Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: qUAGsErSJ4JjqYrO2LoPKy5fxFCvh6sA5zSWVV+PDWI=
Subject key identifier: 6A:87:DE:9F:B9:47:62:50:85:9B:1C:61:01:4D:56:38:18:4B:BC:43
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 019680220C656401EC497817E2367A20E153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 090C
Signing time: Tue 29 Apr 2025 06:00:37 +0000
Manifest this update: Tue 29 Apr 2025 06:00:37 +0000
Manifest next update: Wed 30 Apr 2025 06:00:37 +0000
Files and hashes: 1: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: 3qRmRAYMFi/0ZSjHCA12YJ5JoU/HrJJi4ogQkdtNBaE=)
2: u6X_yWkVLE-C5GUl8sRlcXUfprI.roa (hash: G/Od4mhlmhQvTsBF+RYMonju3qrggKqYt06lJi4x8BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:0c:65:64:01:ec:49:78:17:e2:36:7a:20:e1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Apr 29 06:00:37 2025 GMT
Not After : Apr 30 06:00:37 2025 GMT
Subject: CN=6a87de9fb9476250859b1c61014d5638184bbc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:68:7d:24:3f:70:ee:07:2d:c2:6f:f4:9a:
c7:57:82:bc:a3:cb:01:c1:5e:d7:bd:68:5c:aa:31:
62:47:b2:b3:5b:31:05:27:84:00:e7:8f:00:c3:7c:
22:83:40:eb:59:96:f6:d8:47:66:7b:fd:4f:26:75:
38:67:88:a0:66:ed:4d:bd:58:6b:f5:84:c7:c1:8c:
ef:7c:a7:67:c8:58:fc:bb:0b:6e:bc:e7:0a:3e:c2:
6f:a6:c1:3b:4f:c3:54:50:36:0f:c2:c4:b3:ca:b5:
56:49:58:31:be:0c:d5:35:2f:08:d5:a6:55:a2:cd:
68:b8:8c:13:59:6c:32:8f:26:2f:a2:6f:15:ce:52:
57:ce:eb:78:73:07:6b:0f:84:d4:0d:57:c0:82:9b:
f3:ae:09:50:7d:ed:35:d3:17:9d:ef:97:1c:50:61:
df:ea:f5:6e:6b:5e:fc:40:78:02:80:0c:06:4f:a7:
d6:4c:60:65:6f:b1:49:f0:8a:a2:b7:b6:e7:70:85:
6a:aa:58:fa:f1:2b:0f:9a:9f:2d:56:fd:87:98:23:
92:2a:d3:04:c4:5c:08:c7:85:a7:fd:f8:a9:ae:28:
1a:b0:38:de:30:84:c6:ce:c1:f6:f4:3c:40:2a:80:
13:ff:3c:e8:2c:6b:5e:3c:bf:ab:0b:a3:20:be:72:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:87:DE:9F:B9:47:62:50:85:9B:1C:61:01:4D:56:38:18:4B:BC:43
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:97:0b:dd:09:31:ab:c9:7c:e9:91:3f:fb:c5:76:3d:f0:6c:
22:27:ec:43:f4:a9:cc:fc:86:d4:91:a3:71:63:14:41:fe:07:
b6:30:bd:cb:6d:e1:88:62:40:a9:65:2a:45:51:b0:4b:70:dd:
f9:5f:c6:e5:5c:a9:11:e2:15:ef:54:95:bc:3c:32:f9:36:e2:
9e:4a:91:21:cf:0b:a2:1a:65:e0:4c:2f:8b:55:77:78:eb:a6:
1a:b5:2d:4c:36:44:67:27:ae:cb:cf:1b:43:a7:ff:56:27:d3:
46:4c:ea:bb:f5:33:96:18:a2:37:74:4c:8e:43:bd:aa:01:7e:
38:b4:cd:81:2a:03:58:b0:bb:ed:db:57:88:10:73:46:62:fa:
75:2a:9a:b1:2a:ab:2e:d8:3f:2b:0b:bb:c7:a7:2b:e5:18:67:
d2:c3:27:10:70:ec:24:e3:c4:96:e5:97:6f:2e:9f:9f:41:7c:
c1:0a:74:42:e6:6d:c3:6b:96:05:d1:43:de:4c:1d:59:ba:b9:
47:87:5d:f8:e4:17:d1:94:04:16:eb:fb:97:76:7c:94:19:da:
32:b0:9b:29:ca:56:f6:92:df:b4:7d:e8:dc:6e:6d:53:ef:5b:
1d:b2:31:58:60:11:ce:5b:2c:3c:24:13:12:3a:4b:d9:69:f3:
d9:01:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:27:03 2025 by rpki-client