Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: vvyhjmZZk8Kr67ZDxX0UvjIuuirHNy0/bKwjN9tCnvc=
Subject key identifier: CE:70:06:E4:EE:05:F4:70:DA:80:C6:8D:32:6D:CF:FB:A8:48:38:4B
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 0196711D21ADC759B0FA55EB6E67488154A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 151C
Signing time: Sat 26 Apr 2025 08:00:56 +0000
Manifest this update: Sat 26 Apr 2025 08:00:56 +0000
Manifest next update: Sun 27 Apr 2025 08:00:56 +0000
Files and hashes: 1: 3y2t9Y4w34qiFBdy_Ek4JJUO21Q.roa (hash: /TZVDNQyK0D1wC867uTU8KAEMW8e+Zi9YcbvlB1rMAE=)
2: EmNqWHZHvcbARh8MqUG6nxXKDnk.roa (hash: qFrAZp7TQYaT2zIiJ3kN/K/RUigkO6TizDHq1yApShI=)
3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: J0PcrUz1UlsIFie1hwVKMhJgESXozZMOTF0bW3rzXbA=)
4: k0j78iVx37wwO7bDjCAVoyijDeU.roa (hash: x4YCjAIVRyxgn0vQG0zlSLFCcDO0MbVYoCzpTeJPa0I=)
5: oLh3yoxxKDPJ0rI4fFfhHDN8zHc.roa (hash: gc86IVswZ2auip9vASDEdi6AXEh5d/2Jw9bjMy6Pwd8=)
6: oqQMhQCTnCvqpL4FDtvR2ocumgk.roa (hash: 9N1juEbb6Fp6BQG9Mi2KAk0Vy7P2TkUjOEW3w+qZU1s=)
7: u7jBF_TQnJz9mTpZhXYq5nggn8c.roa (hash: wreTMB6pW+vrdjrRc+OCyHOCrMzU/JZ3/7CTFhlab7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:1d:21:ad:c7:59:b0:fa:55:eb:6e:67:48:81:54:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Apr 26 08:00:56 2025 GMT
Not After : Apr 27 08:00:56 2025 GMT
Subject: CN=ce7006e4ee05f470da80c68d326dcffba848384b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:bf:fd:db:66:70:6c:cc:b4:22:f9:3a:34:
9d:0e:d8:20:b4:13:9e:3f:50:3f:21:92:f9:f1:32:
dd:10:eb:d4:d0:b9:61:68:57:fa:5e:94:a1:34:60:
94:bb:d0:7e:a5:40:e4:69:fe:f6:4a:98:17:cd:fd:
c4:ab:d6:89:4a:dd:36:9e:7f:a1:4a:a7:99:95:ce:
21:6a:42:0a:78:70:ab:1e:cb:a2:10:ba:00:0c:07:
7f:96:94:4b:86:11:12:ca:6e:31:cf:14:52:77:68:
d5:9c:59:ac:d0:1d:29:8a:74:f1:aa:f4:00:e5:6c:
97:cd:25:a7:96:a5:7a:42:56:f7:cd:96:9a:4b:41:
2e:79:20:35:52:a3:e4:24:f5:66:7c:54:f2:5e:b1:
0f:ef:9c:52:a3:ef:b8:57:de:33:a6:79:cf:ff:db:
88:bd:16:2b:33:1d:f0:e3:41:fa:7c:90:f3:91:92:
62:44:cf:b7:e2:a4:16:7a:57:42:22:3b:50:e8:12:
d9:59:50:76:8c:90:23:3f:14:55:3a:cb:22:00:8e:
65:41:32:61:d9:2e:55:22:7f:fd:e0:b6:77:3e:00:
5a:65:6b:05:e1:fc:ca:b5:79:c6:d7:d9:0d:cc:7b:
e1:5f:0e:3b:e8:61:ad:e8:8c:ea:e1:39:dd:8f:da:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:70:06:E4:EE:05:F4:70:DA:80:C6:8D:32:6D:CF:FB:A8:48:38:4B
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:92:91:c2:9c:62:c0:1b:df:ad:c6:c1:ab:73:be:a0:bb:3b:
9b:ef:cd:e1:d4:84:cb:b8:25:9a:5b:02:c2:9a:cc:01:8c:3a:
4c:f3:9d:5e:4f:12:5a:81:16:e3:96:bc:b8:91:5d:4e:d6:79:
2b:10:77:ee:51:06:0d:8c:6b:1b:8d:93:ab:98:d4:b4:0a:3f:
26:fc:90:a4:b0:85:89:9f:07:38:ee:0b:f6:74:22:17:63:ab:
38:d9:ec:bc:77:81:1f:c7:51:a8:e7:ff:67:f6:37:58:c9:97:
ce:79:ad:e3:c1:70:c9:bf:be:22:ff:e9:cd:24:93:fc:08:7a:
8e:1a:84:ca:80:96:31:12:e0:40:74:5b:a0:7d:b6:6f:22:e2:
17:4e:71:b0:23:66:1f:01:c9:ce:cf:65:bd:c7:7a:6a:03:ae:
c8:3b:77:ca:e6:10:97:85:76:55:37:32:3e:cb:60:67:94:8e:
ff:99:87:21:ed:ea:06:0b:76:45:cc:78:30:a3:94:2c:cb:f7:
23:98:0c:01:af:b2:8e:e5:4a:49:3c:56:6f:e6:a7:6d:94:82:
ae:6c:16:bd:dc:b3:68:fb:a7:6f:d2:aa:24:bb:cc:ef:0a:eb:
05:b0:64:01:a9:2c:3b:77:c4:4b:e3:67:84:e2:ef:da:f8:20:
2a:07:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:00:51 2025 by rpki-client