Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
File: PxckOVmdfaUleXiZvyE7jmNVSRQ.mft (raw, json)
Hash identifier: 1Vw3TErYpNq00BKJPDPIOV1z4Jk7hEjLbNWmF2de9sE=
Subject key identifier: 99:E6:86:63:92:73:FD:56:3E:42:54:43:F3:ED:B6:83:69:9D:DF:ED
Authority key identifier: 3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
Certificate issuer: /CN=3f172439599d7da525797899bf213b8e63554914
Certificate serial: 0196C0EF4460F5A53C8ABA93FABA7E4A6BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
Manifest number: 14C7
Signing time: Sun 11 May 2025 20:00:28 +0000
Manifest this update: Sun 11 May 2025 20:00:28 +0000
Manifest next update: Mon 12 May 2025 20:00:28 +0000
Files and hashes: 1: ET0yOb6N2KPn9sEOeciwveLzfFQ.roa (hash: 5UaUVXzPjnKQ9N0meCwxNszuKgkyrbDITbh3/+eJ6rg=)
2: PxckOVmdfaUleXiZvyE7jmNVSRQ.crl (hash: KN1MNdyXyfHE4csqqQPY+atohLl6WfsnFY2gq045jfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:44:60:f5:a5:3c:8a:ba:93:fa:ba:7e:4a:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f172439599d7da525797899bf213b8e63554914
Validity
Not Before: May 11 20:00:28 2025 GMT
Not After : May 12 20:00:28 2025 GMT
Subject: CN=99e686639273fd563e425443f3edb683699ddfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:33:88:da:10:b2:61:e1:05:ee:bd:70:d5:
2b:e1:bd:79:97:74:2f:58:66:de:2a:9d:4c:19:68:
17:60:6c:8d:c2:2e:e8:99:41:1c:04:aa:e9:c9:b4:
3d:78:dc:1a:6a:d8:78:b4:0e:89:66:49:e9:66:62:
ed:51:c1:55:e1:ce:00:38:8d:e8:2f:ff:cc:1c:8d:
fc:94:f4:be:a1:f2:15:d9:1d:89:ee:26:cb:b1:0e:
17:e1:4a:a1:2b:d0:cb:e1:08:1b:43:6b:d1:3c:b1:
5b:9f:71:12:6f:8c:90:9d:08:20:1e:41:e4:92:02:
d4:65:eb:7f:c4:54:e4:e5:fb:04:fd:bc:41:77:08:
36:fa:e0:a8:3c:d0:51:aa:e3:9f:12:18:7f:8b:71:
b3:e2:27:cf:c2:46:16:09:fb:4c:ae:71:90:fa:f5:
50:c3:a0:15:b5:57:c2:a5:cf:de:86:69:9d:c2:d8:
72:ef:22:aa:00:3e:1b:2d:60:c5:07:2e:6c:84:09:
c8:0c:71:05:1a:e9:93:48:a2:1b:23:17:46:f6:c1:
64:45:3f:0c:cb:95:85:e8:f7:31:3d:28:63:6a:23:
45:93:f2:d6:f8:79:55:b1:38:e4:5b:18:b5:c5:23:
be:05:88:a1:fb:53:6b:85:ff:55:94:bc:64:01:4d:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E6:86:63:92:73:FD:56:3E:42:54:43:F3:ED:B6:83:69:9D:DF:ED
X509v3 Authority Key Identifier:
keyid:3F:17:24:39:59:9D:7D:A5:25:79:78:99:BF:21:3B:8E:63:55:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxckOVmdfaUleXiZvyE7jmNVSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9f9aa9-09c0-48cc-b0a1-887331efb715/1/PxckOVmdfaUleXiZvyE7jmNVSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:af:36:37:8a:1b:61:cb:da:1d:8a:f2:fb:1e:cd:67:bb:8f:
a8:cb:88:f3:98:2e:78:42:e8:da:34:60:55:1d:ce:b1:aa:8f:
57:0a:3d:1d:bc:2c:c0:ef:2e:20:4f:41:e8:24:5a:cd:66:8c:
21:8a:56:78:05:04:fa:16:f1:b7:fc:81:06:a2:14:4a:44:0d:
09:3c:58:a0:e8:db:56:6a:89:b7:6a:39:2e:de:85:6b:5b:11:
1f:9e:e6:8c:07:b0:4b:ad:76:a2:39:b3:29:37:9e:44:5f:ce:
24:95:34:eb:20:a3:3d:e8:65:2a:f9:f3:fe:18:88:3a:56:34:
7b:57:53:22:65:72:30:c0:3c:32:f7:db:13:ba:58:52:c8:9a:
d4:be:cb:fa:e4:5b:d0:21:50:0b:66:29:38:5e:31:a1:cd:25:
50:ae:e5:ba:df:66:66:7b:68:bf:47:e3:0e:8a:90:1b:03:c3:
61:60:49:14:e9:33:b4:34:c2:96:dd:2e:78:39:34:11:2d:2f:
81:1c:68:74:5f:bc:27:de:ca:6b:57:a1:d1:db:46:0d:37:a3:
03:5d:3c:ba:c8:aa:18:44:95:3b:ee:e6:e3:53:93:0e:bd:1b:
9c:ab:22:f3:46:ff:26:a0:16:59:98:1d:bf:69:46:ef:a9:c6:
24:31:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:16:57 2025 by rpki-client