Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: /93Q3XUOIao1v2nG9D/IOvlwyqAt0GaavJegNuM4V0w=
Subject key identifier: E9:9E:5D:B6:97:E0:58:A2:E1:D8:21:9B:96:9D:D4:BC:0E:18:88:5D
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 01967EA1CD65D411A1FD2A34DB8005748CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 23:00:55 +0000
Manifest this update: Mon 28 Apr 2025 23:00:55 +0000
Manifest next update: Tue 29 Apr 2025 23:00:55 +0000
Files and hashes: 1: Is-TnbCqT0sZMmHzE0DOERlyuyA.roa (hash: ZwxuieDg5KwfHUePylCdnkHIJ18zptrPuU4i92UJi24=)
2: Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa (hash: T0h4+Xqtg7Y1viZ/7IiB5TqFGqH+QZrG/sWcCxZLrOw=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: D/YC9f80qBRlgvgBB7Ehu1nWR5DuCdxwUUA9B+H3ELY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:cd:65:d4:11:a1:fd:2a:34:db:80:05:74:8c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Apr 28 23:00:55 2025 GMT
Not After : Apr 29 23:00:55 2025 GMT
Subject: CN=e99e5db697e058a2e1d8219b969dd4bc0e18885d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:ac:ae:82:54:93:6a:c6:07:f8:97:2c:21:
09:da:72:f3:8c:e1:a0:f6:f3:6c:50:53:23:f3:52:
6e:ea:7b:30:38:32:51:13:79:dd:21:85:29:b6:96:
a6:e5:3a:ab:30:b9:74:80:b2:1a:1f:07:d5:b8:29:
8a:ea:e7:96:0f:65:f0:e2:35:d3:9a:3c:89:21:9e:
9c:a6:14:50:11:52:6d:a0:eb:a3:d5:9a:eb:a8:93:
0a:ae:69:40:c1:ca:f9:8a:5e:a2:c2:52:9f:71:51:
70:45:09:6f:27:da:c6:59:7f:8f:14:7d:35:1d:d1:
15:6f:6d:41:83:f2:67:0c:ad:76:5f:1d:58:26:b4:
ed:79:d3:69:a1:46:19:4a:f7:9d:67:22:1c:97:6e:
d3:56:4f:68:1f:66:30:51:ee:72:90:f0:c6:3e:15:
48:3d:07:8e:e0:a8:03:49:ef:c8:1e:37:d5:06:e7:
52:30:e6:ea:f8:c6:92:bd:d8:7b:4c:6f:36:03:b1:
7c:97:21:9f:d8:02:12:7a:cd:d4:0f:8b:92:43:1c:
99:fb:a0:c5:c8:8b:c0:d8:f8:e9:57:66:f0:bc:df:
85:f2:36:97:6b:54:bf:a3:05:85:3c:22:e6:ba:7e:
4f:2a:68:fb:ab:df:89:ed:cc:61:02:63:35:54:2a:
99:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9E:5D:B6:97:E0:58:A2:E1:D8:21:9B:96:9D:D4:BC:0E:18:88:5D
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:5c:8f:9c:74:a4:1e:e4:3d:83:8f:14:5a:b1:8e:04:1a:
98:7f:11:a5:87:79:dd:08:a7:45:1a:b3:99:ab:03:7a:7c:ef:
f6:20:d9:47:ef:b8:04:e3:4c:63:b4:2f:60:73:d8:f1:16:87:
c5:81:d8:eb:ee:9d:b9:17:00:1b:29:80:8c:ee:79:e8:38:eb:
d0:1d:bb:f8:06:8b:f6:d9:49:a3:56:ba:e8:ee:c3:79:44:96:
b9:93:7c:01:6d:82:be:ef:cd:38:fa:6b:eb:d8:c5:35:1a:c7:
4e:a0:8e:8c:03:36:c4:1c:91:b4:df:48:6d:c2:2b:04:e1:03:
40:5e:fa:e6:2e:74:3d:49:a4:be:7b:20:0d:a2:fc:e9:c7:3c:
fd:cb:c8:8d:b4:6d:73:47:cf:8c:05:99:9f:94:57:e1:09:54:
9b:17:ad:ca:81:33:00:1d:6f:9c:05:b5:22:de:9e:56:b7:9e:
5d:0d:26:5f:cf:e6:19:3f:7c:33:ac:72:35:26:73:f3:04:d7:
52:bd:8e:50:99:21:c1:15:13:99:64:a6:62:ad:04:51:0b:99:
50:3a:8d:06:d7:15:ca:1e:7c:01:7a:ac:e2:d1:03:30:48:f0:
ca:f8:f8:4d:a8:d2:43:eb:fd:6c:85:f5:98:55:d7:a9:a0:d2:
39:ef:9e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:45:18 2025 by rpki-client