Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier: GjKmrQ8fGGWF04aBvHUKa811AZKi7Ad0/TpBul2LNqI=
Subject key identifier: F4:3E:6F:25:22:D7:DF:33:42:FD:84:F4:B0:7B:B3:ED:A7:DE:B7:94
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 019680C6CA2F61D66D8D14B44681496774C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 09:00:33 +0000
Manifest this update: Tue 29 Apr 2025 09:00:33 +0000
Manifest next update: Wed 30 Apr 2025 09:00:33 +0000
Files and hashes: 1: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (hash: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=)
2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: AieF1y29xTo1B3bIsph2fUNY1RcbgRmTCPymADswxNY=)
3: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (hash: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=)
4: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (hash: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:ca:2f:61:d6:6d:8d:14:b4:46:81:49:67:74:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Apr 29 09:00:33 2025 GMT
Not After : Apr 30 09:00:33 2025 GMT
Subject: CN=f43e6f2522d7df3342fd84f4b07bb3eda7deb794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:46:28:a0:57:cc:6b:c4:d9:35:76:3f:65:
b7:a3:66:0a:88:e6:ef:f8:ff:45:39:4b:bb:0e:7e:
39:74:00:0b:57:93:5e:70:2d:fe:48:04:7d:94:c7:
ab:40:d6:e6:15:e8:a1:e3:74:21:d2:b8:87:3f:02:
c8:39:8d:3a:4e:e9:e7:21:f3:1b:eb:8c:8f:7b:e1:
34:04:81:2a:5e:ab:c1:b4:13:ff:9a:71:16:c1:27:
96:a5:db:38:64:c3:a6:6e:85:52:f5:5f:f7:21:b0:
a0:f9:b8:7f:b3:07:36:55:6b:5e:74:44:8d:78:4e:
bf:ee:a6:dd:81:04:5f:41:17:99:de:3a:19:3a:77:
54:9f:91:60:58:e3:15:f9:c4:6b:cb:31:e5:36:71:
e0:36:57:19:91:30:58:ec:36:2f:2d:e0:b2:3f:9e:
6f:a5:3d:d4:4a:37:5b:5c:73:43:65:4a:a8:08:cb:
6b:e9:c2:e3:e2:bd:7b:65:7c:3b:42:8e:f2:79:96:
7b:07:c0:54:b3:d8:4d:3d:70:06:eb:c4:c4:0e:f2:
86:76:4e:af:06:d1:fc:5b:8d:cf:45:fc:74:a3:a3:
f6:d4:7e:1b:f8:61:1f:ef:69:d1:55:21:03:b0:11:
a3:51:63:db:2b:eb:b4:9e:30:4c:2b:30:e0:ae:aa:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3E:6F:25:22:D7:DF:33:42:FD:84:F4:B0:7B:B3:ED:A7:DE:B7:94
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:38:cd:f2:3b:e5:87:ff:e0:64:65:e9:d3:c1:e0:c4:5c:b6:
62:46:bf:3b:5c:8a:dc:07:c3:42:24:05:a6:24:fb:de:58:eb:
87:51:63:37:47:4b:67:bd:40:7e:f0:33:e6:ae:e0:2e:63:a7:
56:d0:32:97:52:a6:72:6c:7d:16:09:b1:0f:94:87:3e:74:c7:
ec:32:2d:67:cc:66:d4:dd:c0:2c:41:a2:f3:db:7a:8b:e4:e0:
e6:23:7e:d6:c4:0a:12:f1:0a:d1:f5:42:19:6a:62:61:85:78:
77:fe:b6:93:34:25:b2:fc:1e:4d:80:a0:46:e8:b9:be:31:f7:
35:a1:16:32:6d:b4:b3:bb:f7:54:3f:ed:34:74:f1:fe:dd:5f:
0e:36:f0:cb:72:87:eb:45:5c:ea:10:0c:65:7d:22:cd:1f:29:
1b:4b:12:30:c2:92:d7:1a:b0:e6:42:6b:6e:23:41:ec:9f:f0:
f5:7a:29:af:a1:99:10:24:52:5d:de:04:f6:7c:42:ef:28:09:
89:60:82:78:01:95:5f:e8:b0:d3:f6:3b:60:ff:d5:7d:7e:76:
ef:2f:b4:29:90:d4:5a:5d:dc:c4:03:b9:89:84:08:2d:9e:fd:
70:18:b8:62:fc:91:bc:e2:54:fa:ba:59:8b:a0:d8:eb:3e:66:
59:0a:3a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:26:13 2025 by rpki-client