Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier: v02y/x4N4AF2MxIJbM7LZhMLq9kJpPcpTrxkSKzlqa4=
Subject key identifier: A4:4A:FB:7B:44:56:D9:06:EB:C2:C5:FC:CE:3E:18:8D:C7:F1:9F:DF
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 01960DC4393DEC06B0460A86E8320F3968DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number: 0888
Signing time: Mon 07 Apr 2025 01:01:25 +0000
Manifest this update: Mon 07 Apr 2025 01:01:25 +0000
Manifest next update: Tue 08 Apr 2025 01:01:25 +0000
Files and hashes: 1: Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa (hash: 02j0pLQbdlE9MH5ggabxr1xIMQYmyzEOYjg+Z13q0BA=)
2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: RNPf4BVzoSkwP6aOCQv31Qkd/Ziq4dOwFbeumeQaWRM=)
3: VrCXOdxzLdld1tE0j_xLZ92cqsk.roa (hash: QEJHs3sdF5W7Kc4VSrPn7L7Yyup7NDcWYP/rulbrnEw=)
4: wbEopCsHgdsUwl85d1p6YVkQyt4.roa (hash: Mueh9tzlM1Esxrp4PnyphjifQnr2qX7ryaFawIufllw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:c4:39:3d:ec:06:b0:46:0a:86:e8:32:0f:39:68:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Apr 7 01:01:25 2025 GMT
Not After : Apr 8 01:01:25 2025 GMT
Subject: CN=a44afb7b4456d906ebc2c5fcce3e188dc7f19fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:9b:e7:23:52:91:ff:e2:5c:fd:2e:0c:5b:
1d:51:32:02:f1:56:d5:f6:09:d0:c3:16:e2:f8:36:
55:d7:98:80:08:5b:a5:d3:04:30:64:10:5a:86:d2:
02:fb:70:85:95:6e:d0:ee:d4:5e:30:da:96:98:79:
b8:c8:1b:d7:9d:9a:80:ca:ed:54:0e:5d:da:74:c8:
47:09:55:58:ea:7d:25:1b:0e:65:35:85:53:44:18:
9d:56:ac:f0:53:db:da:ad:83:db:66:09:ed:50:ed:
b7:4a:5a:60:2d:bf:38:52:a4:b0:2e:9d:10:00:c4:
bb:36:d4:11:81:d1:58:8f:96:4f:04:37:38:5f:b9:
d5:a8:fb:a4:8a:c1:27:2f:18:21:d2:26:18:55:53:
01:40:63:71:9f:d5:f9:69:64:a0:7d:a2:ab:20:ee:
97:f5:53:f0:ad:19:bc:df:8c:ad:2f:5f:42:89:c3:
b6:18:a9:50:dc:15:91:28:86:35:04:a2:22:52:a6:
ca:d3:24:ac:ab:ee:35:ce:3f:5e:2c:02:2b:4c:dc:
d7:62:18:36:31:2b:e6:80:2b:a5:d8:15:0e:50:ce:
73:c2:89:15:64:42:4e:7b:cb:58:b9:93:46:f2:71:
01:ad:e7:c3:df:35:b4:e1:3e:92:c5:b1:79:e4:10:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4A:FB:7B:44:56:D9:06:EB:C2:C5:FC:CE:3E:18:8D:C7:F1:9F:DF
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:17:c7:f2:d7:50:1b:82:ac:96:ad:5b:48:15:37:02:7c:b2:
6e:44:a1:4a:7b:ce:51:48:37:b7:70:b9:f8:42:b3:58:10:1b:
70:a6:0a:67:9a:1f:82:86:6c:5a:31:50:da:b9:f1:d3:6a:24:
bf:9b:65:40:71:a2:fa:c8:98:d9:48:44:6a:65:39:15:a2:f4:
93:19:3e:59:14:eb:d7:f7:14:04:dd:d5:6c:35:b9:c9:85:3b:
49:64:68:0e:62:8f:ff:e0:76:82:4b:85:3b:7b:66:da:7d:c6:
c4:9e:ca:70:d1:f9:e0:b3:e1:67:a8:b5:c1:e9:1c:35:a7:d2:
50:34:a7:29:95:ce:2e:7f:e9:19:05:ab:18:2e:df:49:84:31:
b6:2e:bf:73:42:e9:ea:3c:5c:14:93:3b:dc:f5:f3:20:1f:1b:
09:db:54:2a:6e:a3:1e:0c:e0:95:e1:4e:76:89:d0:5c:70:e9:
fe:14:d4:83:6e:9e:b6:44:88:21:b9:5b:ef:0d:c7:cc:b5:33:
94:11:57:f0:6c:d8:c1:69:14:e5:81:51:9d:e7:a5:e0:09:61:
bf:05:ae:77:dd:f5:fb:a1:67:5f:0f:b3:ed:3d:7a:69:44:f7:
8f:bb:40:69:de:49:49:ab:c9:dd:49:d7:e2:0c:df:f1:ce:f4:
25:4a:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:22:10 2025 by rpki-client