b7:bd:61:03:9b:2b:92:89:2c:5e:96:b2:a0:02:b9:
a4:2b:11:42:2b:ea:24:4c:73:5e:94:53:05:60:02:a6:fb:5d:
8a:ab:74:dd:ae:ce:14:f3:9b:cb:af:25:72:d7:24:50:70:b8:
d2:46:a4:a0:28:fe:95:87:7a:d6:fa:0f:81:6b:37:22:70:e7:
34:77:17:2d:ab:1d:d5:5b:1c:89:dd:08:85:82:df:ba:02:2d:
7c:db:d0:62:97:17:20:33:b0:1c:35:5f:39:9d:ab:9b:0a:00:
14:8d:11:e8:91:81:28:f0:96:27:61:6c:c3:1b:1a:50:3d:83:
18:09:bd:cf:a6:c9:3a:20:5b:06:43:67:bb:7e:f2:08:8f:c3:
4b:5a:e9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:22 2025 by rpki-client