Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json)
Hash identifier: ETZHZRs+urdTy0W2iUb89ydbzQxLZMPysFK/+ZF4Tog=
Subject key identifier: 17:F2:0F:39:2F:0F:DA:93:D4:78:69:E7:D0:3E:CE:44:33:DF:11:15
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 019651C93FA416AE700AD78AFA03D04BEC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
Manifest number: 0DA9
Signing time: Sun 20 Apr 2025 06:01:05 +0000
Manifest this update: Sun 20 Apr 2025 06:01:05 +0000
Manifest next update: Mon 21 Apr 2025 06:01:05 +0000
Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: smlz1e+/t48+7tAesTOiVzE6pKrsx01MZc7IZR1cb3c=)
2: gt9goB76oJJ9IidA_tfxI6lWDIw.roa (hash: q0BFU46k9v4mjBVsSe1ZjIuLriX+JzS+b+gMagD0YfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:3f:a4:16:ae:70:0a:d7:8a:fa:03:d0:4b:ec:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: Apr 20 06:01:05 2025 GMT
Not After : Apr 21 06:01:05 2025 GMT
Subject: CN=17f20f392f0fda93d47869e7d03ece4433df1115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:34:3d:53:4b:d6:a9:ae:48:4a:a3:d5:55:
8c:57:43:ac:e9:35:e0:a1:02:6b:75:da:8f:03:e4:
0c:e2:77:b7:97:24:65:5c:83:8b:cd:81:1a:85:51:
09:d7:63:bc:57:6a:7a:69:d2:db:cc:2c:6c:95:5b:
23:25:55:8d:b7:85:85:78:33:1c:c8:f1:0a:b2:05:
f9:fe:c8:c0:2f:e1:71:6e:4c:b0:78:0a:54:68:9d:
1b:42:d3:6f:9e:25:7e:6a:b1:9c:54:c9:6e:4c:97:
b5:d0:ca:ac:e8:55:0d:61:3e:63:ca:31:8a:61:1e:
76:c7:c1:94:b1:5d:58:d3:ca:f0:49:c2:4e:e8:80:
20:e7:fe:f5:43:ca:55:ac:26:ca:a4:5d:16:0e:3e:
b9:2f:79:a9:b8:df:a1:3e:1c:c6:50:87:00:bd:23:
20:aa:1a:b5:ca:47:fb:05:0e:73:14:a7:6b:0d:64:
52:d2:06:ec:d4:bb:c7:0c:64:d7:d9:f2:90:90:d2:
c3:ea:f2:cf:a7:4d:5b:07:f8:1e:f2:dc:8f:74:35:
e5:2c:bb:c5:c5:14:5a:c0:d8:8a:f8:44:69:8d:ae:
66:d4:8d:ea:a6:72:d5:8e:26:68:4c:d9:88:c2:21:
b0:89:ed:a1:50:6d:2f:c8:fb:5a:d2:01:4f:2c:bd:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F2:0F:39:2F:0F:DA:93:D4:78:69:E7:D0:3E:CE:44:33:DF:11:15
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:65:9a:6e:bd:08:d9:77:6d:57:95:c4:dd:f0:f9:b1:a0:b6:
06:87:c8:c7:da:0e:0f:6b:be:d1:55:eb:0f:eb:cb:c1:2f:44:
e9:2a:fa:43:ae:54:b7:c4:7e:ae:98:15:a4:05:01:7a:3d:9d:
ae:8f:bd:2f:58:f9:2d:07:81:f8:f4:69:e7:13:09:d6:9e:a3:
9f:bb:a2:40:01:7c:32:32:ca:cc:63:13:2f:fe:c1:d7:4a:7d:
68:29:78:29:67:bf:75:89:1c:ed:dd:f7:96:45:77:e1:a0:60:
69:b5:15:f2:7e:ce:42:14:95:f8:be:74:d5:63:c1:1a:7e:a9:
13:36:72:5f:5d:42:4d:69:54:56:8b:ce:20:25:7b:1b:8b:1f:
58:8c:99:73:48:ca:ff:31:38:17:01:5a:d9:94:09:05:75:79:
38:e8:8d:50:c9:7d:02:1e:5e:60:a1:51:0f:23:20:47:b2:a9:
fa:d4:08:7d:65:eb:89:8b:86:9c:1e:79:e4:ab:9f:fa:9f:d5:
7f:45:78:8e:84:86:a2:21:3a:7f:6b:3b:51:ab:a4:5a:6c:3e:
ad:ef:02:61:56:11:4a:4b:13:71:b3:c0:d1:e9:91:e7:d8:33:
cd:65:59:8d:3d:c8:f9:d6:0f:fe:00:3b:de:9c:71:7f:ca:4a:
ab:ee:dc:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRyT+kFq5wCteK+gPQS+wBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjhhMmFkZGRiMDAyODUwODU0OTk2YTk0YjcyYjg3ZjRh
N2IzMGYwHhcNMjUwNDIwMDYwMTA1WhcNMjUwNDIxMDYwMTA1WjAzMTEwLwYDVQQD
EygxN2YyMGYzOTJmMGZkYTkzZDQ3ODY5ZTdkMDNlY2U0NDMzZGYxMTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sI0PVNL1qmuSEqj1VWMV0Os6TXg
oQJrddqPA+QM4ne3lyRlXIOLzYEahVEJ12O8V2p6adLbzCxslVsjJVWNt4WFeDMc
yPEKsgX5/sjAL+FxbkyweApUaJ0bQtNvniV+arGcVMluTJe10Mqs6FUNYT5jyjGK
YR52x8GUsV1Y08rwScJO6IAg5/71Q8pVrCbKpF0WDj65L3mpuN+hPhzGUIcAvSMg
qhq1ykf7BQ5zFKdrDWRS0gbs1LvHDGTX2fKQkNLD6vLPp01bB/ge8tyPdDXlLLvF
xRRawNiK+ERpja5m1I3qpnLVjiZoTNmIwiGwie2hUG0vyPta0gFPLL1tZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfyDzkvD9qT1Hhp59A+zkQz3xEVMB8GA1UdIwQY
MBaAFD24oq3dsAKFCFSZapS3K4f0p7MPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQt
YTBhNzJhNzMzYzAyLzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQtYTBhNzJhNzMzYzAy
LzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2Wabr0I
2XdtV5XE3fD5saC2BofIx9oOD2u+0VXrD+vLwS9E6Sr6Q65Ut8R+rpgVpAUBej2d
ro+9L1j5LQeB+PRp5xMJ1p6jn7uiQAF8MjLKzGMTL/7B10p9aCl4KWe/dYkc7d33
lkV34aBgabUV8n7OQhSV+L501WPBGn6pEzZyX11CTWlUVovOICV7G4sfWIyZc0jK
/zE4FwFa2ZQJBXV5OOiNUMl9Ah5eYKFRDyMgR7Kp+tQIfWXriYuGnB555Kuf+p/V
f0V4joSGoiE6f2s7UaukWmw+re8CYVYRSksTcbPA0emR59gzzWVZjT3I+dYP/gA7
3pxxf8pKq+7c1A==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:06 2025 by rpki-client