Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: Ur1lPOENvlyAP60RQwZxDp5LR/C+JIawyL0Qif0+9gs=
Subject key identifier: C3:4F:57:22:4A:0D:DF:8A:E9:94:60:B6:39:BC:04:27:3D:58:21:C0
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 01964FDA25F64C112C1F83C9D33E6A52361B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 21:00:18 +0000
Manifest this update: Sat 19 Apr 2025 21:00:18 +0000
Manifest next update: Sun 20 Apr 2025 21:00:18 +0000
Files and hashes: 1: bY2tBQ51YL8a-pcphuYuVQz7bOg.roa (hash: FnAC9AE4W5+r++w2y10UXXpTgultC6LrjOa8S41rhns=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: D+9Eq5LuXqD0U7aqB8CH/fQmGCOcMrW5Tx78WxsmfdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:25:f6:4c:11:2c:1f:83:c9:d3:3e:6a:52:36:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Apr 19 21:00:18 2025 GMT
Not After : Apr 20 21:00:18 2025 GMT
Subject: CN=c34f57224a0ddf8ae99460b639bc04273d5821c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:2d:9b:40:38:04:be:6e:a4:82:eb:ea:7a:
04:f2:44:34:f4:eb:b5:ab:c9:a5:29:8e:b5:91:83:
06:54:2f:62:41:61:52:11:de:e8:c4:f7:bf:cf:c9:
79:b0:90:04:a0:b4:17:da:a2:7a:bb:b3:be:84:50:
bc:1a:12:89:1d:a3:42:77:f2:c1:be:27:44:64:11:
30:65:f3:07:a8:8e:3f:a4:b4:fe:e9:20:7b:36:0d:
40:5f:1e:08:e3:ca:13:b2:1d:20:2c:66:2c:bd:94:
12:2a:73:f0:94:fe:d3:c9:3c:db:db:7f:3f:40:71:
9f:e6:24:6d:f2:cb:22:6b:4a:09:b8:7f:f2:81:67:
92:5e:bd:51:89:fb:1c:ff:f3:ce:bc:03:4c:56:8a:
45:f0:46:9b:6d:bb:66:88:e6:c8:ba:b0:33:0d:c3:
58:d8:1f:e4:a7:e5:40:16:e0:d9:1e:bf:bf:c4:5c:
42:5d:02:09:10:59:5f:ac:e6:10:4b:8c:09:44:36:
12:25:1c:98:ed:0b:d0:91:79:a9:17:18:1e:c2:50:
d7:76:0e:47:eb:9c:7a:a8:92:52:af:ae:c6:0d:6f:
e0:b9:93:27:4d:7d:24:32:34:96:b3:76:15:a7:2a:
27:ef:49:a2:d6:aa:37:b5:46:c2:ad:c0:c3:f1:c9:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4F:57:22:4A:0D:DF:8A:E9:94:60:B6:39:BC:04:27:3D:58:21:C0
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:16:5f:b6:b1:0c:68:1d:e4:0b:38:6f:10:f5:20:dc:84:08:
20:70:23:06:fe:25:95:57:7a:b7:b1:79:4f:80:67:32:7a:2b:
f4:df:1b:c2:2a:e4:5b:18:5f:b1:45:3b:08:4f:af:11:5b:40:
06:3d:0d:97:fb:74:33:4a:24:c6:8e:78:bd:ca:d4:29:b1:ba:
87:8e:c9:55:76:3f:1d:06:82:c7:39:42:d8:4d:7e:42:df:3e:
95:e7:54:78:47:e5:62:46:26:b7:a7:06:3f:11:4b:e9:71:d5:
ce:ae:41:87:c8:25:fb:3e:bf:75:0b:ee:fe:99:c9:ea:6d:8d:
aa:69:0c:83:d1:56:97:56:2e:8c:75:80:d9:f4:c8:12:4b:a1:
67:91:b8:33:d0:39:7f:ee:2b:22:a1:13:f5:ff:fa:dc:3d:63:
e8:34:82:bd:08:50:20:55:2f:9f:fb:8d:8b:09:d4:2d:90:20:
52:42:00:b4:4d:6b:01:a1:a0:1e:e9:49:f3:f6:db:cc:95:c7:
03:d7:28:42:f4:a2:9b:43:bd:29:41:1e:24:4d:44:86:9c:91:
49:d4:77:62:18:18:28:df:3d:17:6d:97:86:ea:c5:c1:5e:63:
75:a1:b0:c0:66:ef:5e:57:37:ee:ce:0b:e7:0e:24:da:33:56:
67:ee:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:00 2025 by rpki-client