Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File: PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier: VkrlKU+2Oy3vZj/joYMZt7dXEkKgj3fm3y3C9zsmsho=
Subject key identifier: 66:82:69:B2:E0:1B:36:AD:81:80:35:19:E6:3F:0D:B5:07:8D:1B:3D
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 019674C2DD3BBE3F006972935F9C5D92736B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number: 0726
Signing time: Sun 27 Apr 2025 01:00:49 +0000
Manifest this update: Sun 27 Apr 2025 01:00:49 +0000
Manifest next update: Mon 28 Apr 2025 01:00:49 +0000
Files and hashes: 1: LN9Y4VYuBPHcqnOfi1whRTolirA.roa (hash: oKsBnnzz1/szS+noOPKG/sq6k5F0SOG+hrVgu4395L0=)
2: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: uWXSdVYJPDJYxdKboIwpqK3mwzGadFy4uVOmHUtbsP8=)
3: aOjeQ_LFlj3ColO7fwm2y03noI8.roa (hash: ZPkI6QIM1mrIPNFFrmXcy/CvfmDUl8kYYI0d126tg6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:dd:3b:be:3f:00:69:72:93:5f:9c:5d:92:73:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Apr 27 01:00:49 2025 GMT
Not After : Apr 28 01:00:49 2025 GMT
Subject: CN=668269b2e01b36ad81803519e63f0db5078d1b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:ec:69:38:07:c6:38:09:81:77:a1:cc:c9:
ba:62:1c:40:7a:68:f1:28:43:15:52:49:e4:6b:41:
df:e7:8a:dc:54:10:f5:61:ae:24:40:74:fa:57:36:
75:5a:72:3f:ed:46:f1:c0:57:40:63:a1:a9:43:e0:
2a:c5:bc:68:ac:54:89:f9:55:eb:26:45:ef:de:ce:
24:5a:e4:fd:e4:dc:dc:eb:f2:a1:bf:ae:17:d0:74:
7f:71:5f:b9:b4:4c:2a:11:45:11:8f:95:f4:d1:43:
17:61:39:1a:81:d5:bf:b0:1c:de:82:d7:57:56:d4:
2f:14:40:45:e0:04:ae:83:dc:82:9e:47:68:58:da:
8f:2b:f0:42:16:6d:e5:83:d9:ae:d0:23:91:0d:4c:
56:af:b2:24:23:4d:8e:6f:63:59:18:80:1b:bd:7d:
bf:05:ab:49:b7:cc:33:f9:b2:98:f4:c9:f5:e7:50:
20:60:c8:88:dd:f9:4b:71:0d:93:9b:03:e4:87:40:
f3:3a:b9:92:c2:84:ce:d1:32:72:42:94:4f:46:a6:
f0:9f:e9:9d:7c:5c:af:89:6a:89:b4:fc:7e:cb:89:
c0:e6:c0:db:07:9e:f7:d2:5d:6c:91:1c:b9:b6:85:
9c:07:37:53:e8:8f:48:76:a5:9d:59:3e:3a:0a:92:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:82:69:B2:E0:1B:36:AD:81:80:35:19:E6:3F:0D:B5:07:8D:1B:3D
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:14:0d:24:70:13:d4:4a:13:11:ec:bf:f1:63:c1:f9:ea:77:
eb:2b:65:09:1e:3c:90:23:69:b3:b9:7b:dd:f6:69:96:53:95:
7b:5b:82:28:7e:23:c0:85:de:ce:12:b9:8d:bb:8b:74:c1:d0:
26:1c:e3:e6:e8:d5:72:7b:fa:ca:5e:59:f9:e0:f6:1a:0d:f8:
b8:f7:74:c7:37:80:78:d4:a9:8f:17:62:cc:ad:29:e0:c1:c4:
eb:80:02:fd:1e:15:45:b7:c2:b3:12:95:41:79:7d:22:7e:1e:
e0:67:e2:88:75:f9:7d:e4:53:96:84:a9:4e:38:a0:32:43:d1:
83:ff:27:e5:27:cc:1b:d2:60:cc:b6:1a:61:f0:be:d3:3e:d2:
7a:9e:c0:32:1b:bc:9f:61:3c:fa:58:d1:c7:34:1b:ac:f7:a9:
e3:ad:bc:99:da:f7:5b:bd:69:7e:09:26:d5:cb:d0:0a:8a:02:
18:36:e5:87:cb:3a:35:8f:51:2c:12:55:fe:18:33:40:1b:a7:
65:af:df:d2:d2:62:31:2a:86:dd:98:97:e6:8f:85:7f:42:60:
88:94:15:5f:65:4a:58:56:5c:18:ab:11:fc:ce:4c:af:71:15:
f2:19:a2:99:f1:6f:21:bd:8b:a6:6a:ad:09:e0:9c:df:10:e1:
7c:ec:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:37 2025 by rpki-client