Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: uFhnGEiIQ/3sReSumYmL0PygaJ43jtw70i8RZCMi3mg=
Subject key identifier: 7E:E4:05:98:8A:0A:15:DD:B8:0A:5A:DF:ED:55:C4:F9:6F:61:F9:37
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 01967A8DC223411B72C6311A9F4A7F25E01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 04:00:32 +0000
Manifest this update: Mon 28 Apr 2025 04:00:32 +0000
Manifest next update: Tue 29 Apr 2025 04:00:32 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: eTLLEaC6m5Ci03EEWVsMXWumJUMuorIrRAH80XteKvk=)
2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:c2:23:41:1b:72:c6:31:1a:9f:4a:7f:25:e0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Apr 28 04:00:32 2025 GMT
Not After : Apr 29 04:00:32 2025 GMT
Subject: CN=7ee405988a0a15ddb80a5adfed55c4f96f61f937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6e:71:f7:70:7b:75:4f:cb:95:f7:21:ce:55:
e1:e4:dc:99:ec:d2:8f:8d:47:ce:56:cc:ad:7b:20:
b4:00:71:ec:6e:64:89:dd:0b:c0:1a:0b:e8:16:ce:
41:a0:e1:8b:08:4e:dd:a9:39:b8:ff:e0:6d:88:b3:
5c:b2:11:d8:09:32:02:0e:c9:37:f6:fd:4c:17:65:
75:fa:bd:49:8c:48:33:0a:50:80:6c:4e:3c:16:24:
3d:c1:3b:ba:c3:57:66:db:7d:03:0c:46:61:3e:b7:
64:81:28:08:8d:fa:22:fd:0f:b6:43:2d:a7:d4:1a:
f7:af:ff:24:ba:79:95:f3:81:0c:64:e6:cc:e9:53:
10:92:7b:85:28:5d:1e:ab:83:d2:3f:b3:27:7a:cc:
9e:5f:28:d0:4c:d7:c5:6f:92:89:27:80:ff:bb:2c:
3d:63:5f:5d:fe:9f:84:38:c5:b0:37:ea:d9:7f:f1:
95:2e:3f:b9:28:2d:94:ef:60:9c:12:31:a0:4c:a9:
17:a5:4f:5b:aa:83:0f:ab:04:07:26:55:9c:57:d3:
b5:87:ca:dc:d5:44:b7:84:f1:72:1b:18:58:f3:37:
04:d9:0c:51:4c:e8:b6:e6:76:48:51:b2:15:ab:b0:
a4:63:cf:bc:97:8a:12:5c:fd:4c:3d:f6:c0:4a:ef:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:05:98:8A:0A:15:DD:B8:0A:5A:DF:ED:55:C4:F9:6F:61:F9:37
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:30:ce:aa:aa:7f:a3:61:78:37:3c:55:1b:ef:b6:45:dd:bf:
dd:94:bf:54:b5:89:79:e8:51:cf:30:2b:6f:8c:1e:5e:f4:98:
70:08:59:59:c7:9b:ea:96:88:dc:9a:f6:e3:99:25:0e:22:45:
cb:be:bc:27:aa:ed:47:80:4e:84:c4:0b:a4:ac:f8:f9:8f:47:
27:58:5d:5b:8c:e2:21:a2:27:43:5f:50:a6:a7:78:97:86:0d:
8f:ae:62:0f:80:ef:dc:c7:be:ec:fe:ba:57:b1:48:ea:97:2d:
d9:7b:0d:c0:37:b4:b0:b1:b7:8e:03:e0:c0:2f:c9:53:32:29:
88:96:a5:41:d5:71:2e:cf:32:04:db:9a:c2:0b:15:db:a8:a3:
2d:f7:8b:0d:a9:82:d0:5c:f1:e0:1a:84:e8:da:e1:0d:07:f0:
c8:92:cf:2a:96:59:1b:f2:7e:89:55:12:fe:ae:a1:f7:cf:ca:
c8:79:a5:78:60:ef:77:4f:18:38:4e:d0:8f:58:7f:c3:22:e6:
bf:d0:16:fd:d0:4c:e3:35:73:46:f9:38:b2:df:83:ca:eb:b6:
b9:0f:c3:d9:64:d5:82:db:24:bd:21:f8:13:e0:0a:c9:6d:5b:
06:9b:1b:93:2a:77:4d:56:96:cb:0f:03:73:3d:a3:a8:f9:7a:
45:90:95:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6jcIjQRtyxjEan0p/JeAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYTIxM2YwMmE2NzBiMDUzNzBjNTVlY2NjZTkwZmUxYWQ3
MGM0OWIwHhcNMjUwNDI4MDQwMDMyWhcNMjUwNDI5MDQwMDMyWjAzMTEwLwYDVQQD
Eyg3ZWU0MDU5ODhhMGExNWRkYjgwYTVhZGZlZDU1YzRmOTZmNjFmOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7m5x93B7dU/LlfchzlXh5NyZ7NKP
jUfOVsyteyC0AHHsbmSJ3QvAGgvoFs5BoOGLCE7dqTm4/+BtiLNcshHYCTICDsk3
9v1MF2V1+r1JjEgzClCAbE48FiQ9wTu6w1dm230DDEZhPrdkgSgIjfoi/Q+2Qy2n
1Br3r/8kunmV84EMZObM6VMQknuFKF0eq4PSP7MnesyeXyjQTNfFb5KJJ4D/uyw9
Y19d/p+EOMWwN+rZf/GVLj+5KC2U72CcEjGgTKkXpU9bqoMPqwQHJlWcV9O1h8rc
1US3hPFyGxhY8zcE2QxRTOi25nZIUbIVq7CkY8+8l4oSXP1MPfbASu9NEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7kBZiKChXduApa3+1VxPlvYfk3MB8GA1UdIwQY
MBaAFD2iE/AqZwsFNwxV7MzpD+GtcMSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lN2Y2YWEtNmVlNC00YjRjLTg2ODEt
N2RiOGViYTc5ZWYxLzEvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lN2Y2YWEtNmVlNC00YjRjLTg2ODEtN2RiOGViYTc5ZWYx
LzEvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjDOqqp/
o2F4NzxVG++2Rd2/3ZS/VLWJeehRzzArb4weXvSYcAhZWceb6paI3Jr245klDiJF
y768J6rtR4BOhMQLpKz4+Y9HJ1hdW4ziIaInQ19Qpqd4l4YNj65iD4Dv3Me+7P66
V7FI6pct2XsNwDe0sLG3jgPgwC/JUzIpiJalQdVxLs8yBNuawgsV26ijLfeLDamC
0Fzx4BqE6NrhDQfwyJLPKpZZG/J+iVUS/q6h98/KyHmleGDvd08YOE7Qj1h/wyLm
v9AW/dBM4zVzRvk4st+Dyuu2uQ/D2WTVgtskvSH4E+AKyW1bBpsbkyp3TVaWyw8D
cz2jqPl6RZCVjQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:06 2025 by rpki-client