Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json)
Hash identifier: ERzgSV268e87xhnluUZgoh8eBaw0ExnjeCB4h4S/oIc=
Subject key identifier: 53:47:A2:9E:1D:E9:3C:18:AC:58:83:5A:D4:7B:20:05:06:FD:B8:1E
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 0196580246D7984F3632348A11EE6F0ED6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
Manifest number: 0F9B
Signing time: Mon 21 Apr 2025 11:01:06 +0000
Manifest this update: Mon 21 Apr 2025 11:01:06 +0000
Manifest next update: Tue 22 Apr 2025 11:01:06 +0000
Files and hashes: 1: CufUT2fMUqvz9LGxO18OZgdQp_g.roa (hash: G2fcMqhZShi/pIW7MbvdKjfohzkmwJAvDqVZX+1pdMQ=)
2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: IL5yyYSJ4LUA0Zm9Bi6/okwvsOpuClswKlip/+ZWRMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:02:46:d7:98:4f:36:32:34:8a:11:ee:6f:0e:d6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: Apr 21 11:01:06 2025 GMT
Not After : Apr 22 11:01:06 2025 GMT
Subject: CN=5347a29e1de93c18ac58835ad47b200506fdb81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:a5:89:f5:e7:ae:16:0a:40:f5:ad:a9:31:
1b:89:51:53:3f:50:32:07:87:cc:d6:0b:59:4c:28:
e3:40:99:8b:59:80:6b:13:22:db:32:e1:b2:6e:7a:
ab:2c:ef:68:d9:a6:7e:bd:30:ef:64:68:38:64:86:
72:1b:b7:24:4c:ee:9c:2c:28:83:5d:83:40:16:a4:
3e:9c:78:a0:b5:b3:70:c8:a1:2d:ad:f2:15:ba:45:
fd:b1:6b:48:1c:f3:cb:2b:f8:92:2a:72:31:54:72:
2d:2d:e4:86:93:b6:49:cb:31:7d:cf:92:7f:a1:78:
18:73:d8:ac:66:c9:d1:60:36:5e:f1:87:be:25:67:
5d:dc:b6:a1:5f:b7:f3:ab:9b:00:79:65:be:08:22:
d6:24:92:b1:72:4c:39:a0:05:7a:54:12:da:e2:53:
8b:2c:01:f3:1d:a1:12:4f:ca:9e:3a:8d:94:da:06:
74:00:43:fa:52:21:e9:fe:1d:50:f9:9d:b3:95:78:
1f:88:13:47:44:69:fa:ee:16:4d:35:5d:ef:39:9b:
c1:52:84:5e:b2:4f:dd:89:4d:1e:7d:6e:52:d3:b5:
d4:01:de:65:f7:8f:70:d1:3a:77:46:9b:af:eb:ea:
ad:25:4a:98:99:08:84:27:f7:72:a0:1b:2e:57:f2:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:47:A2:9E:1D:E9:3C:18:AC:58:83:5A:D4:7B:20:05:06:FD:B8:1E
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0b:2e:06:8e:a3:bd:2b:35:01:ea:c9:b5:75:46:1e:8b:18:
a2:a9:df:79:2f:b4:87:ea:37:c9:c3:4c:96:ae:22:1b:bf:c3:
4c:bf:cb:64:0f:0a:2c:3c:3a:5c:70:2d:5d:e8:c8:e5:45:e0:
10:da:f1:5c:e5:cd:94:63:bf:f6:43:c4:e0:01:14:ff:cc:77:
e0:ca:19:fe:15:3e:d6:4c:3a:5f:5d:10:18:c3:3f:a9:f8:e7:
6d:a6:e4:4e:68:85:cd:ef:88:a9:92:a7:4c:56:4f:13:f9:f3:
2b:fc:7b:06:64:11:5f:c9:4a:85:8c:f4:28:90:db:ff:a3:c3:
2f:fc:0d:25:4e:55:62:bc:4c:44:e5:9f:ba:fc:62:c0:e2:1c:
6d:b8:47:8a:eb:e7:fe:87:7a:99:c2:a1:e0:b4:af:89:60:a8:
52:76:de:7b:4a:03:cf:10:57:bb:af:b3:63:6c:9c:87:30:0e:
3e:05:c3:bd:73:51:ff:bb:e2:1c:f3:f1:69:1a:34:a8:b8:fe:
e0:06:5a:72:12:50:ae:f1:23:db:67:6d:3e:7e:c9:18:1d:0c:
5d:21:cc:7a:57:2f:74:7f:fa:1f:39:e1:52:1e:54:ec:db:30:
18:66:43:57:8f:00:6e:62:89:ea:a2:be:66:a9:84:c6:a6:ff:
75:4d:a5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:30 2025 by rpki-client