Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier: eptdjAizhetIA7pwIhFEaQpsQZQpR1Id7tSmnTqc/fk=
Subject key identifier: 88:7E:D3:69:24:29:DF:BD:0D:3D:4E:36:78:6C:13:6E:9F:2D:7E:C8
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 0196748C4A9CBB9F9C688A92DB437B344719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number: 0FC6
Signing time: Sun 27 Apr 2025 00:01:13 +0000
Manifest this update: Sun 27 Apr 2025 00:01:13 +0000
Manifest next update: Mon 28 Apr 2025 00:01:13 +0000
Files and hashes: 1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: EnfeWoL33uVedxMQzM/BE6RoQtsED5yQ+u7BEg3RLrI=)
2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:4a:9c:bb:9f:9c:68:8a:92:db:43:7b:34:47:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Apr 27 00:01:13 2025 GMT
Not After : Apr 28 00:01:13 2025 GMT
Subject: CN=887ed3692429dfbd0d3d4e36786c136e9f2d7ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:e3:a0:04:04:dc:91:80:21:70:f9:c1:77:
4c:89:e5:d9:04:97:20:f6:88:a4:66:71:a8:0d:66:
1c:d9:0f:ed:49:46:e9:80:1b:38:1b:a4:eb:45:8c:
ba:8b:41:cf:0a:50:f7:1a:23:2e:43:49:c2:eb:55:
b4:6f:00:ac:1e:17:71:d2:7c:99:3a:b0:5d:66:47:
6a:14:40:a3:27:26:5a:e0:65:d9:f8:c0:b4:e0:d5:
48:83:be:13:52:1c:c7:c5:d5:21:3c:6f:70:c2:09:
20:9f:e1:e5:e0:69:07:ac:46:3c:03:ad:3b:8f:d9:
ad:99:8e:6a:45:32:fb:f5:72:cd:6a:72:0e:ff:6a:
1a:20:49:c3:37:fa:98:10:9d:68:24:16:eb:90:cd:
e4:d3:a4:d9:50:9c:92:c1:76:33:06:53:40:bd:ab:
7a:6b:e9:87:7e:5d:21:0a:9f:0a:17:d3:e6:e6:74:
dc:15:9c:71:3e:45:d1:bb:4d:95:a6:2b:6f:69:f1:
9e:64:92:39:73:24:9a:b1:b9:60:02:4f:3b:e3:eb:
ee:0e:c0:2d:c1:73:b7:25:bc:5d:b1:b0:6d:9c:29:
ea:0d:18:15:7f:aa:e6:e9:1e:55:34:6d:7d:09:13:
4d:82:b4:a8:75:f2:2c:f2:7e:76:f3:85:01:8e:0c:
59:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7E:D3:69:24:29:DF:BD:0D:3D:4E:36:78:6C:13:6E:9F:2D:7E:C8
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b4:08:35:bb:ee:c6:ad:f8:43:ea:3e:e6:81:34:d6:e1:a0:
03:05:4b:c9:da:b0:d4:78:af:40:a6:65:03:56:f5:18:c3:f1:
f8:08:3a:55:b7:8c:87:4d:1d:66:b3:09:11:c2:b2:2c:bf:99:
4f:bc:e7:33:9d:5d:d5:3e:c6:54:a8:5c:dc:e7:fa:88:b1:c1:
e1:e4:4b:f7:f9:68:e5:4f:1a:25:2b:c8:37:39:9b:00:ae:46:
6b:a3:6b:0a:ff:cc:2b:4e:06:1b:00:60:ef:45:c5:5c:c4:e4:
68:ed:d5:3c:2d:a2:6d:46:69:07:99:8c:31:2e:63:59:9e:87:
e7:71:98:7d:94:fb:5c:5d:b0:48:a1:9f:e5:5b:8b:0e:0d:56:
08:3e:51:d3:c5:11:70:8c:ba:02:56:ae:5e:ce:21:27:00:b1:
94:11:d7:c9:36:88:12:f8:0a:fc:ad:6b:19:68:ed:c9:46:92:
96:e8:36:ed:60:f2:a7:a0:a6:75:ea:79:3b:28:64:98:23:b9:
29:7f:55:89:1e:9a:8d:aa:d8:d6:33:3a:3e:dc:cd:9e:6c:4f:
d6:db:fb:b3:d2:8a:8a:10:f4:ad:f7:d8:82:e3:ba:a8:5c:07:
fc:3b:25:12:96:81:0f:f4:cf:ad:5a:57:f6:66:98:2f:45:e7:
6a:15:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:46 2025 by rpki-client