Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier: LHYSGVxRtqmljY5x1VO/UKcG4VU8X7OOb528ZI/XplY=
Subject key identifier: 8C:5C:5B:F4:59:88:E8:95:0C:04:05:24:C7:C3:69:9C:9C:81:12:6B
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial: 0196759E71A403EE918C7D90023DAC8CB2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 05:00:40 +0000
Manifest this update: Sun 27 Apr 2025 05:00:40 +0000
Manifest next update: Mon 28 Apr 2025 05:00:40 +0000
Files and hashes: 1: Iu-aA6mIgmV7NRaHZwfWxVQwunE.roa (hash: o5Wzr2WPXf+6jJuX+5+5esP5UlB6RWICl6cgQsSyWJw=)
2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: M8Nkm15ID0/g6YwExv+XSkBoHW2PO38JrHwdGpQWF9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:71:a4:03:ee:91:8c:7d:90:02:3d:ac:8c:b2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
Validity
Not Before: Apr 27 05:00:40 2025 GMT
Not After : Apr 28 05:00:40 2025 GMT
Subject: CN=8c5c5bf45988e8950c040524c7c3699c9c81126b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:c9:61:0c:d5:6a:1c:bb:fa:0d:79:d0:71:
10:de:49:e5:b1:70:7f:46:93:72:32:d0:8e:f6:07:
54:31:72:29:63:7b:7e:04:75:80:aa:5f:37:2e:13:
e6:1c:26:cc:b2:b8:d0:e0:8d:93:2b:44:d2:91:8b:
cb:8e:a6:8e:ca:53:9e:f8:5f:ec:fb:10:77:4b:2c:
73:16:f4:67:32:eb:da:d7:37:dc:e0:ee:d3:64:ad:
b7:14:45:58:c2:d4:31:a1:6c:3c:67:40:59:96:c7:
85:24:9d:3e:dc:4b:bf:65:bc:3e:fa:ec:52:3c:bf:
67:0b:61:67:00:a7:c6:1f:86:79:86:9f:c5:bd:56:
6d:65:80:8b:c1:70:b2:81:b6:7f:3b:5a:5d:57:a8:
fc:97:55:24:29:11:52:39:20:f6:bf:42:0c:34:62:
0d:66:44:f8:a8:bc:9c:95:a1:cc:c7:4e:d2:62:72:
fe:25:25:08:97:2a:2e:16:9a:bc:07:64:c6:4a:de:
9d:6e:44:a2:ba:8a:8b:41:d5:e0:66:73:03:ac:a5:
f5:c5:bd:a8:5e:c1:f9:6d:f7:50:ee:76:a2:e5:c6:
57:ec:68:5b:84:5b:ec:a4:bf:bf:c2:c2:0f:73:f2:
8b:f9:69:38:4e:6b:06:93:a1:7b:e8:b3:7d:35:51:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5C:5B:F4:59:88:E8:95:0C:04:05:24:C7:C3:69:9C:9C:81:12:6B
X509v3 Authority Key Identifier:
keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:46:e1:85:c7:f9:1b:0d:49:14:af:ba:cd:52:c0:bc:b6:79:
0e:e4:35:77:24:c8:ba:d0:3b:04:2f:6b:fc:1e:08:4b:93:68:
a8:99:a9:27:6f:c8:88:70:13:d9:29:62:c5:9a:32:33:6a:67:
76:81:ef:a2:2f:e6:49:ce:2f:c0:73:8f:10:72:34:8f:25:4a:
54:30:f9:01:91:17:8e:76:56:a3:25:6f:15:43:1b:44:be:bb:
59:25:58:8b:0a:bb:f6:2a:57:d6:a2:21:64:42:63:be:c4:fa:
03:78:0d:0c:f3:f2:17:c7:9f:fc:58:56:12:42:c3:cf:e9:0c:
c9:18:c4:15:64:c5:11:31:43:4c:ac:12:0a:10:11:ab:ab:96:
e5:7b:2f:4f:7b:e7:dc:da:ea:f9:48:8b:2e:fb:d6:23:27:83:
e6:ff:9d:86:3b:54:9f:62:42:06:8c:f0:a8:94:19:d6:99:98:
80:c8:15:0d:fe:34:55:dd:df:b7:62:31:52:99:b2:cf:3a:1d:
6d:28:d9:f3:b1:c0:39:7b:d5:03:5e:2e:73:59:4e:35:99:85:
82:ef:3c:6d:2c:5f:57:2c:b1:eb:f6:f5:6c:9b:f4:4a:43:7f:
b3:83:11:fa:96:9f:84:47:88:97:e5:d3:10:07:67:43:33:45:
f9:85:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:05:40 2025 by rpki-client