Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: EW4PCH2MIzMUjpnmkxpl1OXyNGgVeLgf6vi9rjxd0mM=
Subject key identifier: CA:04:B4:59:18:C0:33:DF:55:6C:41:EC:29:4D:A2:73:C7:02:2B:EA
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 0196A0BF60C5CF64B88501316DB73E1FF738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 140F
Signing time: Mon 05 May 2025 14:00:18 +0000
Manifest this update: Mon 05 May 2025 14:00:18 +0000
Manifest next update: Tue 06 May 2025 14:00:18 +0000
Files and hashes: 1: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: 21glQJyvLjUiEtEOcvcxA5GBTArI7gJ9qtflc9A1Um4=)
2: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:60:c5:cf:64:b8:85:01:31:6d:b7:3e:1f:f7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: May 5 14:00:18 2025 GMT
Not After : May 6 14:00:18 2025 GMT
Subject: CN=ca04b45918c033df556c41ec294da273c7022bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:f5:03:c8:cb:ab:b2:49:19:78:c7:ce:1b:
7e:65:f0:4b:7b:26:e3:3d:53:f8:b3:20:a3:34:66:
c8:2b:9e:a4:58:bc:b7:7f:1a:36:7e:fe:3d:bd:d8:
25:40:e2:57:5c:d4:26:88:50:f9:1b:8a:57:7a:d2:
f5:4f:ab:ba:a0:6d:ad:0d:3b:a6:c7:fc:94:47:7c:
bc:01:eb:d0:67:2c:34:ef:f2:7a:9c:3c:0b:71:4c:
d5:45:46:60:d4:99:c9:0a:8b:8c:01:99:2e:7e:e9:
48:0b:14:51:89:19:61:8f:0a:f0:00:a0:f1:ce:69:
72:0a:2c:7b:50:df:0d:38:d7:16:e0:b2:1a:61:e7:
ae:e2:09:52:be:4a:38:bb:c3:ca:43:59:3e:27:ab:
7a:c6:f5:a9:7d:6f:95:90:60:f4:aa:f9:75:f1:2a:
19:d9:c3:d8:c2:a5:18:24:b0:ec:0d:4d:4f:44:22:
3f:2d:cb:61:5d:63:e7:38:59:a1:ac:6a:dd:56:c9:
b3:4b:bc:da:04:c9:66:5c:42:72:8d:96:68:1d:bf:
79:fd:ab:af:a7:15:98:88:23:a2:bd:2d:bd:38:7c:
96:70:e1:a6:c8:b6:0a:da:2d:95:23:8a:e8:ac:a4:
0e:f2:6c:4d:8d:47:5b:64:82:3d:94:2d:ad:4e:8d:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:04:B4:59:18:C0:33:DF:55:6C:41:EC:29:4D:A2:73:C7:02:2B:EA
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a0:3d:b1:29:f4:f5:b2:e9:ab:82:ff:ae:41:36:6b:96:cb:
a4:c8:2b:d9:e9:c4:cc:50:66:a1:91:b2:05:2c:b5:48:7b:2e:
cf:68:10:fd:40:59:1a:fd:5f:c3:ca:18:50:c1:51:9c:70:0a:
06:67:8b:b1:1e:da:df:59:1e:9a:76:1d:08:c3:a7:88:53:59:
46:bd:df:7a:b7:5a:2d:f8:2f:23:17:85:31:d9:5f:c5:74:4f:
6e:1f:17:e3:d9:99:66:9c:a6:a1:3d:4a:90:fe:a2:0d:2f:6e:
72:d4:6d:47:30:fa:c8:e2:73:55:d0:cb:46:50:9a:e8:22:24:
d8:c6:dd:ab:34:7b:4e:0b:6c:6d:2e:30:73:ed:dc:79:81:26:
5d:74:c4:f3:10:50:cc:a3:d7:e1:93:cd:ca:a2:9c:ba:c8:09:
c5:ab:03:45:af:78:a5:2b:e2:f2:7b:bc:0d:89:52:52:c5:d3:
65:3a:f9:b8:2f:aa:e8:1f:5e:29:67:a5:45:bc:67:18:7e:00:
c4:e3:f5:79:7a:24:30:a0:00:df:57:01:7d:74:1c:9b:51:5a:
5c:dd:6e:2a:8e:6a:2e:3a:6a:d9:3c:32:79:d5:68:9b:ac:7a:
43:35:43:71:07:72:82:b8:3c:9a:66:db:1f:e1:97:74:5a:d2:
0c:fc:d5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:10:31 2025 by rpki-client