Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File: PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier: bzGLE7dgo0X411DYs8sY9xepf3pMOSJSHCkwv21fbCQ=
Subject key identifier: EF:9F:21:05:3C:41:39:40:E7:9D:98:EC:27:C0:92:49:E2:C0:5C:58
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer: /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial: 019631D0A01AA50B33FD3BEECDC8D1A3F238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number: 14EC
Signing time: Mon 14 Apr 2025 01:01:18 +0000
Manifest this update: Mon 14 Apr 2025 01:01:18 +0000
Manifest next update: Tue 15 Apr 2025 01:01:18 +0000
Files and hashes: 1: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (hash: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=)
2: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: ifONcYBmw73b44GvrHcLnj7r8OQfFpeGY9j3sYcynfA=)
3: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (hash: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=)
4: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (hash: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=)
5: jyPlSfMwE97ShJiNEree4W-YnKc.roa (hash: RPRkI69AUdx22PSRgMKu/d39p+trzoeOCprFB1jyo6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:31:d0:a0:1a:a5:0b:33:fd:3b:ee:cd:c8:d1:a3:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Validity
Not Before: Apr 14 01:01:18 2025 GMT
Not After : Apr 15 01:01:18 2025 GMT
Subject: CN=ef9f21053c413940e79d98ec27c09249e2c05c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:ce:a0:ff:68:32:74:cf:d5:a9:44:73:f1:
a1:61:ec:86:0c:5b:40:d6:70:fa:a3:d7:f2:b4:bb:
3c:bb:87:10:62:75:94:76:a8:fb:6a:ae:5c:e3:1e:
3e:37:e0:95:02:c3:13:73:a7:c9:6d:89:ff:70:7d:
bc:e0:69:c3:bd:37:ef:38:08:9c:d3:05:c3:50:eb:
65:79:df:33:b9:bb:55:aa:55:1e:46:fb:bf:89:e9:
ea:43:95:9f:17:fd:64:f5:9a:5a:84:5d:21:05:f6:
2c:8b:63:67:3d:c5:f1:c4:ee:76:d8:c6:ea:84:f0:
d7:e2:2f:d0:be:d8:d1:fc:70:ac:6d:d6:14:a1:41:
3c:87:86:06:8c:54:9e:02:65:7e:2e:aa:a9:94:5d:
1b:4d:0c:c8:b0:29:1a:f4:68:16:78:0b:78:40:40:
a2:c8:a3:3d:f1:2f:68:c7:ae:57:04:a4:83:e2:a9:
9e:76:c7:1c:17:98:f6:0a:24:f9:a2:0a:8a:9b:90:
c8:75:e0:a5:0d:b8:59:52:ff:fe:e6:db:7d:b1:27:
ad:33:0b:06:a9:74:54:bf:20:5d:19:11:7f:4f:f5:
69:e3:74:51:47:6e:4f:4b:4a:f0:5a:e9:e0:44:bd:
00:41:c1:18:60:f7:30:8d:6a:b8:d0:94:21:d8:5b:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9F:21:05:3C:41:39:40:E7:9D:98:EC:27:C0:92:49:E2:C0:5C:58
X509v3 Authority Key Identifier:
keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ad:5f:ac:f7:9b:94:9e:b8:e1:b8:f5:11:cc:56:d5:b0:3c:
f5:10:5e:c5:9a:2b:f3:40:e1:24:a0:8f:e3:fa:75:bf:bc:d7:
b5:d0:34:d7:a2:5c:a0:39:8d:74:24:08:39:5b:54:c5:be:08:
a2:af:64:16:52:8f:9e:36:8b:83:ca:c9:ef:60:ec:ff:59:07:
a0:94:37:7b:3b:db:03:09:a7:aa:57:25:20:56:5c:07:3d:88:
d3:97:0c:94:a1:7b:38:af:23:95:d5:c6:42:36:7e:08:b4:51:
1d:6b:d7:94:35:24:e8:8b:48:ef:de:a1:c9:3e:e3:90:aa:5f:
2b:b3:e6:ac:a4:52:37:0d:b7:92:d6:bd:e6:74:1e:50:4a:6f:
1b:b5:98:2c:94:cf:7e:fb:62:10:fa:d2:17:c2:26:a6:87:a4:
90:b9:6d:f0:3e:36:53:42:d8:d3:7f:ad:c2:fe:63:d5:b3:fe:
e2:04:e7:36:b3:d9:f7:fb:cf:81:24:a3:05:71:0a:9b:cf:dd:
79:e1:52:96:33:ac:9a:00:36:4e:34:5e:cf:a2:94:0e:31:d4:
83:a9:0e:94:c8:2b:66:a9:6e:17:42:e4:7f:fb:31:03:91:8a:
dd:89:2b:9e:8d:75:55:b3:18:7c:84:73:5d:2b:e2:d6:24:a9:
16:12:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:41:26 2025 by rpki-client