Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: 6VNezhlSK29pyZ+yNt1bcFMmBeuOPqvTB1KpmAAtoTg=
Subject key identifier: 10:EF:8C:98:6E:B9:38:B3:37:1B:F0:E6:C4:2E:5C:33:85:E9:E7:37
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 019651C8A324EF0DC4C6E9F15963F69B40A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 06B2
Signing time: Sun 20 Apr 2025 06:00:25 +0000
Manifest this update: Sun 20 Apr 2025 06:00:25 +0000
Manifest next update: Mon 21 Apr 2025 06:00:25 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: QmugLRraA2SK5nypkMMXJODpMd8cKQSUl6+MjnIsq6I=)
2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:a3:24:ef:0d:c4:c6:e9:f1:59:63:f6:9b:40:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Apr 20 06:00:25 2025 GMT
Not After : Apr 21 06:00:25 2025 GMT
Subject: CN=10ef8c986eb938b3371bf0e6c42e5c3385e9e737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:af:98:11:54:9e:dd:52:93:5b:05:ab:09:
fe:73:6a:eb:29:6b:1f:02:e8:b3:26:b6:bd:00:0b:
94:76:a3:e0:ee:bc:e0:c5:97:c0:b5:a7:85:3d:70:
86:f3:02:a0:5f:88:21:1f:c5:33:79:15:8c:ba:e4:
fa:2e:7f:76:28:95:57:27:1b:af:c0:4c:41:ee:73:
98:38:a6:d3:17:0b:16:9b:b4:d5:9e:c1:61:eb:32:
c2:25:3e:8a:e3:82:7c:ef:92:39:35:fc:06:df:d6:
0c:e9:1b:f8:3d:0a:f0:53:58:88:6b:c7:ea:91:84:
7c:f1:7d:ea:ce:67:d7:70:67:2c:4a:5f:78:0a:97:
2e:3f:52:5e:bc:e2:c6:19:c8:2e:42:2a:9e:1a:46:
9e:4e:61:92:73:ec:43:26:84:50:30:d4:d2:27:d5:
f2:e1:4c:00:12:f1:da:cc:1b:3e:49:c1:91:4d:fd:
07:2c:0f:88:bf:56:24:d8:29:60:6c:a9:ff:fe:7e:
56:33:92:36:c6:14:de:54:79:54:41:9c:08:7d:49:
49:29:cc:f2:50:2e:e8:09:7d:e2:c0:97:34:57:96:
13:bd:0e:e5:09:83:77:87:c5:f6:49:46:e7:89:c4:
d8:9d:e0:bd:5d:6d:ea:d3:c5:b1:52:74:96:97:f4:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EF:8C:98:6E:B9:38:B3:37:1B:F0:E6:C4:2E:5C:33:85:E9:E7:37
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e3:b5:7e:89:97:b8:4d:89:e2:c8:69:24:1c:fe:20:04:bb:
16:ac:1e:00:c7:85:16:73:80:26:60:e2:13:4e:43:95:54:76:
d5:45:c5:cc:40:91:42:15:80:6a:d1:d1:c8:a2:6c:76:31:d1:
11:a5:22:fc:f8:2c:e5:d1:f8:78:85:64:6c:e8:83:07:5f:58:
79:ee:15:af:59:af:97:0b:59:6e:7f:62:11:66:9c:93:15:93:
ed:4c:15:14:d2:e2:13:13:57:04:1d:19:27:95:6f:f0:57:cf:
04:45:42:b2:76:46:4e:93:f0:44:75:51:8f:66:3e:eb:b5:07:
a4:62:d0:a7:bc:ba:ae:eb:e6:68:ad:18:4b:e4:90:47:8a:69:
63:b8:7b:e2:c4:17:23:a0:5c:43:2b:bb:ee:02:77:65:51:9c:
ac:2b:3c:66:73:5e:f1:25:7a:83:f2:20:3c:12:95:7b:ba:e4:
3f:d4:a9:6d:8c:9d:83:1b:ae:68:e3:bf:9e:f4:9f:f3:4d:87:
9e:a8:21:d5:89:a1:12:2a:08:f4:29:4c:7b:0d:8c:e7:f8:3f:
dd:60:88:98:86:6a:d1:87:2b:7f:73:cb:10:1f:aa:84:f5:c5:
c1:3f:d3:13:f1:60:8c:6b:63:cd:1a:2b:d0:60:47:a2:dd:d3:
e5:2e:67:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:27:13 2025 by rpki-client