Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: JAmGvBjTh8SkwrL+ArneX6YLV+u/7SR1XEB8cEA5/qY=
Subject key identifier: D8:75:07:DE:E0:2C:6F:27:DD:20:41:78:25:AC:89:C7:BD:2F:82:8A
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 01967643579C4B88470FBAB1B798A99BA9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 0F4C
Signing time: Sun 27 Apr 2025 08:00:46 +0000
Manifest this update: Sun 27 Apr 2025 08:00:46 +0000
Manifest next update: Mon 28 Apr 2025 08:00:46 +0000
Files and hashes: 1: 1Xqi7Z1GlyKJmmpJLPuLaaDGlwA.roa (hash: R1V6MsHqSpwWAHrp5zkXdM7XbLDDs5vw6HyT3BRV75o=)
2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: mUIIRf8V+wGa/uSRDCdHcdoxrbBQn9zyp4BRngmEqrA=)
3: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (hash: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:57:9c:4b:88:47:0f:ba:b1:b7:98:a9:9b:a9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Apr 27 08:00:46 2025 GMT
Not After : Apr 28 08:00:46 2025 GMT
Subject: CN=d87507dee02c6f27dd20417825ac89c7bd2f828a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:df:1d:f3:45:20:ac:23:a0:e2:b6:3e:75:
34:96:4c:9b:79:93:cb:a4:1c:21:ac:e2:9c:fb:16:
c9:c7:07:0d:9f:fd:61:22:5f:70:dc:0a:d0:76:ee:
aa:2c:5e:cb:e3:20:ac:ef:a4:50:6f:2e:a9:81:74:
c6:ca:9e:9b:91:c3:d3:48:aa:d9:7b:80:cb:b8:2b:
9c:67:3c:6f:4d:24:d9:0b:98:16:f4:c4:63:48:86:
2d:f9:d6:4e:ce:ad:28:d2:a1:54:8d:6b:dd:23:03:
ab:f0:14:94:60:3a:bb:98:63:14:85:58:46:e4:74:
a7:3e:d9:d0:3d:cb:90:79:7e:ea:d3:c7:84:a4:9c:
03:3b:ea:5f:74:80:ac:4e:5d:42:04:80:98:d4:c3:
9e:96:34:33:65:d0:85:c3:90:7a:4b:69:c4:4c:cb:
ea:85:05:5d:89:f0:9f:34:41:a1:03:72:de:31:11:
28:8c:7e:75:bb:e7:d5:83:7a:18:8f:10:a0:99:07:
04:55:c0:77:ca:c3:e0:3b:c5:5c:4c:9c:4d:35:ae:
7b:38:db:12:7d:9f:54:9d:1b:a4:40:db:f4:bf:eb:
63:4d:e4:bd:94:f2:85:d1:a8:4e:16:09:9c:55:78:
18:d1:41:fe:55:0d:47:16:18:c5:7b:b0:a6:72:e5:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:75:07:DE:E0:2C:6F:27:DD:20:41:78:25:AC:89:C7:BD:2F:82:8A
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0b:3e:23:45:cd:5c:21:e8:a5:b0:8d:ed:71:d1:d8:7f:4e:
b7:3c:9b:1f:57:b2:49:29:27:63:d5:3a:0b:84:81:71:58:11:
13:3b:f0:ea:7c:5b:c3:4d:eb:f6:dd:ee:fc:0a:d6:de:37:cd:
96:83:85:b2:ba:d5:03:6c:a4:e3:27:3d:ac:cd:a1:38:64:85:
cf:a2:54:13:b0:7d:01:a0:58:a4:95:82:a0:55:27:0c:2d:67:
4e:17:df:d9:6d:24:24:fb:ab:8c:44:de:9f:6a:a7:de:39:49:
f3:6c:31:8b:41:59:97:2f:8c:69:79:4a:81:06:a9:f7:e3:78:
b2:42:45:ed:5d:c8:41:f5:93:b5:a8:29:ea:fc:4a:19:8a:46:
1a:b6:52:9d:f5:13:56:59:eb:35:05:c4:e1:73:f8:16:3c:06:
40:f8:bb:12:3e:8d:6c:f3:be:3f:af:a8:1a:25:72:23:71:23:
dc:b0:9c:2a:55:6d:d7:84:75:09:ce:3e:52:55:db:ce:d6:b4:
f1:5d:03:08:c3:fa:a8:f8:28:36:69:a8:6c:5d:3c:6d:c5:8d:
25:a9:60:ed:18:d3:d9:a8:5a:20:6d:1d:e7:bd:a8:a2:8e:b5:
88:8c:48:e4:d0:1e:2b:c8:c9:eb:67:da:f2:ca:4b:aa:59:94:
72:15:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:12:36 2025 by rpki-client