Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
File: PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft (raw, json)
Hash identifier: WRhq+BmPhDds/Z37f5okJldzxCqemCTLoxpouSyynNA=
Subject key identifier: D8:DA:AF:24:FF:B8:28:05:D8:E3:A1:7A:2B:F9:D1:D5:52:D0:55:BA
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 0196778D08FC682CF369AAF906DF222F7325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
Manifest number: 0B20
Signing time: Sun 27 Apr 2025 14:00:53 +0000
Manifest this update: Sun 27 Apr 2025 14:00:53 +0000
Manifest next update: Mon 28 Apr 2025 14:00:53 +0000
Files and hashes: 1: 2lwI54QF_XqrgUwaQ0Ao7KhahI4.roa (hash: WVAqqT9n+azhlwqdMweU/K18Zjr86DqXuRzwgp6K0fI=)
2: BwhHBq8_nG_K7m_W3G4RHhTida0.roa (hash: NMnRXfbQ1lBRTE5ileh9Mp+IR5izyXDHjaaBnvkh6pY=)
3: GsUGzpUos76sFGQbWGJ8Ekw1qmw.roa (hash: Wl7Np+zNebQbvvJohBcppO8aYll5lDtZMGb3wnBSvLQ=)
4: PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl (hash: 6Fe0aICVoqZSG2guQIA0i1+YLaC6awVU4Nvmij9VIkk=)
5: RiiNoyZSO1JzA7m0_LayA08gFzY.roa (hash: zcGWo+UpPwSMxlv6jUFwi8ud5sRDKsEHFlMBysCY+IA=)
6: sD1R-VoESGB_6LIl4dgntbQKRkE.roa (hash: p8K6PYzpldEXmvB0zwceGziQ94cCnLjIpOhxU2zOu8U=)
7: udMb86r6ANoqYHi4i00tk-1ZVWg.roa (hash: tDCaSwC+9rc0/FQN7jASClcehlHxysSaUkzqi6TD4ac=)
8: zIwzcZNr7m6b2pv5Zs9UDtTw7I4.roa (hash: Zh83tT/zmMp8uwLUnGIJ7cbrJXbFjisKdC+aZp9oBXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:08:fc:68:2c:f3:69:aa:f9:06:df:22:2f:73:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Apr 27 14:00:53 2025 GMT
Not After : Apr 28 14:00:53 2025 GMT
Subject: CN=d8daaf24ffb82805d8e3a17a2bf9d1d552d055ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:27:39:f8:5a:41:c4:e2:40:a4:90:40:a6:
ed:0f:02:68:41:82:d9:72:55:33:42:37:02:3b:fb:
d4:ab:00:eb:72:20:3c:7f:b9:eb:be:73:c7:e4:a7:
69:5a:e0:4f:39:53:cd:33:89:ff:86:dc:30:1b:66:
1e:9a:cf:b5:1d:3b:aa:be:58:cc:f8:8e:df:6a:58:
d0:35:6f:fc:32:fc:8a:a6:bd:8c:8c:d3:ff:21:77:
d5:eb:dc:df:af:06:64:7d:0c:8c:77:d2:0d:37:44:
0c:6c:39:d7:f6:4f:16:c0:fc:52:67:90:a5:d6:70:
5b:fe:ba:c0:c6:86:00:29:5f:0c:d4:db:91:bd:54:
ed:a4:37:5b:a7:e1:3b:11:d8:29:a0:76:97:f3:07:
13:39:92:c4:a2:09:9b:de:6f:30:62:e8:4b:c1:c0:
c6:42:9c:bf:c8:58:ff:58:59:e5:83:30:ae:91:51:
9e:17:a1:86:77:bb:6c:c8:57:2b:30:03:f9:41:38:
8a:32:e9:fa:04:f6:87:5e:9f:c4:ac:d0:45:1d:ab:
a8:09:82:e2:e3:15:28:6a:20:e7:d6:03:38:0a:0c:
ab:c6:63:69:83:1f:74:63:b9:1a:2c:5e:fa:6e:86:
63:88:4e:da:99:9b:45:b9:a6:6c:44:bc:c8:de:57:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DA:AF:24:FF:B8:28:05:D8:E3:A1:7A:2B:F9:D1:D5:52:D0:55:BA
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ff:23:5f:d5:7e:2a:b7:df:fe:1d:d0:ae:f1:59:99:1e:fa:
84:a6:03:b1:e1:d3:e3:3f:ac:ca:dd:b0:a8:a8:a7:d0:3d:89:
f1:b6:a3:83:ed:0b:37:e7:09:8c:7a:e4:a2:94:30:63:8b:7c:
48:67:6d:9f:51:86:19:b1:dd:49:81:ef:d6:74:5f:ce:66:d0:
7a:eb:9f:e9:fa:36:1a:c3:9f:b8:3a:99:31:7b:7c:b8:8d:46:
07:28:1b:76:19:82:d4:83:4f:16:56:cc:e2:ab:4c:20:6e:7b:
ce:1f:d2:e4:85:89:90:e6:c9:4b:b7:7c:fc:bd:5b:65:89:53:
df:d9:0a:ce:d6:d3:56:f7:29:46:1e:25:c5:5e:61:84:39:d9:
4c:c1:c3:b2:30:d1:15:3a:9d:33:a2:21:d8:dc:9d:57:5f:51:
73:2d:f7:4b:fa:88:c1:73:a2:8a:65:a9:24:3c:4c:d7:a8:c7:
55:26:e6:32:a5:a2:b8:96:40:55:66:b9:a8:e2:54:55:11:4c:
fc:3d:38:84:a2:62:56:c2:aa:a6:2f:3a:de:8a:ef:17:8a:84:
1a:72:04:d4:30:e0:5a:e1:18:c2:0e:69:73:3f:56:96:4b:d0:
a2:1d:d0:f4:73:ad:f2:f3:d0:bd:46:43:7e:75:54:41:ee:61:
9d:bd:18:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:12:57 2025 by rpki-client