Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: KJoQCorhWOVhKU9vTJ+ozeia45B57Cw2NaaMSF8NYX4=
Subject key identifier: FD:FA:D3:9D:D8:F6:50:C3:73:AA:E9:AC:48:18:BE:91:64:17:8C:B0
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 0196120EA51A5AE53FE0D4E76553E118D1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 0308
Signing time: Mon 07 Apr 2025 21:01:11 +0000
Manifest this update: Mon 07 Apr 2025 21:01:11 +0000
Manifest next update: Tue 08 Apr 2025 21:01:11 +0000
Files and hashes: 1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: 2O7FbihG0YUCBz2NuJooaLSb1ItgiQ6GeJJSVNdTZHU=)
2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:a5:1a:5a:e5:3f:e0:d4:e7:65:53:e1:18:d1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Apr 7 21:01:11 2025 GMT
Not After : Apr 8 21:01:11 2025 GMT
Subject: CN=fdfad39dd8f650c373aae9ac4818be9164178cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:fe:ce:5e:31:d4:6b:eb:cd:05:78:46:b5:
a3:7e:8c:83:aa:80:e2:10:ae:94:fa:17:96:29:3d:
f0:e6:c8:1e:44:45:f3:cf:0d:e5:da:fa:2e:65:db:
e6:85:13:bc:48:16:65:d2:62:20:b3:9f:a0:c7:e6:
a7:8b:a2:20:f4:f4:af:5b:20:a8:ec:3e:f8:2b:9c:
2d:ea:3b:f8:4d:38:9c:1c:47:7b:9f:c0:e6:30:ee:
c5:2d:1f:7e:f7:a9:7c:f9:31:3c:ac:a1:38:47:ae:
1a:b9:e6:15:af:64:98:5f:2b:77:28:2d:0f:fd:12:
6e:db:6a:0d:1e:29:05:7f:71:ce:82:04:00:28:82:
a0:26:60:a7:f9:ee:80:33:7a:2a:24:ae:2a:93:91:
81:f9:a3:e6:43:2d:ca:4a:db:0e:78:79:42:0a:8e:
43:76:ad:b6:ee:49:5b:a6:15:4f:72:6b:be:cc:2e:
52:f1:0d:d0:a0:cd:3a:b2:10:b8:bb:80:0d:cf:23:
81:84:8d:6b:8e:ab:95:95:d2:98:54:93:07:82:15:
89:df:88:46:fb:57:82:8c:ff:2f:12:cd:68:8d:f0:
67:b5:81:ca:ca:8c:72:26:5f:87:a2:f1:67:58:bf:
f2:36:34:d7:9e:72:84:32:be:39:c2:30:b4:c3:28:
76:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FA:D3:9D:D8:F6:50:C3:73:AA:E9:AC:48:18:BE:91:64:17:8C:B0
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:25:f5:9b:c8:28:86:9c:8e:88:b5:d4:00:bf:a5:7d:97:50:
ae:b0:0a:2e:fd:bc:3e:97:7f:3d:1d:3d:95:d5:d5:59:13:bc:
ce:14:af:bb:dc:04:01:59:38:e2:d0:c5:7d:57:61:73:f9:c6:
18:ae:25:51:86:b5:2f:41:22:2d:a7:c1:49:10:4a:03:ae:30:
24:45:0d:31:93:7f:ea:25:76:f2:3c:9c:16:b1:21:b7:71:0e:
7d:80:aa:e3:12:7b:38:37:22:8d:7b:8e:86:2d:b8:ca:f5:4f:
83:1d:5f:69:da:28:d5:db:55:3d:9b:be:6f:54:5e:a8:02:dd:
28:a7:0a:1b:e5:ec:62:75:59:af:b0:8a:b5:8d:0d:1d:57:ad:
99:e4:0e:3a:02:2a:51:9c:c6:c8:e5:9e:55:60:be:fd:7e:7b:
7e:14:cc:90:2b:66:2d:5e:ae:8d:3b:fc:98:58:fb:aa:ae:f7:
68:3c:83:07:81:d3:03:08:99:c0:0e:0c:e4:43:80:47:4e:4a:
b1:7b:44:a2:f4:16:f0:49:a8:ad:26:6c:9f:b1:d1:81:d1:7a:
7a:2c:20:da:5b:ab:eb:dc:30:bb:09:66:1f:66:99:7d:b3:49:
e1:77:d8:ff:57:4c:b0:5a:fe:b9:01:33:23:51:34:01:49:b7:
8d:06:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:37 2025 by rpki-client