Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: 6mj6RaEdXZyC+d4dzlADaJfLQaFeXRRKJ7hALX7r/hc=
Subject key identifier: 96:11:BE:6C:13:AF:38:C1:AB:A1:22:65:FE:61:3C:DA:6B:4D:C2:83
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019612EA7CF494B692B2124C9097BE57C409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0C6A
Signing time: Tue 08 Apr 2025 01:01:19 +0000
Manifest this update: Tue 08 Apr 2025 01:01:19 +0000
Manifest next update: Wed 09 Apr 2025 01:01:19 +0000
Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: iPpWRXrlF1McvrZb0ftijTCsTHV9Lm15jvzb/FgMUbU=)
2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=)
3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:ea:7c:f4:94:b6:92:b2:12:4c:90:97:be:57:c4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Apr 8 01:01:19 2025 GMT
Not After : Apr 9 01:01:19 2025 GMT
Subject: CN=9611be6c13af38c1aba12265fe613cda6b4dc283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:3d:92:2a:a9:c1:1d:e8:af:41:81:4d:15:
88:87:ec:05:a1:a8:47:48:f3:82:6f:d2:df:ed:29:
29:28:23:31:f7:f0:46:b4:cd:15:b8:72:ba:0c:4e:
ec:11:05:fd:6d:82:bb:90:9e:10:dd:37:0f:f0:b2:
b0:9a:04:b4:6b:d5:02:04:45:61:6c:a8:7b:ec:a9:
bd:dd:bf:20:ad:81:29:99:0a:1b:ae:9a:09:0d:a9:
0e:2f:ce:5e:9d:e3:2d:16:bc:18:08:35:19:f2:96:
30:7c:2c:71:a8:12:45:1f:f8:51:d7:8f:c2:25:44:
d3:e9:d5:6d:62:c1:8b:a1:ea:0b:23:ee:34:8b:6c:
6f:14:b1:e4:cf:3d:99:24:56:3f:30:bc:e9:2e:ca:
b5:32:05:1a:af:ee:f3:41:c1:5f:36:cc:b8:8c:5e:
f9:ba:7a:99:08:12:bd:79:4e:c2:ca:d9:c1:86:02:
1b:89:ff:c4:30:4e:80:67:91:d1:bf:1d:d1:2d:8e:
7a:8b:7b:51:40:e2:14:e9:6c:39:c8:7f:d9:14:30:
67:cc:ac:a0:46:d6:2a:b7:c7:e2:2f:5e:63:65:af:
5b:35:9d:06:12:c3:53:51:1a:90:bd:fc:02:39:a4:
31:e1:a9:06:7a:65:3d:be:c3:84:59:ee:b0:9b:3a:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:11:BE:6C:13:AF:38:C1:AB:A1:22:65:FE:61:3C:DA:6B:4D:C2:83
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bf:4f:16:b2:84:d8:8f:aa:eb:a7:d9:0d:0e:01:c8:b2:0b:
c9:6a:74:40:53:f5:86:51:7d:4d:13:a6:52:e6:da:5e:6c:ea:
06:9b:d3:4f:0a:b7:ed:1d:32:49:01:4c:6b:2d:93:66:41:a5:
18:60:48:48:db:78:ca:5d:9f:3a:99:fb:0b:0d:02:a9:c0:52:
4e:da:78:91:bd:06:3a:13:ba:8a:b9:7c:3f:e7:06:e4:3d:0a:
6e:2a:84:d1:74:7a:75:ea:48:0f:c3:57:70:45:a3:57:d8:cd:
c2:0d:6c:67:7b:c3:3b:ae:8e:78:96:76:22:a0:53:49:01:79:
fe:60:78:e3:0f:29:d8:5d:a1:bc:0a:5f:d6:99:ff:df:6e:34:
7c:fa:b9:74:e8:3d:97:1a:f4:e2:0d:be:d4:23:9a:62:63:25:
82:a3:2a:bf:b7:d3:2a:91:52:e6:8e:f3:27:3c:4e:a8:1d:db:
9f:30:67:15:55:2e:f8:6c:03:03:bd:cd:71:ed:e2:3e:99:53:
61:fc:95:d4:33:30:8d:7e:ca:44:2d:88:52:23:d9:99:1c:45:
33:03:94:1e:bc:07:44:7b:81:93:d0:c5:2e:7e:3a:a1:38:c1:
59:8a:98:c0:69:ed:a7:b5:3b:22:0a:a1:2d:33:18:dd:a1:85:
ba:2e:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:03:51 2025 by rpki-client