Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: 4DKQH/5FlUBLjAO7eGw4fmX5WSEIT33RkFp8ohKv6JU=
Subject key identifier: E5:79:34:7E:89:0A:9A:BE:45:35:A6:92:D0:F5:1C:66:BF:00:C0:B9
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 01967A5761334F0DE2060E1651D296B83455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 03:01:08 +0000
Manifest this update: Mon 28 Apr 2025 03:01:08 +0000
Manifest next update: Tue 29 Apr 2025 03:01:08 +0000
Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
2: HtYH7IfWThQC0FjsfIOLJnPcCb0.roa (hash: JQOoHMUiGQozF5WEbUjnDZo1IaMc3weZxMTmvWza6pA=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: 4DbdRQZR+X/9W6EpBrs2mw03A7kKMGrwgoqLbwmf/rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:61:33:4f:0d:e2:06:0e:16:51:d2:96:b8:34:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Apr 28 03:01:08 2025 GMT
Not After : Apr 29 03:01:08 2025 GMT
Subject: CN=e579347e890a9abe4535a692d0f51c66bf00c0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:17:b2:6f:26:c6:ba:81:f2:d5:21:a0:44:
ef:0d:24:58:06:76:1e:52:f0:94:a2:ad:aa:22:05:
a9:cf:e9:57:31:83:9e:a3:c1:69:36:36:5f:8d:85:
65:e5:49:d5:bc:78:14:c0:36:1e:06:a5:6d:41:b1:
f5:55:b6:a6:d0:85:ff:c0:fc:1d:1a:f2:59:76:76:
38:85:97:99:d7:d9:fe:7f:fb:d6:f6:9b:b9:07:90:
ff:ff:bb:a4:b9:73:2a:5d:dc:de:d2:d2:42:21:71:
1a:a4:1c:8e:a5:c8:75:50:89:ba:0c:05:34:8d:f7:
ab:84:60:9f:8e:b8:d1:f8:60:12:35:bf:fc:8f:38:
5c:af:fc:32:63:b0:48:f3:77:3b:93:e6:fe:2d:b6:
fa:ec:e9:1d:d8:20:46:76:bc:e6:7b:db:c9:21:b3:
fc:49:44:2b:89:e0:1e:57:b6:fd:28:01:eb:b7:db:
b3:4b:60:be:68:cf:87:70:fb:d3:bc:13:da:11:22:
8b:f3:d6:2d:88:c2:8e:65:bf:d3:cd:23:af:fa:d1:
b4:5b:a7:f5:d2:5b:c4:b2:9c:c2:04:46:3d:dc:1c:
85:08:4a:87:59:03:ac:50:ee:61:1e:f3:ef:9d:8b:
96:67:d3:3d:dd:b2:48:89:8e:35:5c:9c:03:b1:bd:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:79:34:7E:89:0A:9A:BE:45:35:A6:92:D0:F5:1C:66:BF:00:C0:B9
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3f:ab:09:74:bd:36:65:73:67:c5:25:bb:0a:9d:19:d9:82:
04:7f:bd:80:85:0c:63:d5:9f:db:78:9d:f5:0a:dc:52:83:ae:
0d:1b:ff:13:23:1e:ea:86:02:c9:87:b7:4d:67:51:0c:20:d1:
9c:83:71:75:01:cb:73:30:31:e7:28:71:a7:4c:09:67:32:a7:
09:f5:0e:6b:df:ee:b7:d3:31:ce:4e:dd:f0:d1:9a:5f:f4:6e:
c7:d4:8c:ee:f4:59:ed:96:26:ff:c6:0d:a0:fc:62:52:6b:7e:
8f:96:72:23:62:89:18:a7:e5:52:05:08:20:cb:e9:68:b8:f3:
52:0a:86:31:f2:13:03:cb:71:8f:cb:26:a3:1c:6b:63:ae:51:
28:ab:36:38:7a:81:ec:bf:2c:c6:98:ef:bb:0e:ee:07:c5:b5:
76:ae:ff:97:cf:0f:f8:83:d3:8d:6f:3a:aa:d2:d4:9b:87:c3:
98:05:de:b8:11:cb:64:65:cd:05:22:e6:c1:ba:9e:cf:95:bc:
c9:ca:4b:0a:83:5f:58:b5:2c:59:62:9e:2f:7e:2f:f9:13:ab:
e5:55:e5:87:fb:5e:e0:36:e8:ec:08:aa:79:4b:94:4a:cc:8c:
95:92:23:3d:ec:0e:78:cb:ff:41:04:04:78:93:bc:6d:b2:12:
33:fd:b6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:37:35 2025 by rpki-client