Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File: PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier: jU1BzmTT+sV0qfe2L4FDm9qwl2rUXFKg3gaGQ3QDHKw=
Subject key identifier: FF:A7:D4:47:9A:85:BE:66:9F:BA:6D:4B:6C:08:B5:5E:4D:9B:CE:E3
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 0196865AB5BBD917C0A4A09C4EB4B8631E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number: 07A4
Signing time: Wed 30 Apr 2025 11:00:13 +0000
Manifest this update: Wed 30 Apr 2025 11:00:13 +0000
Manifest next update: Thu 01 May 2025 11:00:13 +0000
Files and hashes: 1: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: UlXzlz0cFcEQmEAe8v6vKl2tUB3JX0gQUCZ3PbhDdFE=)
2: quGmI9u7kZ_srTH3LAyxtNKvCAo.roa (hash: RhLYYew4zXRTIVHsFT/3lhPwJj/c1cXNf2IyJ1qOi6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5a:b5:bb:d9:17:c0:a4:a0:9c:4e:b4:b8:63:1e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Apr 30 11:00:13 2025 GMT
Not After : May 1 11:00:13 2025 GMT
Subject: CN=ffa7d4479a85be669fba6d4b6c08b55e4d9bcee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4f:ec:8d:ab:5c:fe:b8:d8:cc:ad:cf:33:9d:
e6:18:08:cc:37:a1:c0:91:f5:2f:f5:bd:eb:9a:3a:
c1:b2:b6:c0:b6:0c:d7:63:6b:50:10:87:04:33:10:
b3:9a:9f:0d:67:f4:1d:c1:34:5b:16:84:3e:20:25:
a9:30:98:ca:f8:98:9f:ea:f2:84:6a:f8:f9:56:0b:
2e:15:d3:b0:35:a3:20:c1:56:77:b8:06:df:bc:39:
f1:4c:ee:4c:82:18:10:54:6e:53:dc:69:e4:a6:fb:
79:f7:bd:15:a3:f6:49:6c:6a:76:92:6b:8f:a5:1e:
18:b2:a6:2f:5b:a5:a4:e3:30:e1:f0:30:e7:1c:de:
87:ac:e7:dc:f3:00:bf:a6:ee:c5:0e:a7:0e:f3:2a:
d3:ca:be:4b:9f:7b:57:b9:5a:63:03:7c:ee:f0:c7:
ad:4b:fe:04:3e:a9:3a:84:7c:ca:ca:fc:a8:4f:b2:
d2:7a:ab:75:0f:0a:84:d0:1c:14:a0:c3:df:87:c4:
98:cf:47:b6:91:c1:b4:c1:57:3f:ae:b5:76:ba:1b:
64:35:80:b5:df:2b:6f:78:12:cf:4c:24:9e:22:ea:
e5:83:cb:0e:f8:6c:a1:78:47:f5:99:62:ab:97:07:
0e:68:c5:dc:c3:92:02:42:a1:db:ce:f5:d9:31:ef:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A7:D4:47:9A:85:BE:66:9F:BA:6D:4B:6C:08:B5:5E:4D:9B:CE:E3
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a2:8b:e0:44:85:c4:ef:3e:84:b2:3a:d5:7b:d6:de:8a:25:
5f:ae:2a:23:bb:62:4d:8a:55:62:b5:18:eb:e4:3e:80:fc:f6:
dc:21:eb:a7:33:55:bc:61:0e:53:9a:97:0c:6d:79:0d:4b:bb:
9e:58:ad:a2:36:20:bd:b2:f9:9a:4b:8f:e6:e7:b2:59:bb:36:
eb:54:f8:2c:70:32:a4:31:be:2d:99:65:30:16:19:b8:8b:8b:
26:cb:ad:f4:80:e1:ef:76:11:fd:e8:a1:04:46:f7:29:3b:ae:
04:a0:63:0c:e0:c8:62:8a:ba:f2:80:63:02:54:30:52:1d:26:
fa:1a:1f:9f:11:7a:78:d2:25:cc:a8:ff:55:b0:26:db:07:c9:
2d:60:e3:b8:62:2d:c8:6b:16:48:e5:a8:ad:c2:1a:e3:1d:5a:
72:29:cf:93:3a:b7:a8:45:0a:fc:6c:5b:19:f4:c2:10:3a:f2:
cb:6b:ab:2a:d5:5c:c0:57:ed:5f:54:2b:1b:50:ab:ec:8e:77:
6b:8c:3b:d4:06:a4:3e:d3:36:80:7b:5d:4d:59:bc:89:5e:63:
93:de:80:60:6a:52:7f:16:72:16:ed:a6:0c:b5:69:ec:0b:06:
f5:6f:50:75:78:a8:24:36:cc:76:44:88:16:85:50:1e:73:73:
95:18:a2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:54 2025 by rpki-client