Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json)
Hash identifier: nah9uA3vLAZAsQ2QJMrNyevWckwaHMr0joCpLM6AOOk=
Subject key identifier: A9:CE:ED:63:E9:55:22:C8:1A:7B:54:3F:DA:C9:7D:8A:CB:96:AF:AC
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 019678684CA9B29C3395B8517F34DE7969EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
Manifest number: 0DBD
Signing time: Sun 27 Apr 2025 18:00:23 +0000
Manifest this update: Sun 27 Apr 2025 18:00:23 +0000
Manifest next update: Mon 28 Apr 2025 18:00:23 +0000
Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: Z4PlMVab3Y1yTAi88AYhliN1tAvmQ87tq27Jmd9CQqE=)
2: gt9goB76oJJ9IidA_tfxI6lWDIw.roa (hash: q0BFU46k9v4mjBVsSe1ZjIuLriX+JzS+b+gMagD0YfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:4c:a9:b2:9c:33:95:b8:51:7f:34:de:79:69:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: Apr 27 18:00:23 2025 GMT
Not After : Apr 28 18:00:23 2025 GMT
Subject: CN=a9ceed63e95522c81a7b543fdac97d8acb96afac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:f4:f7:26:30:b5:8e:e6:b7:ec:f5:90:ff:
4f:12:00:2d:ce:94:10:88:f6:b1:03:d5:8f:06:d4:
6a:b1:7f:dd:bf:8e:16:c9:a0:7f:08:9e:c2:21:4f:
57:cd:5f:0f:f0:dc:38:43:16:55:89:60:8e:30:b9:
45:de:3b:e2:38:bf:ec:92:05:a6:e4:12:88:ef:59:
43:25:1b:11:01:2a:e6:cf:2c:f2:a5:cc:d7:9a:e0:
8b:bb:ba:35:6c:11:f6:98:70:e4:e7:e9:dd:fa:58:
85:d1:57:17:7f:2e:3f:5d:42:af:b7:d5:5f:5f:07:
6a:05:52:f9:d7:e7:de:ca:20:42:7a:cc:ca:6c:08:
12:75:96:ca:9a:49:c8:56:42:ea:cb:d0:df:ef:fe:
e8:76:be:4a:9c:9a:62:79:13:6a:33:09:b4:e0:6e:
71:7d:f5:c1:b4:77:03:58:b9:9f:ce:f1:e0:71:dc:
d9:20:c1:bc:c7:e4:43:23:c4:fc:0d:0b:05:47:4a:
a3:85:f6:b2:09:26:e5:2b:c9:54:1c:44:4b:d8:47:
70:47:cc:f4:92:e8:c5:bd:51:70:32:ca:71:27:1b:
10:2b:12:a6:61:40:2e:e7:1f:61:d5:ea:4e:0d:38:
22:c7:c6:4e:ea:45:78:f4:4f:13:d8:06:bc:ba:7c:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CE:ED:63:E9:55:22:C8:1A:7B:54:3F:DA:C9:7D:8A:CB:96:AF:AC
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:57:13:3d:5d:13:3b:d8:6a:1a:b1:24:47:d3:d0:e2:93:22:
44:d0:f1:6a:e2:15:cb:28:67:46:58:f7:6c:ad:8e:ac:36:1b:
0b:56:9d:7f:cd:3a:3c:e2:27:a6:7e:af:ce:a3:f2:c5:b9:f2:
69:87:48:3b:7c:4a:83:00:bc:6d:a7:57:d2:6a:8c:43:9a:33:
d8:ab:78:5b:64:95:8f:f6:d6:9d:7d:88:c1:04:bf:9f:41:f9:
ec:f7:2e:df:94:1f:7d:b1:1c:8f:a8:b0:9a:6c:ef:89:d7:6e:
81:31:1b:31:1e:bb:47:7f:84:b9:df:ea:1b:fd:d4:4f:b6:33:
34:97:56:78:36:3c:36:88:4d:4f:c8:17:ef:96:2c:4f:ec:c9:
18:dc:58:2f:ce:e8:00:81:fb:cf:3f:7a:e2:ba:19:1e:b1:b2:
f1:d3:5f:e6:1c:25:f1:d9:5a:e6:44:f2:74:ad:42:8b:7d:4f:
67:aa:db:ce:d3:c8:43:97:7a:74:6a:c1:19:a6:c9:30:17:66:
4a:5b:9a:ad:83:dd:f6:41:28:71:a6:e0:b0:ff:94:05:dc:b3:
d5:68:0f:13:fe:a6:10:65:12:e5:bc:4d:8b:21:06:33:3e:f9:
c3:9d:d6:5d:d8:3e:1c:c0:d1:fd:7d:34:31:31:b9:ff:0c:6b:
2d:3a:6f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:19:04 2025 by rpki-client