Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
File: PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft (raw, json)
Hash identifier: nYBBS8zIvkvXvEcLt+3mOEpi7Ryhj9Dd8Ib+1m7qa6M=
Subject key identifier: A1:9A:17:F3:67:3A:A6:60:00:C6:55:56:77:21:10:67:06:B6:76:F7
Authority key identifier: 3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
Certificate issuer: /CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Certificate serial: 01967FEB332D91D4E44209BBFE58E4D5B5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
Manifest number: 06A7
Signing time: Tue 29 Apr 2025 05:00:42 +0000
Manifest this update: Tue 29 Apr 2025 05:00:42 +0000
Manifest next update: Wed 30 Apr 2025 05:00:42 +0000
Files and hashes: 1: FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa (hash: L2M1ZIYqNE7da9VzHmMG0LiaV1K9e8NQgXmk4Xn6knE=)
2: PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl (hash: uiW+PoAG7NsQ47VzVzZqPgcKmnTh9b97TdJ1psU8/YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:33:2d:91:d4:e4:42:09:bb:fe:58:e4:d5:b5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Validity
Not Before: Apr 29 05:00:42 2025 GMT
Not After : Apr 30 05:00:42 2025 GMT
Subject: CN=a19a17f3673aa66000c655567721106706b676f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:07:23:91:19:6d:05:60:89:c2:48:a7:91:
f5:09:36:6c:d9:c7:9c:36:85:cb:91:8d:35:94:68:
1f:02:c4:ed:12:5e:81:f9:2d:ac:fc:65:c4:6e:82:
da:66:c1:2d:2d:bd:b6:b1:5b:6c:44:c8:c0:b2:88:
46:e6:bd:47:98:6e:bf:71:5e:55:05:2d:a9:ea:bf:
15:ed:9d:20:9e:f1:5f:6b:bf:fa:c5:27:a6:f8:fb:
c9:f4:7f:b8:19:2c:5f:11:b0:f3:34:99:4a:e3:2c:
51:13:8e:a6:cc:38:3e:50:2c:2c:33:71:74:4f:77:
5e:cb:c3:b9:11:6a:eb:72:38:83:03:18:e5:be:da:
36:0a:e1:19:41:1f:c9:91:57:cb:d6:81:9f:34:fb:
fa:a4:4c:af:8f:d4:27:b8:73:7f:f1:88:8b:07:e7:
27:09:9a:a5:ea:bd:27:fa:a0:ef:53:19:eb:00:fc:
e9:06:46:5a:7e:a4:9b:39:17:8a:ce:a7:6f:66:99:
0e:cc:15:3c:d2:04:b4:a3:be:67:5d:13:d0:ea:bf:
1e:a5:ba:0e:64:dd:65:33:f7:1b:bb:eb:28:94:da:
c6:de:e1:0d:82:b5:08:8f:9c:ab:be:4b:eb:18:fa:
71:db:da:fd:d9:c5:a0:af:a0:89:b9:63:a6:4e:ce:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9A:17:F3:67:3A:A6:60:00:C6:55:56:77:21:10:67:06:B6:76:F7
X509v3 Authority Key Identifier:
keyid:3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c5:af:a9:22:91:0b:26:14:02:71:e6:a6:bf:35:7e:4b:ff:
b2:10:51:37:67:d6:bf:ff:1c:ac:6b:ce:f1:b2:bd:a8:6e:b3:
f4:40:8a:dd:6d:52:c2:b0:fa:b5:6c:68:d9:1e:57:8f:66:2d:
89:1e:b6:7c:8f:06:54:ee:ec:57:94:8c:d8:ec:c0:5b:b7:6e:
2d:c1:25:62:bc:5f:c1:fd:7d:5f:63:e0:6c:dc:53:7d:23:cb:
e9:29:e3:2f:71:d7:d3:69:8d:1d:54:e0:1b:3d:08:b2:b5:7a:
ae:4c:db:ec:7f:29:a3:1c:cd:80:ae:35:3c:c9:3b:28:c6:88:
33:b5:a8:29:be:bd:dc:39:da:12:70:88:6e:37:3e:72:8b:a1:
b6:48:62:d2:77:49:56:44:1a:61:a8:5f:98:81:e8:22:0b:ab:
14:1f:8b:df:30:d6:3a:a0:9a:10:20:7d:78:19:70:a0:55:83:
8c:01:ad:fb:95:e0:89:ef:cd:f3:1e:b0:f0:ea:f4:1f:2a:f6:
9a:aa:0e:34:d9:e7:b3:b6:11:b7:c0:8d:38:4e:f9:eb:e8:dc:
dd:6e:67:60:4e:73:16:c4:08:ca:aa:1c:48:a1:a8:d0:c8:25:
23:a4:a3:4b:6d:4f:29:46:32:89:7b:8f:76:f2:e5:36:b4:f1:
20:a1:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:29:55 2025 by rpki-client