Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
File: PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft (raw, json)
Hash identifier: CxrGZiEWhNcBpvp31OuAMi8YcvCN7KhcVYy5CwY0G9c=
Subject key identifier: D4:0E:69:4A:A4:80:B6:17:FD:D7:56:8C:FC:CB:AF:6E:14:AF:46:18
Authority key identifier: 3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
Certificate issuer: /CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Certificate serial: 019674C2F106F4DA1BD51F10CE301A5AEE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
Manifest number: 03EE
Signing time: Sun 27 Apr 2025 01:00:54 +0000
Manifest this update: Sun 27 Apr 2025 01:00:54 +0000
Manifest next update: Mon 28 Apr 2025 01:00:54 +0000
Files and hashes: 1: PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl (hash: cD2SdjoU/KDE009IwufJoK5yiXN1ErWXDIxcWtkznb0=)
2: cNQzFblAKvFr8hGK7lwE2E-QroQ.roa (hash: 6L0JpdKsg5wIV7DiGvLclmuCfLf4+RgtvQ0jAlVXODk=)
3: sq8t5TnYeFbLwzKDRurrhu8TSwI.roa (hash: BEQOlbgnZNiMmu4zSM6xloAN2ehefN/KrPp5K3vJnWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:f1:06:f4:da:1b:d5:1f:10:ce:30:1a:5a:ee:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Validity
Not Before: Apr 27 01:00:54 2025 GMT
Not After : Apr 28 01:00:54 2025 GMT
Subject: CN=d40e694aa480b617fdd7568cfccbaf6e14af4618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:fb:19:2f:e3:c1:ac:9a:37:37:d3:0a:d6:
fe:88:6f:f8:19:34:a3:89:98:60:da:e1:db:21:9c:
56:b2:c0:0f:17:90:9d:eb:54:23:1e:ae:16:ab:f2:
85:3b:98:c6:40:8c:99:f7:9e:b3:64:03:10:61:bf:
a0:d7:fe:6b:19:ed:80:12:87:aa:aa:28:be:03:79:
7d:12:b0:a2:cc:e7:69:8d:cd:5c:e2:51:a6:95:98:
1a:34:cf:c8:78:20:fb:7c:ce:cb:f0:cd:06:95:cc:
05:5d:7c:a0:d6:28:5b:88:a2:90:39:c0:2d:02:a8:
15:4d:45:52:0a:b4:91:3c:d7:df:60:38:ec:8d:8a:
61:15:0d:f4:ca:43:a7:3c:e0:e5:c2:2f:1b:80:82:
6e:d6:cc:4a:69:de:00:07:f5:bd:25:c1:b2:55:82:
c7:8b:4a:9c:5d:cd:28:e7:93:f6:e0:5e:60:4d:e7:
4d:d4:a4:4e:e9:22:ea:a8:3a:9b:9b:fd:a6:0e:aa:
cf:b8:2a:ea:fa:d3:4b:35:cb:de:06:91:60:a3:a8:
67:74:96:7e:74:f3:d8:b0:0c:13:94:f0:81:b0:d1:
8e:5c:24:f4:21:42:e9:8f:11:07:f1:1a:3e:9b:34:
ce:a3:82:74:a7:ce:bc:0d:91:c1:b8:c7:8d:02:af:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0E:69:4A:A4:80:B6:17:FD:D7:56:8C:FC:CB:AF:6E:14:AF:46:18
X509v3 Authority Key Identifier:
keyid:3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:22:83:77:cb:3e:b7:b8:26:63:ec:18:bb:7f:d1:4a:cf:56:
b9:3c:49:77:53:fa:61:63:3d:28:04:c8:fe:f6:88:73:a7:fd:
84:96:d8:fb:ca:d0:25:37:85:91:93:ed:dc:97:50:1b:61:7e:
f9:6a:7e:16:54:07:a1:fa:07:3f:b9:b4:0e:94:0a:ba:69:88:
87:c8:3e:01:3f:d2:19:a5:5a:12:96:45:66:0d:88:47:c6:93:
a9:0e:94:0f:1c:11:ab:34:b8:e9:22:65:c0:c7:53:c4:1e:94:
b1:a4:f0:c8:b3:0e:c5:8c:c7:d9:b0:5e:7a:ac:06:7e:05:ae:
09:aa:e9:dc:7f:24:17:5f:bd:ea:df:9d:d4:66:e1:b5:f5:b6:
9f:65:a7:25:c4:5c:f7:63:01:e0:90:f2:3d:6d:b7:dc:cd:42:
9b:68:fc:8d:04:c2:d1:f3:d9:a0:31:b0:3a:2e:1c:8d:8b:63:
b7:68:14:b0:c5:57:09:8f:43:70:cb:75:6f:0b:24:3e:00:58:
12:c4:2b:62:0b:40:3b:1e:a9:ef:f8:f2:fd:6e:0c:02:c9:48:
e5:af:b0:a3:64:b7:59:4b:8c:20:3e:03:1a:99:81:9d:3e:b8:
45:8f:34:c4:5d:16:af:60:8e:8a:76:05:e4:1e:ae:6c:2a:fc:
5a:70:fb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:18 2025 by rpki-client