Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
File: Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json)
Hash identifier: G7mJN1L+6LAsakasXw6PeYg2krCGv9Ny+6K27d0KmOo=
Subject key identifier: 0E:08:03:B5:76:3C:F3:16:15:22:A1:9A:78:95:8C:3C:62:E6:71:D2
Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
Certificate issuer: /CN=3e782de1b5d5292edd136d5278258c67b05be22a
Certificate serial: 0196748BD9575F16F05647D871D5F4503BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
Manifest number: 0252
Signing time: Sun 27 Apr 2025 00:00:44 +0000
Manifest this update: Sun 27 Apr 2025 00:00:44 +0000
Manifest next update: Mon 28 Apr 2025 00:00:44 +0000
Files and hashes: 1: HsLH977Wr8CRqPeFRIsKeWuqNBQ.roa (hash: DfN2Ce+eFgUYzjRB1SnZEzwBexeV9U5bLQB9J92xhK4=)
2: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: i+021wqy2vhHf7CB9Kwskf+XhL6+rrqJpH+HmfbD5xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:d9:57:5f:16:f0:56:47:d8:71:d5:f4:50:3b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a
Validity
Not Before: Apr 27 00:00:44 2025 GMT
Not After : Apr 28 00:00:44 2025 GMT
Subject: CN=0e0803b5763cf3161522a19a78958c3c62e671d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:ee:d8:5c:22:f0:66:d6:96:f8:ec:1e:02:
58:dd:f5:fb:75:4d:9c:11:be:45:e6:bf:22:2e:6b:
a0:47:c7:27:a2:09:44:6f:71:25:fb:f8:24:fe:02:
58:48:69:2a:2b:88:78:9b:c2:1f:f7:a0:63:11:3e:
dc:28:4d:52:88:75:09:27:2f:43:77:f4:56:45:da:
6d:60:2c:00:6f:1d:e0:f2:23:27:32:27:9e:57:b3:
14:b8:6d:86:fb:74:46:09:3a:20:a4:0d:e7:47:0c:
5f:23:27:8c:d5:81:d4:79:85:80:b2:19:a9:bb:07:
c6:8b:8b:92:30:9a:9c:12:0c:71:1f:35:4e:61:a0:
8d:68:14:a1:80:71:09:be:12:fb:53:fe:b6:61:1f:
08:eb:a7:9c:43:35:d1:96:22:0c:18:04:6c:ab:9d:
7e:1d:d6:6f:4c:a1:a5:58:11:b9:38:c3:2b:b1:06:
49:75:42:25:c9:04:47:49:e9:05:c6:40:4e:f2:a9:
21:39:20:fd:ba:86:eb:75:75:4e:4f:84:ba:70:46:
80:e1:ad:5b:a3:d4:7b:36:ae:ea:a3:e8:81:19:f9:
55:c5:b3:34:05:eb:a7:9a:d9:a1:69:05:7a:74:da:
2a:8a:9b:75:fd:d1:ad:17:83:e1:11:31:6c:06:12:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:08:03:B5:76:3C:F3:16:15:22:A1:9A:78:95:8C:3C:62:E6:71:D2
X509v3 Authority Key Identifier:
keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6d:48:35:87:47:94:7d:c7:4a:13:d3:c2:47:f1:10:f2:db:
07:10:84:7f:2d:3a:c5:2a:87:26:ca:b2:68:7c:64:9e:32:af:
68:f9:ad:47:1f:05:34:39:30:4c:90:29:8d:64:73:5a:20:e8:
c6:af:77:6f:d8:08:2c:81:5e:6d:bf:0a:5e:db:d5:fd:87:d3:
d1:08:c1:fa:76:b9:b9:45:1a:a7:89:a8:93:ff:02:0b:8b:22:
61:a7:ff:5c:5d:7d:5d:d4:e6:3e:c3:2b:83:de:c5:6c:74:90:
61:46:c7:3c:18:ff:d7:cd:dd:bf:eb:6e:89:26:51:56:15:60:
bb:a9:d8:9c:7b:be:4b:bf:da:4d:5d:3f:ed:00:8e:f2:19:8a:
ec:0d:a3:da:00:6e:3f:f8:14:7b:53:b0:c8:3d:f6:ed:e8:f9:
1a:20:69:a6:42:f4:cf:eb:e6:86:d3:51:b4:88:ec:cc:d2:48:
85:c3:37:48:17:79:df:0a:ab:71:34:4b:b0:52:9d:d5:69:04:
f6:14:8a:13:d1:5c:8a:ca:54:1d:39:42:cd:df:ff:97:f9:2b:
ed:8f:e8:06:c7:4e:77:5f:f7:81:cc:bc:b9:7d:a1:a5:8e:d0:
a2:0e:66:33:ee:33:0c:c9:6c:97:69:c1:a5:8a:ac:6a:cd:ef:
e8:6b:25:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:26 2025 by rpki-client