
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: 4Tz+ax74vcGjWGkDbo83b8erwCHCXd7TZv5cx7lEcZg=
Subject key identifier: D6:60:4F:F0:C4:BF:3C:66:5F:A6:41:25:3E:65:59:23:F0:64:BC:59
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 0196A80B844B035968570A1FEF42F2842E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 126D
Signing time: Wed 07 May 2025 00:00:49 +0000
Manifest this update: Wed 07 May 2025 00:00:49 +0000
Manifest next update: Thu 08 May 2025 00:00:49 +0000
Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=)
2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: bLQx49WRDVlIzwNRQdcpcn14gcsVoEqDckQAWlPfKB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:0b:84:4b:03:59:68:57:0a:1f:ef:42:f2:84:2e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: May 7 00:00:49 2025 GMT
Not After : May 8 00:00:49 2025 GMT
Subject: CN=d6604ff0c4bf3c665fa641253e655923f064bc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:05:2d:be:a6:79:f1:07:73:7d:e4:57:71:
b0:ae:fd:0b:99:dd:53:1b:98:3e:48:bd:cb:db:5a:
82:88:66:de:02:7b:73:75:7d:ba:39:c7:da:8e:78:
5a:2e:61:74:9e:10:0c:ef:7d:aa:ca:66:c5:19:d7:
64:c4:ef:7f:7b:0d:b1:c4:30:14:8b:6d:0d:9a:70:
84:79:3b:c2:55:46:fc:e0:e3:ce:f1:c7:cb:32:7f:
de:f0:bb:59:85:9f:96:98:d8:85:02:ee:47:21:0a:
c7:cb:19:08:7c:4c:88:c4:88:88:34:6d:5a:31:a4:
d1:dc:2b:5e:a9:e5:34:1d:90:d9:03:d9:fd:86:d5:
1a:7b:10:e4:13:5b:29:e8:43:d5:75:8b:bf:54:58:
6b:52:ae:1e:1c:d0:48:cc:08:14:ca:e7:f9:3d:db:
34:45:91:a9:56:f9:f4:2e:5d:98:e3:37:e9:78:2b:
26:0d:9a:6f:8c:23:76:09:47:61:54:3c:29:0b:f6:
45:8d:31:01:8f:c8:ef:f1:fa:41:f2:0f:f2:0b:d0:
58:74:82:58:3f:ed:77:87:05:8d:60:e1:1b:06:88:
00:b9:1b:f7:01:ad:4e:2f:75:96:79:84:c0:d1:63:
8d:b6:84:1b:78:3e:a6:ad:af:4c:39:f6:25:d8:f0:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:60:4F:F0:C4:BF:3C:66:5F:A6:41:25:3E:65:59:23:F0:64:BC:59
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:03:56:4e:a7:4e:3f:f1:01:fa:b4:b8:7a:f9:fc:82:b0:60:
8a:f2:41:61:2a:ac:41:b9:1d:9c:da:10:17:93:a5:3e:24:4a:
40:f2:14:91:a2:78:53:ef:47:d5:67:51:c4:3c:ed:e4:8a:6c:
d1:b9:70:06:13:51:d1:0a:c8:80:e7:04:0c:ed:a3:90:41:70:
e5:dd:d2:d5:b2:08:b1:48:44:a9:21:1e:3d:80:eb:25:93:dd:
ab:04:c8:de:5d:a6:65:cd:ce:e1:59:4b:bb:80:fb:e1:db:11:
1d:76:26:72:91:57:94:fd:d2:bc:b0:b0:a0:84:06:4f:7b:6c:
74:c9:3e:e0:ee:2f:cf:4c:cf:49:78:1f:1a:ac:04:ad:02:82:
e8:50:33:06:d0:04:55:71:88:a1:4c:7d:95:1f:0b:b8:62:5a:
2a:56:16:f0:91:f9:f3:05:79:7a:c4:93:25:c6:55:b1:58:cc:
b8:ef:d1:04:6b:8e:11:2d:59:6e:d4:5c:81:b1:ec:b6:02:b1:
c4:e0:54:11:a7:77:e2:5e:90:a6:ba:87:ea:fe:9c:bc:75:01:
df:60:f9:b8:59:1e:ef:fe:c1:14:a7:14:09:43:9f:01:30:1d:
31:a6:1d:a7:54:c5:20:2e:60:da:13:8e:ac:c2:c4:ef:9d:22:
ef:65:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:10:30 2025 by rpki-client