Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: 23x5kOV5e+1YP4bXxqYWztZiFADH4lYtNGVuM7KvBQc=
Subject key identifier: 68:8E:E0:D8:5D:4C:18:CF:C1:BA:74:F1:3B:58:65:AD:94:AC:4F:7C
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 01967755E40E735B1B69D31B3C6236AD36BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0990
Signing time: Sun 27 Apr 2025 13:00:39 +0000
Manifest this update: Sun 27 Apr 2025 13:00:39 +0000
Manifest next update: Mon 28 Apr 2025 13:00:39 +0000
Files and hashes: 1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: eh9/Fj5egOVjrJvDn9otEk/pKt66yNqLsY9v9vWvZbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:e4:0e:73:5b:1b:69:d3:1b:3c:62:36:ad:36:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Apr 27 13:00:39 2025 GMT
Not After : Apr 28 13:00:39 2025 GMT
Subject: CN=688ee0d85d4c18cfc1ba74f13b5865ad94ac4f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:b7:f9:5b:cf:a2:cf:60:7b:15:d9:7a:96:
87:88:86:75:d4:5a:03:69:d4:bf:16:3e:17:e5:fe:
2e:a8:1f:df:4c:ee:0a:c3:f5:f8:41:fa:fa:f4:47:
e4:a6:35:62:d2:e4:ab:3d:fe:e5:83:4b:30:0f:87:
95:03:a9:2b:d5:91:3a:cd:d1:bb:d7:bb:89:1e:78:
be:62:9e:46:17:aa:b2:97:21:b1:41:82:a6:4e:21:
af:bd:17:ca:b9:1f:a5:a0:9b:fb:05:f6:28:cd:92:
34:67:56:1f:35:9d:a3:2a:c3:bc:6f:a6:f7:32:90:
62:71:72:c4:b7:a5:e0:78:11:e7:28:32:82:88:a2:
88:e7:fe:a2:c4:35:b1:22:9c:e2:37:33:f1:2a:82:
98:1f:c1:5f:03:10:62:2c:60:8d:e6:27:d3:62:f5:
ed:eb:4d:20:05:0a:70:c0:13:7e:68:b5:44:5a:eb:
79:45:17:81:8d:bf:ae:ea:67:54:97:2f:0f:ae:5a:
74:d4:56:1b:0d:15:3f:e4:f4:d7:77:a6:96:d1:0c:
43:81:19:bf:85:70:d6:22:b3:75:d0:4b:28:6e:87:
df:19:e3:07:a1:8f:45:89:93:48:ca:4c:e4:54:4c:
7c:78:38:01:d4:9b:b7:bd:8a:b0:e4:30:37:6a:f1:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:E0:D8:5D:4C:18:CF:C1:BA:74:F1:3B:58:65:AD:94:AC:4F:7C
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7e:14:95:e7:6f:9e:04:a2:3e:f3:ba:09:c4:34:6e:fd:d1:
27:90:a4:2e:75:14:a2:9a:cb:d8:73:76:23:3b:87:ca:37:eb:
3e:61:8a:c6:07:10:0f:27:dd:35:04:81:81:d3:4c:10:1c:bf:
c0:8a:fc:a7:da:56:ab:d4:e1:25:46:e7:02:cd:80:8f:89:ef:
f7:ef:12:dc:8b:e1:9a:10:1c:a9:c3:19:55:31:f2:6d:73:74:
c3:b3:c1:e2:78:58:8b:31:14:21:af:20:fa:e1:28:78:fa:c8:
d9:3a:14:9e:8e:00:b7:ab:e5:be:e5:4c:be:c5:e5:7c:0b:f7:
07:bd:af:9b:d3:42:fe:4f:0c:11:ef:e5:cb:ad:b5:87:1b:21:
cb:49:5e:11:31:56:f4:86:69:5e:65:0b:b8:cb:f0:13:9d:eb:
0f:b7:7e:22:6e:2f:9a:fc:d3:c2:e7:cb:c8:9c:7b:9e:00:65:
66:35:e8:fe:7e:bf:b1:c3:45:f5:a7:dc:5e:38:ee:35:90:82:
b7:63:24:ab:95:32:ce:3f:39:e4:e6:ca:c2:47:d4:b8:ed:ec:
01:fc:62:cd:75:26:0e:a3:75:6b:69:ce:3c:03:a3:ba:76:38:
43:db:2a:d9:70:f6:fe:d0:08:92:c6:01:2a:9f:aa:c8:da:af:
78:d9:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:47:49 2025 by rpki-client