Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: rRWeeKSSnEAnn6Fa68EFJYrAjkIhzmkqDdC7gXOQMbU=
Subject key identifier: 12:D1:95:78:CB:24:B0:42:63:A8:AA:81:03:49:1C:F6:AC:36:FD:C0
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 0196542578D0F611A035170A41ACE5985343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 17:01:03 +0000
Manifest this update: Sun 20 Apr 2025 17:01:03 +0000
Manifest next update: Mon 21 Apr 2025 17:01:03 +0000
Files and hashes: 1: Is-TnbCqT0sZMmHzE0DOERlyuyA.roa (hash: ZwxuieDg5KwfHUePylCdnkHIJ18zptrPuU4i92UJi24=)
2: Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa (hash: T0h4+Xqtg7Y1viZ/7IiB5TqFGqH+QZrG/sWcCxZLrOw=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: mTXIiivOvGxphnCMa5EFasjyIyG8PcN96+1x3qOLZ8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:78:d0:f6:11:a0:35:17:0a:41:ac:e5:98:53:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Apr 20 17:01:03 2025 GMT
Not After : Apr 21 17:01:03 2025 GMT
Subject: CN=12d19578cb24b04263a8aa8103491cf6ac36fdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:80:db:bf:b1:58:a7:af:40:11:41:d4:a7:
84:9f:8e:f2:50:63:4a:ee:16:61:12:3c:e6:87:e3:
73:22:7f:91:4e:50:a8:6a:d2:32:5e:12:01:31:c6:
81:8f:de:cd:de:d0:65:57:cd:04:9a:30:52:24:6d:
2d:38:bf:aa:3c:dd:92:18:47:01:36:b6:48:33:e0:
7f:05:a1:11:d2:b8:3d:b7:16:17:65:99:a8:70:b4:
07:a2:07:28:66:86:c6:e4:32:6b:64:ec:53:9c:7a:
c6:49:e6:55:08:5c:a7:3d:95:6c:85:7c:94:99:13:
34:ab:36:be:b1:f1:fe:99:bb:13:46:4e:64:ff:7b:
e0:b7:56:ce:c0:7b:43:9c:a7:ae:8e:ba:89:c5:32:
ff:ae:3b:20:4d:9f:a4:7d:79:d3:44:eb:7f:3d:07:
66:8e:00:34:ae:73:3c:51:15:a2:5c:93:65:a0:f9:
6d:56:7a:b2:04:fb:0b:62:e0:4e:77:46:d8:df:c9:
47:0a:c0:88:d4:72:50:d1:c6:cb:74:a2:1a:de:59:
c4:3f:03:f8:24:7e:0f:3c:e9:60:22:99:cc:17:c7:
17:a0:bf:14:cb:35:57:f1:f2:ef:ae:3c:29:2a:04:
7f:c1:b2:99:1b:49:e7:7a:bc:89:5d:6f:a5:35:a2:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D1:95:78:CB:24:B0:42:63:A8:AA:81:03:49:1C:F6:AC:36:FD:C0
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:46:93:b1:b8:c2:ec:42:a9:68:c5:cb:45:fd:6a:7e:4b:c4:
fe:91:28:ce:9d:42:b2:37:68:85:fb:b2:63:ef:36:1c:77:97:
17:fe:4b:9f:bf:c1:a2:c0:98:14:1a:e7:d9:14:b4:cc:b6:a3:
58:3c:e1:49:3f:e5:ab:c9:68:8f:d1:1a:2b:05:b3:40:a7:3d:
a5:b9:54:29:c6:40:ec:b6:7d:aa:46:6e:40:b4:2e:e6:21:22:
ef:ec:dd:83:b9:a5:af:c5:8a:27:ab:d8:53:81:d8:a6:23:3b:
d1:91:b5:43:37:d0:e5:ae:a9:4e:db:db:8e:41:db:e5:0f:a8:
c1:83:e5:58:31:ba:0e:03:25:a3:90:82:54:01:cd:f3:c3:74:
d0:d8:60:29:b2:4a:1e:ce:2a:e2:09:79:e0:8d:fb:20:4b:a2:
5b:bd:4c:13:91:c2:21:55:e6:e4:88:ee:e1:04:72:e5:6c:91:
99:30:7c:ef:19:e1:68:5a:24:76:d7:51:d0:e5:5e:d4:91:97:
04:d6:3b:aa:84:8e:fb:a8:cb:57:ef:ef:80:e0:68:55:07:21:
b6:fb:63:e8:72:b5:fa:f6:ec:99:9a:e7:8e:93:c1:e3:9b:b9:
b1:4f:b5:24:e0:bb:a3:e5:8f:65:38:82:06:28:62:f9:23:8f:
cb:47:8a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:49 2025 by rpki-client