Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: D33isGd0/ylTws/9lrAcCoK2JiExexiiaBiqXDk9+Ns=
Subject key identifier: 14:4D:5C:19:3B:6B:B5:68:7F:FE:3B:56:13:F7:8F:EB:B9:66:DE:87
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 01958C29592DBA2A9333DCA63C63E29620BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 03C1
Signing time: Wed 12 Mar 2025 21:01:14 +0000
Manifest this update: Wed 12 Mar 2025 21:01:14 +0000
Manifest next update: Thu 13 Mar 2025 21:01:14 +0000
Files and hashes: 1: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: sa1PPl3apYwfMRwevY3MY5ip5ZCvJWGyRYq5TDAOwJ8=)
2: R3hdyvcGqSNq9MuuQgsgENnLqRc.roa (hash: p4vr1woIgR7A2etkhsE5WicuvE4bBuEK3XJxuDU+KOU=)
3: bdN5bSk-xsk3V329iHiH8aXvTdI.roa (hash: B5/9B1uBl6eNvv9W6TPaWnFzqWQvfYoiY7n1wWqxjpc=)
4: wWkcOa8cqDGRhn8j-1x_z-ePvg0.roa (hash: gQMjNWFHknHqWjiClHplw+oae04KXbyQbF9fSFE9xPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:59:2d:ba:2a:93:33:dc:a6:3c:63:e2:96:20:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Mar 12 21:01:14 2025 GMT
Not After : Mar 13 21:01:14 2025 GMT
Subject: CN=144d5c193b6bb5687ffe3b5613f78febb966de87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:d8:aa:e4:78:b4:ff:c6:d5:d2:4f:f4:87:
a6:ff:02:6d:ba:59:1a:26:30:ef:05:ad:b5:80:1f:
ba:f5:e9:06:35:bd:e5:a9:33:dd:70:ec:83:df:66:
6a:26:bd:4f:3c:7f:f9:d5:a1:38:74:8b:2a:e6:2f:
97:ca:98:d1:a1:c5:4e:a7:29:2f:de:d8:28:61:70:
36:b9:35:f1:53:b8:81:8f:d8:f1:bd:5c:70:03:a9:
dd:ce:a0:63:7c:39:ee:bb:4d:d0:73:41:3e:71:81:
ca:e6:e7:52:8e:df:09:56:88:99:3f:8e:cf:4b:b5:
40:f1:e0:92:0f:be:e0:d4:db:8d:aa:10:b7:89:bd:
b4:da:45:f8:b4:22:68:ef:11:ad:7a:1c:b4:91:89:
03:9a:29:12:b0:52:96:b3:83:e2:07:20:56:f3:f6:
c5:e2:5d:98:24:55:54:f0:28:9a:9d:75:b8:05:05:
5f:7a:dd:b9:4b:af:0a:f6:a5:83:b1:84:9c:9c:b4:
5e:a7:e5:0e:2a:b3:a6:73:64:f6:9d:e2:67:e1:09:
df:17:9d:ad:04:b4:47:f2:3e:b8:e3:e0:67:9c:1d:
02:5a:fd:21:f4:71:72:63:21:73:48:2b:f1:55:fc:
8e:fa:5c:d9:39:07:0f:9c:eb:ba:f5:26:90:b9:62:
81:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4D:5C:19:3B:6B:B5:68:7F:FE:3B:56:13:F7:8F:EB:B9:66:DE:87
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3a:ab:5b:f2:32:9a:ba:06:90:33:98:f5:5a:18:d6:5c:f7:
75:f9:96:6d:1d:7e:30:af:41:e3:80:e4:4b:e2:10:5a:93:03:
47:eb:a0:7f:99:34:17:d1:e4:04:50:67:65:ef:ff:55:85:f7:
d8:09:20:c1:e3:f3:ec:a3:aa:ae:86:22:72:0c:f7:f0:ad:07:
23:9c:6c:f1:68:be:32:fa:02:e0:e4:0a:56:f0:01:fd:8e:7a:
2f:1c:26:39:ae:83:ba:c1:a5:45:a5:90:0a:41:bc:0a:b1:1d:
da:34:67:90:54:6f:c4:b4:e5:aa:ca:f8:f1:b3:20:46:32:33:
5c:eb:81:72:02:96:01:00:84:63:07:42:cd:67:19:18:2d:8e:
8c:03:a6:f9:dd:a2:79:f2:7f:6f:09:50:14:99:52:67:7a:e1:
aa:10:c3:03:12:76:c8:19:54:3f:a4:58:e3:47:d1:70:e9:cb:
fa:98:8d:26:85:4e:ba:c5:fa:64:1b:dc:c2:60:a7:75:12:c4:
1b:f7:34:af:67:5c:05:48:62:76:e6:57:48:32:a1:f5:c1:2c:
c3:36:a8:9c:12:d3:79:7a:f0:86:21:48:09:55:23:5c:55:f9:
a0:5a:44:68:c0:92:34:a3:1f:f0:05:b6:30:04:96:d8:7c:92:
46:3a:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:42 2025 by rpki-client