Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: 5adu4OFb5L6a6l7q3KVS8H3XI/x36gQrlUextqMrAes=
Subject key identifier: F7:C2:94:69:82:2B:B8:C3:FC:CE:96:52:AA:36:18:41:4E:A7:54:7D
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 0196A6F85E56E85D7E2B786386E515D187A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 19:00:16 +0000
Manifest this update: Tue 06 May 2025 19:00:16 +0000
Manifest next update: Wed 07 May 2025 19:00:16 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: t8eqU0eWLdxVlZhCYZEZ+VgzuHYTj6PJc7gPmUE5pJ0=)
2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:5e:56:e8:5d:7e:2b:78:63:86:e5:15:d1:87:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: May 6 19:00:16 2025 GMT
Not After : May 7 19:00:16 2025 GMT
Subject: CN=f7c29469822bb8c3fcce9652aa3618414ea7547d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:a5:3a:5d:c1:dc:3b:d1:5e:f5:4f:bc:e2:
ca:1d:af:9d:a4:50:7a:b6:18:e2:e4:81:f1:4b:0c:
d3:8d:76:06:70:ba:af:6a:43:1a:41:da:ed:99:5f:
1a:47:4a:1b:d1:04:9e:be:e1:42:98:27:a4:50:57:
3e:00:8b:35:40:4e:db:d7:ca:6e:dd:df:5e:b7:38:
fd:a8:36:a6:61:7c:00:3d:27:98:63:bb:90:e6:d2:
df:12:05:4f:d4:e1:0d:c7:84:a2:8d:89:4c:8c:6a:
45:9a:a4:36:cf:52:ae:57:82:6b:c2:b9:9f:c3:8b:
a5:53:04:65:b6:64:96:64:dd:1f:ca:8e:6b:6e:f2:
59:fb:ef:a0:ca:b1:6c:42:2a:5b:d5:f1:10:a2:16:
f1:cc:b8:84:d1:ca:c7:70:c0:3f:71:d3:ba:d8:5a:
e6:a6:9c:df:ec:b8:11:9f:2d:04:27:3d:68:ed:12:
c0:2a:b8:cf:85:10:6a:90:62:76:42:1a:78:6f:0a:
f2:ec:60:5d:c7:31:0b:62:9b:18:85:5f:9d:d4:fa:
85:df:93:1f:ac:a6:e6:76:ab:da:db:ea:e2:ad:0c:
33:6c:8f:e6:1d:a1:11:c1:91:dc:4a:a5:14:01:a3:
27:ab:97:c4:9e:f1:74:36:a8:22:39:a0:93:ed:d1:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C2:94:69:82:2B:B8:C3:FC:CE:96:52:AA:36:18:41:4E:A7:54:7D
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bb:d1:01:30:2d:89:50:14:c7:0d:1a:88:7a:9f:4e:e4:08:
3b:b7:ac:5d:64:ac:e8:15:f5:cd:39:bf:02:5a:90:91:a3:84:
e8:6c:52:0d:8c:45:4c:a3:a0:ed:3a:32:d9:36:ea:85:98:53:
a4:72:d1:38:77:8e:a4:b9:00:93:60:5d:5d:ae:58:6f:3b:8f:
1c:28:7f:cf:46:84:2e:12:16:1c:ba:6f:b7:b8:35:6e:81:e8:
18:9c:b6:b5:a1:fd:8e:7f:10:69:2e:b7:13:a4:e8:c9:08:5d:
f0:b1:2b:37:7d:f5:74:54:08:49:c3:58:12:75:6a:4c:6e:18:
03:35:b2:7c:5b:bc:d3:26:fd:00:39:cc:05:f9:14:c8:9f:b8:
f0:47:84:e7:c5:14:3e:c7:9e:44:d7:e1:d9:85:85:5e:38:9c:
65:1a:e4:2d:dc:d0:c9:7f:34:e3:46:a4:a6:c3:17:12:f3:00:
7a:c0:47:e4:12:c7:2d:ff:cf:32:ad:d0:46:7b:ff:9f:6f:ca:
4e:71:c5:cc:58:07:14:38:54:6f:4f:fa:dc:d5:13:10:ed:5b:
7b:d1:23:44:15:c7:bb:f3:8b:e6:b9:95:8a:b6:ca:2a:c9:e9:
49:59:52:a0:30:20:e3:f8:cb:60:9e:28:43:80:f7:a1:e8:cc:
0a:3c:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:40:06 2025 by rpki-client