Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
File: Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft (raw, json)
Hash identifier: m8yy7NDHCRtvFeBy2XnDH1kDZphgITZKP8YqLwf1Xro=
Subject key identifier: D6:87:2A:3D:94:B9:91:FB:17:24:8A:08:DD:8D:F6:B1:F6:22:6A:19
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Certificate issuer: /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial: 019681A2A223C6EA1403889A2957A3BBFEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
Manifest number: 113C
Signing time: Tue 29 Apr 2025 13:00:41 +0000
Manifest this update: Tue 29 Apr 2025 13:00:41 +0000
Manifest next update: Wed 30 Apr 2025 13:00:41 +0000
Files and hashes: 1: Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl (hash: QPlpUN5otCS1podYptYs/gsTfs33tWPxOovej4704CY=)
2: TvTxBLGF9a81RGikK2pVw5Qclrk.roa (hash: Swsi8hcudUdP4trO5kArswNQiDBcmbNtUjmXbEXUd0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:a2:23:c6:ea:14:03:88:9a:29:57:a3:bb:fe:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Validity
Not Before: Apr 29 13:00:41 2025 GMT
Not After : Apr 30 13:00:41 2025 GMT
Subject: CN=d6872a3d94b991fb17248a08dd8df6b1f6226a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:ef:20:d5:6d:39:e0:e0:4d:04:c0:57:0c:
e4:e6:03:48:a0:15:e0:c1:00:cb:5d:84:b4:23:2a:
34:ef:3e:0f:83:c7:93:f9:52:db:64:a6:f3:e4:5d:
fc:48:84:16:e6:93:da:29:0d:70:99:c7:f1:c2:f9:
33:36:28:40:1b:35:0e:02:09:5d:09:cf:c7:67:87:
4a:af:77:55:d8:20:9b:4e:a8:60:02:ef:0d:35:80:
e4:b3:9a:af:0d:ac:f0:06:34:62:94:a6:42:56:1f:
55:5e:33:40:28:98:17:76:13:f3:f0:7d:1e:54:59:
c8:90:4f:a1:4f:84:8c:45:69:10:20:88:9b:6b:15:
b5:1e:0a:05:bb:02:5a:1e:21:6f:a2:2f:73:79:2b:
11:49:c1:d6:32:3a:9a:0c:5a:1c:4e:9c:47:d1:dc:
7a:b8:95:24:b3:07:f2:4d:54:da:60:af:4c:20:75:
7c:cd:b5:13:28:8e:97:34:11:a2:5f:ec:4e:76:12:
8e:1a:fd:6e:f4:be:c0:49:fe:6a:16:32:7c:30:a1:
83:5c:e1:43:a0:92:25:77:2d:23:00:cb:7b:64:4b:
7d:25:6b:b1:6f:e3:b2:27:b1:b6:32:49:d9:b8:7d:
1e:03:dc:eb:77:4a:91:08:d9:8c:9e:26:71:22:f7:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:87:2A:3D:94:B9:91:FB:17:24:8A:08:DD:8D:F6:B1:F6:22:6A:19
X509v3 Authority Key Identifier:
keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fa:02:03:fd:ac:d9:06:bf:dc:9d:1b:c6:ed:65:61:c1:f1:
d7:00:0f:13:63:6c:56:e1:25:e5:cc:d7:9c:d0:b9:a6:fe:41:
32:2f:22:2b:23:68:48:8c:59:be:1a:20:e6:af:f7:f7:e9:a4:
36:9f:04:13:58:e2:8b:0b:1f:c8:1b:4e:49:9e:25:90:72:27:
c5:51:8b:71:d2:d6:a5:d9:af:51:f1:53:2f:ee:b6:49:76:6e:
aa:8b:f3:fe:b9:1e:b8:f9:af:41:33:9a:93:b9:17:96:f1:cf:
77:65:4b:f1:2a:d1:1b:28:07:91:68:3b:31:34:f1:83:8d:c5:
45:1f:d9:d9:32:9a:ed:58:59:06:92:67:b6:83:e6:f6:39:75:
0e:7d:b9:3f:08:71:46:9e:8c:63:dd:72:09:d2:5d:d6:34:77:
ce:9d:1a:d9:bf:87:6a:43:1a:17:25:94:84:30:22:b7:9c:13:
c5:98:9d:ff:8f:b6:a0:2e:dc:b3:c1:12:51:77:97:3f:c7:eb:
25:16:33:ec:5e:72:b0:b7:10:98:2a:df:56:f7:db:3e:ec:0c:
7b:6d:3f:3f:77:cd:01:3c:67:85:1b:8a:6b:74:af:d6:a5:89:
0f:92:9d:48:91:9c:16:de:ea:6b:16:b8:48:1c:40:4a:b1:1e:
f6:04:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:37:36 2025 by rpki-client