Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
File: PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json)
Hash identifier: ajTLEmmzqjsWoVnVn4iyGEuWpL5cHInSBnPocQ5dQy4=
Subject key identifier: B3:A4:8A:A0:90:AD:F2:EE:EA:66:6C:B4:78:8F:E4:41:5A:38:86:28
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial: 01967ED86E3F0FBD0B518F48C731F2D97E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
Manifest number: 0206
Signing time: Tue 29 Apr 2025 00:00:35 +0000
Manifest this update: Tue 29 Apr 2025 00:00:35 +0000
Manifest next update: Wed 30 Apr 2025 00:00:35 +0000
Files and hashes: 1: HpXNaI-YZ__bNVvsLhzCVmON0vA.roa (hash: 4ppKjsjUaSdmkdjg9+HGXDZITHcsYFbzqeckmlgFcTA=)
2: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: mqVzYnQuTiT86bV7WpktWlDKcCNKFc34Bv96OR5focs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:6e:3f:0f:bd:0b:51:8f:48:c7:31:f2:d9:7e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Validity
Not Before: Apr 29 00:00:35 2025 GMT
Not After : Apr 30 00:00:35 2025 GMT
Subject: CN=b3a48aa090adf2eeea666cb4788fe4415a388628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:5b:7f:84:f4:3d:cf:c9:e6:6d:45:63:a5:
63:3b:5f:7e:76:b8:e7:10:8e:14:33:7d:14:f2:a2:
a3:ef:40:79:20:df:a2:fa:9f:07:80:0f:94:b3:5e:
13:f9:e5:d5:77:25:1c:0c:35:83:e4:f0:01:fb:f9:
f5:3b:11:ad:18:2a:2b:f5:ab:74:6e:37:cd:2d:96:
09:e6:a2:51:f8:32:57:07:6e:34:bc:b6:b7:cf:91:
a9:09:7a:fb:ad:bc:cb:28:0f:13:64:b6:e0:ff:51:
56:15:d5:ff:5f:09:02:aa:1f:d5:f9:a1:2c:64:58:
88:c6:ae:05:99:38:81:2d:32:52:0f:67:b7:e5:8e:
4f:7b:39:0b:fd:28:0d:e5:47:97:c5:c3:26:e2:af:
d2:7a:28:9e:74:f4:4b:d9:8d:51:7c:c0:4a:3a:c2:
23:e6:d9:94:5a:78:2b:25:3e:bb:7b:87:18:de:ce:
97:73:72:64:8c:1f:fe:36:49:27:b5:73:db:ed:ef:
fb:17:1a:1e:e5:74:7a:8d:a8:b0:f4:4c:dc:eb:a8:
d9:91:5e:ec:08:24:d0:51:ea:fa:0b:68:8a:ff:08:
25:6f:82:ee:cf:12:67:c7:3b:94:67:56:72:e1:2b:
ee:b4:fa:8e:3a:7d:ff:08:8f:53:78:c4:59:af:cf:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A4:8A:A0:90:AD:F2:EE:EA:66:6C:B4:78:8F:E4:41:5A:38:86:28
X509v3 Authority Key Identifier:
keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:64:53:fe:df:70:90:cf:a8:b5:0e:97:a2:ee:da:8f:32:26:
25:6a:16:60:84:0b:14:6d:1a:3a:af:2e:d0:42:0a:ab:3a:2d:
ee:e5:f4:ef:76:89:45:7d:b5:13:3e:2a:4c:db:6e:56:c5:5e:
37:6c:f6:5c:38:f2:fb:27:6d:23:39:b3:c9:99:e6:53:ba:2e:
2b:f2:64:77:33:ea:65:96:b8:ae:40:a7:93:29:72:89:45:23:
3d:7c:bc:1e:21:bd:fd:a4:27:df:7e:83:05:2f:4c:f6:1a:99:
0d:a3:37:4d:4e:4b:31:d6:5d:38:4f:28:58:4e:c6:a5:cb:54:
fe:63:54:bb:87:65:3b:1f:c6:33:9c:3c:80:37:3d:57:0b:61:
93:75:f3:d8:0c:bc:2f:1a:d2:85:d7:10:14:22:39:69:67:61:
e7:27:77:ba:58:84:aa:6c:58:40:d8:fd:04:a3:e7:47:04:8e:
e9:e2:90:27:06:f1:78:b4:ad:60:15:80:27:b6:7e:c3:c0:05:
3e:a6:02:1c:82:e6:92:cd:de:56:e4:e3:ce:f1:02:a6:b1:ec:
48:a2:fb:1a:24:8c:40:fd:c5:e2:9e:bb:e5:04:5a:68:5d:a3:
24:a5:06:8d:0f:78:0d:ec:52:b6:fd:6e:41:22:dc:04:03:02:
98:5b:d1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:28:56 2025 by rpki-client