Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File: PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier: u7VzTZ7mz64Mw6P0WRZhYRqYVr9LRZFsP5OA5cZC1xg=
Subject key identifier: 26:DD:C9:53:8F:4E:FD:50:17:80:DD:B0:E5:99:F0:8B:3C:20:97:AF
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer: /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial: 01962A4E20FFCFB4CC4BDC797E600448B69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number: 05FF
Signing time: Sat 12 Apr 2025 14:01:25 +0000
Manifest this update: Sat 12 Apr 2025 14:01:25 +0000
Manifest next update: Sun 13 Apr 2025 14:01:25 +0000
Files and hashes: 1: Eg6f3oV_tmh90tuvdcGS4z7md3o.roa (hash: +iCyWfpNRgku+keY+1TZvk0pjaW3ZowUvCSdJVvHiXs=)
2: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: mQGtvs7eQY65EGxspjshhNQ1vmEMaE7898inTr7k+H4=)
3: hvAcV0p--qlqSvXjrIPln93SWWk.roa (hash: TjRxZCcsv470SMx3GoJIYlzXG8w9x5IPVw3HcGg4jOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:4e:20:ff:cf:b4:cc:4b:dc:79:7e:60:04:48:b6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Validity
Not Before: Apr 12 14:01:25 2025 GMT
Not After : Apr 13 14:01:25 2025 GMT
Subject: CN=26ddc9538f4efd501780ddb0e599f08b3c2097af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:0f:4f:f0:9a:13:d0:5c:f2:4e:53:c3:6f:
1d:ba:be:94:e1:6d:8f:44:69:47:9d:3e:62:11:d4:
0f:a8:bb:75:8b:b1:5b:09:d0:5c:d4:73:05:ad:a7:
03:46:8d:a2:b1:f1:1e:6b:f3:68:6b:80:24:87:05:
c6:e9:6f:f8:f5:49:80:5d:6a:81:ca:0a:6e:be:a1:
52:3c:ed:13:fa:db:42:be:00:97:a7:ba:24:27:d5:
8a:2b:44:30:03:1f:1f:45:7c:fd:e4:19:e9:41:6d:
fa:d3:10:c2:3f:cb:38:d5:e4:cf:de:95:85:31:35:
bd:c5:fa:c8:41:86:3c:9d:14:a2:9a:fa:27:d0:0b:
55:36:c5:8f:5a:8a:8f:57:22:5c:f0:69:71:9d:c9:
e4:0b:a2:77:c5:f9:4b:ed:e6:18:36:59:c1:9e:56:
f4:84:87:04:02:dc:07:69:63:13:e9:8f:6e:96:a3:
89:fb:54:e6:5a:49:09:5c:bc:28:63:b8:2c:09:9c:
b1:72:ee:2d:82:5f:28:ed:98:d7:00:d5:8e:8c:1c:
d6:f9:65:02:46:48:f1:bb:0b:2d:58:5b:22:ce:e3:
b1:b6:57:c8:e8:19:47:5a:6d:30:2e:e8:83:0e:ca:
c6:8f:31:d9:69:de:e7:23:e4:18:1a:e0:4c:8e:72:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:C9:53:8F:4E:FD:50:17:80:DD:B0:E5:99:F0:8B:3C:20:97:AF
X509v3 Authority Key Identifier:
keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d1:2c:26:29:4b:a4:3b:53:40:ea:96:aa:22:85:34:bc:db:
da:08:71:5e:86:3f:62:c4:94:49:57:ba:c1:4a:13:7e:56:dd:
93:32:47:ba:30:94:63:7c:a6:f9:47:11:74:55:7c:89:65:62:
0c:cf:a5:f4:d2:5f:ab:7b:e1:0b:ca:dc:a9:63:7e:22:c4:06:
ab:cc:59:43:00:f4:ab:e1:a7:45:82:03:af:2a:5e:f9:55:c2:
13:45:d9:c2:84:42:62:e9:a9:0f:74:60:b6:87:d0:36:e2:43:
15:2c:e7:1e:a0:54:2c:77:b3:33:ae:c6:60:72:37:b4:76:c4:
e6:87:da:44:17:46:9b:c8:a9:44:17:35:08:2f:d0:1e:b4:c9:
f9:d2:e5:c8:8d:05:a6:b9:8a:95:1a:0c:82:8e:54:4f:16:b1:
cc:53:ba:70:91:38:20:c8:14:39:bc:77:ba:86:00:db:f0:f8:
87:c4:65:d8:f7:1f:62:12:dc:1c:55:98:0e:13:38:1d:ea:79:
e6:b1:42:92:5a:4e:63:bb:0e:4c:0d:c6:c1:6d:a8:f1:59:54:
b0:17:2e:d2:04:0c:77:55:80:3c:c6:18:da:d0:f7:f0:2b:37:
c3:05:b7:79:b7:bf:44:fa:44:e4:02:2d:d8:da:d5:0f:88:27:
d8:58:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:23:45 2025 by rpki-client