Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
File: Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json)
Hash identifier: MJBZp9/83OZtiMDuB/QuDmloMOfGSsW5hW1Za2j49rI=
Subject key identifier: EC:A3:D8:3A:22:8C:77:F7:83:EF:D3:6E:68:A3:13:80:31:3D:82:57
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial: 01968359B0D88F43F2299ABDC924771D1872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
Manifest number: 1519
Signing time: Tue 29 Apr 2025 21:00:15 +0000
Manifest this update: Tue 29 Apr 2025 21:00:15 +0000
Manifest next update: Wed 30 Apr 2025 21:00:15 +0000
Files and hashes: 1: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: deXp0nnENXhGgoUAY0ZXVOOIHF+ZGqhWoalSwTSEvKU=)
2: yUqCwPk0Ei-cViitt4Gqnb4KxdE.roa (hash: rJJZNa4cHpwDRyt4aQOGhddvG2b+c/8oiLA2xlie2pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:b0:d8:8f:43:f2:29:9a:bd:c9:24:77:1d:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Validity
Not Before: Apr 29 21:00:15 2025 GMT
Not After : Apr 30 21:00:15 2025 GMT
Subject: CN=eca3d83a228c77f783efd36e68a31380313d8257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:8f:ac:c2:58:6f:e3:bf:e0:b6:a7:3f:7b:
83:87:26:29:c2:91:9b:8f:d4:e5:bf:31:51:59:32:
ab:2e:5b:ae:bf:21:d6:2a:29:98:0e:6c:48:35:53:
ed:c9:ff:02:a0:01:0d:a8:cc:4c:07:37:06:c7:38:
42:1f:f5:15:fa:e0:2e:fc:0f:8e:a4:40:0e:e5:a5:
f8:68:9c:33:9c:cd:fa:9b:c6:8d:d1:49:9a:a6:fc:
3f:18:9f:f8:7b:2f:93:bc:ae:aa:cf:bd:64:ed:3f:
7a:93:ff:25:dc:44:d3:3d:c8:b8:dc:eb:38:f5:97:
f5:db:78:1a:79:69:e7:8a:e0:bb:a0:60:22:61:50:
2d:37:d7:7c:cc:09:f8:23:85:9e:95:55:17:63:7b:
aa:66:2e:74:bc:d0:62:16:24:22:c4:d8:4c:eb:71:
ba:c4:ab:ac:b4:91:6f:db:7a:28:8a:aa:9d:96:62:
07:65:cc:01:56:9c:c9:75:1d:2c:0b:aa:80:42:4c:
4c:2f:85:e1:3e:23:f4:3b:9e:6d:ef:48:af:07:40:
8a:38:a0:05:83:1e:33:0e:94:ec:6e:4d:2b:ea:a3:
01:c3:8c:11:59:d6:a2:04:52:6d:d9:0d:de:52:c4:
cd:35:16:bb:88:df:a8:4e:b8:3b:91:87:22:ce:02:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A3:D8:3A:22:8C:77:F7:83:EF:D3:6E:68:A3:13:80:31:3D:82:57
X509v3 Authority Key Identifier:
keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ed:e8:f3:e7:0a:d0:71:b9:f1:ec:a1:ea:6b:62:c2:98:c9:
23:4c:df:f9:c5:02:f6:3b:c1:f5:02:4a:c9:22:16:01:15:8b:
51:51:8e:91:88:b7:2a:de:71:7e:41:1d:2d:92:fa:47:bf:8c:
15:f2:3d:3b:60:df:7a:9b:93:df:b2:d0:4d:b0:50:5b:02:f1:
cf:a6:82:06:b7:e9:58:30:bf:51:e4:dc:ed:02:33:a5:dd:7e:
a8:24:9b:2c:df:99:31:41:b2:39:d0:6f:c1:c5:50:bf:8f:de:
a5:ef:54:dc:0f:df:86:e5:96:bd:89:b3:d6:eb:80:b6:91:6d:
d6:db:b8:d8:97:5b:4a:c6:23:74:56:46:c0:75:b2:50:00:bf:
d5:c1:51:3c:9b:92:b8:4d:ef:8c:1d:57:bf:6d:5a:68:94:cd:
6d:40:8d:cf:c4:fe:72:e9:31:65:8f:1a:57:12:c7:9d:33:f6:
19:d3:42:00:30:4f:9b:26:92:9c:7f:78:e2:1f:fb:5c:c1:5d:
60:fa:0a:9c:ef:f7:d9:2e:b5:74:70:e7:b4:25:c8:74:fc:58:
0a:d7:ab:db:28:68:2f:43:9b:49:4e:8a:04:e3:67:80:e4:25:
db:4b:8b:0b:88:ae:30:56:5d:7b:de:1c:11:ce:79:e4:db:0f:
4e:3d:c1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:57:08 2025 by rpki-client