Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier: 4O0pgGKKnecYNBUXcv2c1BypfcMnG3L+k0aJOdnEGLo=
Subject key identifier: B2:56:9D:84:2B:14:86:C8:FC:65:91:E1:9D:FA:77:F5:F4:A6:FF:D5
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial: 019654C9CDCC7EEE91DAEDCFE3DFFB0F9700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number: 1502
Signing time: Sun 20 Apr 2025 20:00:33 +0000
Manifest this update: Sun 20 Apr 2025 20:00:33 +0000
Manifest next update: Mon 21 Apr 2025 20:00:33 +0000
Files and hashes: 1: Iu-aA6mIgmV7NRaHZwfWxVQwunE.roa (hash: o5Wzr2WPXf+6jJuX+5+5esP5UlB6RWICl6cgQsSyWJw=)
2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: dGnt8bwKrCPtX/m8MSGnct4Kh3HCNLDoTYoodIQdQJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:cd:cc:7e:ee:91:da:ed:cf:e3:df:fb:0f:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
Validity
Not Before: Apr 20 20:00:33 2025 GMT
Not After : Apr 21 20:00:33 2025 GMT
Subject: CN=b2569d842b1486c8fc6591e19dfa77f5f4a6ffd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:c5:a0:0d:80:cd:2a:4d:4e:3d:41:95:08:
37:0b:e2:a8:a9:81:82:4a:2e:1c:f2:ae:12:1e:bd:
9b:8f:e3:5e:34:bb:37:4c:c3:0d:67:8f:9b:98:3e:
6d:f9:c9:8b:67:1d:3d:53:e4:09:e2:71:54:04:f3:
b8:71:0c:47:24:67:59:6d:2a:16:5a:ad:4b:58:0b:
d1:e5:d8:2c:e8:d9:7e:4a:39:9e:40:7b:a6:30:b5:
f1:64:0a:1c:f9:a0:1f:0b:bc:a6:b4:06:bf:ba:13:
4a:b8:a1:b3:ee:f4:92:3e:b8:c3:26:1c:68:26:b5:
9d:39:82:d5:27:bf:6e:4f:21:a9:be:39:a1:ff:3b:
76:93:65:81:b3:e2:f3:80:0b:a4:e6:e6:ed:a5:c5:
c0:10:d1:d5:dc:80:4d:fc:26:60:43:7e:bc:a9:32:
7b:e6:ad:0f:8e:30:99:4d:1a:58:9d:ad:d9:3a:5b:
ee:99:e3:44:0b:3e:a3:33:5a:07:8a:bb:fc:ab:67:
77:85:39:00:17:cc:42:4d:47:50:94:89:7c:5b:2a:
31:b9:26:17:43:8e:d5:88:20:bd:16:a3:93:78:e9:
e6:dc:f9:ff:99:76:d8:12:b5:46:c6:e4:e6:24:f2:
0f:a8:9c:0e:1a:c9:75:f2:a3:45:ae:30:f8:10:60:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:56:9D:84:2B:14:86:C8:FC:65:91:E1:9D:FA:77:F5:F4:A6:FF:D5
X509v3 Authority Key Identifier:
keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:37:1b:f1:39:32:90:6d:00:4b:72:05:7b:22:58:df:83:de:
0a:d5:49:00:64:fe:13:96:f3:41:9d:1b:cb:e2:d8:bd:c3:fe:
0c:bf:00:70:84:ec:76:3b:79:7b:34:55:19:ed:fa:ef:da:d0:
1f:c7:1d:d3:7d:64:fb:cb:53:99:1f:14:9b:48:57:87:8c:06:
cc:79:88:a9:54:f6:e1:ab:b4:61:ce:f8:f8:1f:25:00:c4:79:
52:38:e3:e5:d8:c7:70:03:06:ab:20:c1:56:b8:df:dd:5f:49:
c6:b1:08:cf:eb:8f:90:c5:d4:a4:95:0d:c4:e9:c7:b9:11:91:
3b:91:81:05:44:bf:92:c7:7e:e8:19:77:9d:9e:c1:53:c4:02:
47:9b:ba:d9:94:d1:6d:9d:9b:3a:f7:97:04:d3:9c:17:d0:db:
07:eb:56:d0:0d:04:c2:31:bc:59:47:fd:86:59:07:9c:a7:b2:
59:97:01:40:b2:eb:70:86:0c:80:b4:df:20:91:54:90:6b:9a:
2e:f7:b8:0e:4b:56:f6:05:dc:5c:aa:3f:c2:f2:15:56:df:e8:
4c:c8:84:52:60:fa:56:3d:aa:d3:c9:fd:b2:48:5d:59:ee:e5:
db:99:79:d1:34:e2:21:0a:4e:00:3f:93:b7:ae:07:d6:70:2c:
13:e2:cc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:27 2025 by rpki-client