Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: Z18y7U2ne3o2+eekZLMl6Y8xLsNfoD2S4+9697PTQ+I=
Subject key identifier: 1B:61:C0:33:3A:10:09:E8:40:31:01:F3:32:CA:F0:2E:D7:38:AC:13
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 01964CD95CBA2C684D38DB334981394A0B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 097A
Signing time: Sat 19 Apr 2025 07:00:35 +0000
Manifest this update: Sat 19 Apr 2025 07:00:35 +0000
Manifest next update: Sun 20 Apr 2025 07:00:35 +0000
Files and hashes: 1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: +8owNWBuReXhybgvIGU/aPejDmEGz+Nzx0QK94CB/TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:5c:ba:2c:68:4d:38:db:33:49:81:39:4a:0b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Apr 19 07:00:35 2025 GMT
Not After : Apr 20 07:00:35 2025 GMT
Subject: CN=1b61c0333a1009e8403101f332caf02ed738ac13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:cf:e0:fc:45:96:bc:5a:48:2b:e2:9c:41:
85:f6:80:bc:48:b7:05:f8:56:ce:28:7c:8f:0e:54:
6f:6e:fc:7e:99:13:6c:6f:c7:c9:11:32:94:d1:da:
05:3d:d2:ea:e9:2f:24:8c:a9:0b:8e:41:5e:ad:54:
6e:3e:69:82:42:8f:68:19:36:54:89:64:dd:37:d6:
41:e3:5f:a0:0e:5b:45:15:18:df:99:30:f6:2c:97:
5c:75:99:16:f3:f5:7c:1a:8a:12:27:ca:b8:e9:97:
0e:b6:50:df:36:b0:59:04:09:4b:49:50:7b:d7:bd:
69:15:27:f7:51:55:87:a0:a9:9c:dc:29:b1:b7:a9:
95:c1:d4:82:ff:58:2d:ea:a4:34:f9:b2:5d:a7:5e:
c4:bc:d1:32:1c:d5:d4:e5:2c:d5:48:d1:ee:0a:cd:
a0:60:6f:bf:30:97:26:9f:08:d0:3b:32:e9:fe:9e:
73:36:16:24:69:c1:97:ae:12:76:3d:19:57:7d:b3:
c9:96:3e:2e:99:63:54:72:fc:e8:40:0e:91:98:99:
8b:10:49:b1:56:7d:62:99:ae:49:59:d9:52:bc:46:
62:dd:25:17:b3:d4:58:90:59:53:8a:e2:c6:0e:b6:
79:3c:70:5f:f0:13:9f:d2:4e:86:a4:c9:16:30:34:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:61:C0:33:3A:10:09:E8:40:31:01:F3:32:CA:F0:2E:D7:38:AC:13
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:14:10:04:ae:52:6c:ec:8e:c2:21:3e:2b:de:3c:0d:e4:6c:
ec:c5:b4:ee:46:32:23:76:34:97:e5:d4:1d:c8:2b:bc:3b:e2:
f5:8c:d9:11:bf:79:c7:45:5f:5f:cb:57:18:5a:24:f9:1d:aa:
fe:22:48:07:7c:13:ae:c6:6a:81:d8:b7:0e:17:a0:ea:b7:74:
aa:a4:54:36:c6:ca:ab:aa:8c:45:8b:d6:7f:a9:72:19:ae:0f:
83:cd:38:f7:dd:5f:17:21:f9:26:b6:92:31:97:ea:7c:0f:1f:
5b:d3:97:53:f5:ad:00:4a:6d:6c:4d:37:ee:7b:39:53:1f:51:
3b:12:6c:e9:a0:21:0a:2a:18:53:ab:9f:a4:f9:01:e1:8e:f6:
d0:d1:f6:b6:f0:1e:83:64:f3:24:78:ab:d1:c4:a5:38:5f:3d:
93:40:dd:00:a4:f8:17:60:2a:8e:5b:b0:8e:49:9e:8b:ca:96:
3f:b1:20:36:e6:11:8b:3d:be:b4:97:0a:d6:51:0f:54:2b:03:
71:58:0d:f9:49:be:b1:98:99:ce:fd:2e:51:93:9b:ed:2e:23:
38:4f:2c:02:46:69:0f:65:64:21:a3:d7:10:1d:d9:3e:ae:76:
b7:6d:45:f1:37:3e:78:36:04:4a:3c:4c:c1:fa:86:f7:40:a9:
ef:ba:56:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:10:39 2025 by rpki-client