Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: yQFW+IpXd8SdnAO3T93Lb9fHOOMEUad4brLtQWR+Li0=
Subject key identifier: DF:46:30:68:DA:40:91:A9:3D:5D:7B:85:D0:E8:0B:9E:9E:B2:B6:7B
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 01967755F414D69525377C80E56D35A3F631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0C9E
Signing time: Sun 27 Apr 2025 13:00:43 +0000
Manifest this update: Sun 27 Apr 2025 13:00:43 +0000
Manifest next update: Mon 28 Apr 2025 13:00:43 +0000
Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: +FFGnVY1Ywl57N73J4kw0H4uSxH+n1YWtqLoBiNDkUQ=)
2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=)
3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:f4:14:d6:95:25:37:7c:80:e5:6d:35:a3:f6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Apr 27 13:00:43 2025 GMT
Not After : Apr 28 13:00:43 2025 GMT
Subject: CN=df463068da4091a93d5d7b85d0e80b9e9eb2b67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:c4:fa:9e:85:96:27:70:82:42:dc:66:ad:
c1:c7:13:fa:39:1b:96:46:7f:67:c1:eb:4f:3e:38:
dd:3e:b9:1e:ae:90:1d:c3:16:c1:eb:d1:fe:55:3d:
64:96:de:38:c5:d7:c4:6e:89:56:a2:6a:b3:37:45:
70:14:c7:87:5d:1b:9a:a8:cd:a0:92:dc:92:df:85:
b1:e7:b8:02:ab:d1:bc:29:86:e2:52:7d:8b:88:c8:
1b:9e:77:74:96:8f:11:e9:ae:5e:af:47:51:3d:68:
46:b7:4b:24:bd:82:64:64:7d:78:bb:69:a0:17:17:
77:b3:2b:52:30:5e:b0:7e:68:8f:43:c1:05:80:cc:
16:2e:d8:c2:61:cc:9b:b5:05:40:9a:db:e5:7d:17:
b2:69:5c:2e:ca:58:e5:97:36:9b:83:2b:c4:7c:0f:
c0:26:01:82:b0:74:0b:fa:9a:17:30:36:5e:93:e4:
e3:03:bf:b0:73:d9:e0:70:c5:d1:08:17:fe:50:85:
c6:84:3f:a6:67:6d:9f:20:5e:ca:9e:4f:06:05:5e:
62:bd:25:e0:20:e6:24:4e:fd:83:5d:fa:98:8f:8b:
69:56:bc:5a:85:bb:13:ff:96:9a:21:7b:54:7c:26:
d8:d2:b5:e7:9f:a6:a4:bc:e0:b8:40:31:09:23:17:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:46:30:68:DA:40:91:A9:3D:5D:7B:85:D0:E8:0B:9E:9E:B2:B6:7B
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:09:dc:99:fc:d9:c0:0f:50:64:54:52:09:a8:89:c4:2e:dd:
80:43:76:99:83:5b:2b:b1:7b:7d:ca:ab:29:45:ec:b9:30:b8:
f2:02:e4:46:8a:5f:6c:ee:82:0e:6b:a5:ed:bd:4f:d8:c9:c5:
9e:a9:ac:9a:5f:3f:c7:ea:72:61:19:15:ef:b4:a9:c6:d9:50:
82:96:6b:da:73:5b:a2:e8:40:88:ad:17:1b:fd:5f:49:5e:d8:
89:51:63:d2:b5:7d:d6:6c:f5:2f:77:60:ad:3a:3d:d3:ae:96:
d7:ac:9b:69:a2:5e:71:7d:aa:68:d8:16:8b:da:2b:d0:23:4b:
7c:6f:7d:b4:e7:b0:f1:66:63:30:e9:7c:46:61:4b:be:52:94:
47:04:9d:bd:8d:43:f3:37:1c:de:e3:d0:48:df:2b:ff:58:97:
a2:b1:c5:d9:02:43:9d:da:9e:b1:7a:8e:36:e7:90:ba:e9:b1:
db:3c:ef:48:83:18:ff:42:e0:69:80:3d:42:e5:ee:c8:bc:48:
8e:aa:61:8d:95:93:80:74:ad:63:40:84:61:18:cf:3e:d8:f7:
a7:78:7c:74:9c:36:59:73:eb:3e:62:2c:73:10:80:4d:b2:31:
25:7c:e4:e2:83:3f:ef:25:af:b7:e6:52:ff:38:82:84:f8:30:
c0:2b:2e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:06:48 2025 by rpki-client