Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: LqgqWI3mdgnORzJkUISqi6zqrGagq5vc7aPunzgmFTo=
Subject key identifier: 41:14:DA:33:21:C0:34:76:FC:B1:92:6A:0F:47:A9:DF:40:63:21:88
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 01964EC7BDDFF156E1D069AE3E86841E5DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 01C6
Signing time: Sat 19 Apr 2025 16:00:35 +0000
Manifest this update: Sat 19 Apr 2025 16:00:35 +0000
Manifest next update: Sun 20 Apr 2025 16:00:35 +0000
Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=)
2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: qewIhBIrG7GRT5GFg7DsGZfmONg2TqhBaAY1koDYuoc=)
3: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:bd:df:f1:56:e1:d0:69:ae:3e:86:84:1e:5d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Apr 19 16:00:35 2025 GMT
Not After : Apr 20 16:00:35 2025 GMT
Subject: CN=4114da3321c03476fcb1926a0f47a9df40632188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:cf:0a:e0:00:f6:71:26:a2:e1:a3:27:1c:
3c:45:e0:43:56:9c:5b:b6:7c:45:ec:06:98:ea:da:
bb:6f:f3:3a:3b:9f:62:3c:bf:00:8c:85:dd:63:f2:
6e:64:d2:d2:13:d5:d0:d7:96:06:f1:9d:1d:97:0e:
be:4d:eb:0b:30:5b:35:a5:79:54:77:45:e3:84:98:
7c:fb:8b:8b:2b:51:49:bb:74:5b:d1:3a:b1:b4:79:
46:6c:62:98:cc:9d:6c:27:10:37:30:52:6b:3a:6a:
36:37:ac:c7:a1:fb:3a:e9:98:74:52:e5:dc:8e:76:
67:5e:03:f2:51:52:9c:41:93:f8:93:80:b4:50:2d:
f7:4c:d6:6f:fc:a0:7f:9e:fc:ba:3e:fd:dc:99:39:
4b:c7:ba:7c:ab:62:a7:6f:ab:36:4a:b7:42:83:06:
78:63:83:70:81:d0:18:5c:a1:03:f6:a5:ab:64:32:
80:25:a4:cd:17:96:0a:5a:1f:96:41:a3:8d:4a:cf:
2c:14:3c:0a:7c:c9:e4:f4:cb:6b:cb:68:47:a4:a5:
4f:96:02:9e:d2:74:61:e1:f3:66:a9:5e:3b:d0:5d:
e1:85:f4:01:69:d5:a3:25:a8:df:92:0b:85:60:68:
af:64:8e:06:1d:ef:be:24:a9:c1:dd:e3:15:c9:10:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:14:DA:33:21:C0:34:76:FC:B1:92:6A:0F:47:A9:DF:40:63:21:88
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e3:86:c5:53:e3:d8:21:23:3d:6f:e7:81:1d:f5:d4:1e:60:
bf:4f:d6:ad:7e:9b:42:74:b1:18:7b:4a:03:79:8f:e3:00:53:
f0:34:6a:89:7c:91:d2:6e:4c:3e:1a:9d:18:97:8d:e4:c0:a6:
00:cd:2d:56:55:eb:38:b1:9b:4b:e4:99:2e:db:1a:6d:e0:a6:
9f:70:79:30:4c:29:64:4d:fb:60:8f:05:4f:c9:72:33:33:f4:
f2:d0:c1:c0:bb:d0:bb:9d:92:39:e3:74:03:c3:65:44:5d:82:
6d:f9:da:18:57:21:d2:93:cc:bb:7d:21:be:ca:6f:16:e5:42:
75:f8:4a:38:af:9e:34:96:b8:25:0f:23:cd:47:f5:54:1d:c4:
53:00:78:bf:31:50:ef:af:ff:a8:22:87:0e:82:ee:db:3d:c1:
89:3f:d5:f6:ce:b2:5d:00:d4:7e:fb:62:c0:9a:ce:f9:d0:fc:
de:22:10:3e:68:d6:ef:c8:61:c1:d0:a6:78:ae:ae:ab:d0:92:
66:50:74:d1:f8:9c:ca:a7:26:bf:27:1f:1e:26:fc:d9:a6:c9:
36:9a:18:eb:12:2f:d4:7f:e0:60:42:bb:a3:4c:59:54:8b:d3:
00:ff:a5:d3:05:3a:ae:7b:58:37:93:bc:fe:5e:70:8d:a3:75:
a1:e2:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:46 2025 by rpki-client