Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: 1nhGOXI9zqP8ihdZCfCzm3gI1Wv0NDR69Q5mIPV50X0=
Subject key identifier: 36:74:98:77:B5:EA:1A:14:E4:D1:92:3F:DA:F5:98:DC:75:05:99:86
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 019689CA5269DDF6079D4E2E52E001578031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 0346
Signing time: Thu 01 May 2025 03:01:00 +0000
Manifest this update: Thu 01 May 2025 03:01:00 +0000
Manifest next update: Fri 02 May 2025 03:01:00 +0000
Files and hashes: 1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: wMD8dQ0xgDiQIcIyBURjYgjB174glxwJziWjmMzPGOU=)
2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:52:69:dd:f6:07:9d:4e:2e:52:e0:01:57:80:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: May 1 03:01:00 2025 GMT
Not After : May 2 03:01:00 2025 GMT
Subject: CN=36749877b5ea1a14e4d1923fdaf598dc75059986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:1a:5f:26:b7:e2:32:4d:7d:29:f4:50:1b:
d7:a7:23:21:98:b9:7a:08:39:1a:37:6b:98:de:1b:
f3:1f:28:aa:dc:45:7e:32:47:fe:b7:bb:50:2e:62:
fe:61:07:b1:15:3d:36:6d:28:80:7e:67:ce:56:cf:
44:c2:32:ed:fc:6f:8c:48:43:a4:23:6a:f6:45:32:
8c:99:fc:e9:e4:73:e1:2c:58:04:fb:f9:09:12:64:
3f:df:d8:cb:29:6f:02:64:38:8e:3f:10:53:68:4e:
4d:c6:77:9b:d8:54:4d:10:12:07:73:32:ca:1b:84:
cd:bb:6b:d7:2c:4f:e1:e2:5a:14:03:4b:22:cd:4c:
23:b4:86:5e:a7:07:5b:e9:94:5c:1a:2b:9f:0d:ec:
00:04:23:2d:a9:8e:e2:6a:55:14:7a:b9:42:8b:52:
b6:53:c1:39:b5:4e:ea:1f:5e:dd:ed:d2:e6:00:96:
c7:fd:6e:97:8a:79:5c:ff:65:90:3e:8b:18:8a:88:
96:eb:9e:e0:2c:7b:1b:ad:88:9f:21:05:ed:87:2a:
2d:12:84:fb:61:80:f3:59:f5:28:54:09:cc:ae:ae:
ee:6d:07:5e:4f:4e:fb:f3:24:b9:84:5b:12:d3:b7:
34:06:57:5f:44:ac:49:c3:69:ae:10:f1:73:f6:29:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:74:98:77:B5:EA:1A:14:E4:D1:92:3F:DA:F5:98:DC:75:05:99:86
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:af:b3:67:62:ce:8b:99:ed:fc:7c:1b:65:19:16:7d:14:30:
ed:87:3e:b4:f1:4a:1a:9e:8c:b2:e9:66:e6:ef:ff:51:ea:77:
4c:14:7b:b6:55:bf:b6:53:11:91:26:7e:32:d8:50:68:d0:fb:
6d:14:41:b3:4e:cd:a0:b0:4b:a5:ec:24:37:cc:c0:0e:fd:c9:
92:f1:08:2a:81:48:71:7a:1c:e6:4e:39:4f:44:33:0e:86:75:
64:49:da:ad:0f:fd:46:c4:f3:c4:2f:8c:90:c9:c3:f5:ed:82:
cf:74:9e:8c:27:06:95:fc:b6:07:90:0a:03:51:ee:82:a0:03:
35:28:ac:85:56:8b:d7:da:5d:54:4f:85:99:0a:64:25:96:cb:
47:39:73:fd:5b:ea:40:55:3f:e0:cd:6c:9a:09:8e:0a:00:a8:
f8:97:4d:b0:ce:b7:e3:d9:37:ac:13:7f:b7:41:d7:7f:5a:95:
30:10:26:bb:2b:a6:03:36:3b:23:e9:da:a9:a5:ee:2c:9b:01:
83:fe:3f:f0:44:6e:b9:d5:dc:48:31:89:af:f6:af:b0:f1:1b:
80:f7:a2:ac:5c:b6:94:3f:44:7d:f9:5b:98:25:b6:2e:1c:c9:
0c:7f:dd:7f:89:38:fb:a6:2f:e7:ac:6e:f3:28:d1:4a:46:60:
e9:8f:2a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:14:12 2025 by rpki-client