Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
File: PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft (raw, json)
Hash identifier: j2PAzDEKh7Z1M+Eg/vLUfqct1q3i6Jcr1euZVHogFr8=
Subject key identifier: D9:93:2E:E0:98:C4:D1:DA:E4:F5:0B:B3:23:28:75:E2:D7:3C:DD:CE
Authority key identifier: 3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
Certificate issuer: /CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Certificate serial: 0196A50A1D3D2BBA9B43E325C1ECBAE201BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
Manifest number: 0407
Signing time: Tue 06 May 2025 10:00:25 +0000
Manifest this update: Tue 06 May 2025 10:00:25 +0000
Manifest next update: Wed 07 May 2025 10:00:25 +0000
Files and hashes: 1: PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl (hash: x9xUumgGJSfB1tWxh0yo7vAoZpv0bG3LXiitT1aKPBg=)
2: cNQzFblAKvFr8hGK7lwE2E-QroQ.roa (hash: 6L0JpdKsg5wIV7DiGvLclmuCfLf4+RgtvQ0jAlVXODk=)
3: sq8t5TnYeFbLwzKDRurrhu8TSwI.roa (hash: BEQOlbgnZNiMmu4zSM6xloAN2ehefN/KrPp5K3vJnWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:1d:3d:2b:ba:9b:43:e3:25:c1:ec:ba:e2:01:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Validity
Not Before: May 6 10:00:25 2025 GMT
Not After : May 7 10:00:25 2025 GMT
Subject: CN=d9932ee098c4d1dae4f50bb3232875e2d73cddce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:7b:16:26:7c:0f:03:d9:2b:2e:89:5a:5e:
e9:8d:4f:41:aa:57:72:57:1e:90:25:13:ab:2c:90:
d3:d6:f0:99:e8:2f:15:1c:36:5c:82:df:da:60:6c:
f0:e0:9e:82:6e:f9:3d:e1:ce:0c:ab:96:03:8e:49:
10:72:49:3f:7c:27:ea:91:04:0d:17:47:a7:c9:e7:
10:f6:70:68:99:5d:5c:ed:ee:0a:58:11:88:6e:4e:
b4:c8:9b:6c:95:2c:8c:af:98:fd:91:c7:17:c8:5b:
ce:d6:dd:16:7f:02:96:1a:77:cf:86:13:e6:43:e8:
95:d9:e6:70:44:9e:77:49:e9:cd:7f:d4:09:2e:9b:
7b:67:dc:2b:f9:b0:e2:fe:00:4b:73:79:07:ac:89:
27:89:11:57:46:50:27:d8:b9:fe:c6:c1:96:31:ff:
f5:71:7b:fe:4f:ad:29:f0:0a:f8:b1:8a:25:7f:27:
d4:49:01:f9:c2:92:71:e0:69:58:e7:d0:d9:15:29:
d4:27:af:b7:b7:19:82:80:a3:0a:52:91:39:6c:dc:
96:29:34:5b:f1:3c:f8:21:7c:22:13:6d:f9:75:f3:
cc:bc:78:18:c4:0e:84:a4:a6:06:10:64:47:67:99:
2f:2a:16:55:f5:42:91:76:b6:1d:b0:f0:ba:bc:b1:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:93:2E:E0:98:C4:D1:DA:E4:F5:0B:B3:23:28:75:E2:D7:3C:DD:CE
X509v3 Authority Key Identifier:
keyid:3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:75:e6:27:76:59:18:c7:13:9a:a2:5c:c7:a3:bf:5b:96:35:
e8:f7:21:f4:b9:21:90:46:e5:e1:63:f7:70:1b:60:03:1b:50:
00:51:c5:f7:0e:4a:da:37:45:40:1a:d8:7a:e8:48:fc:85:e4:
be:3b:29:85:d0:81:c8:80:b6:5c:02:7f:d5:df:5b:6d:15:93:
19:c1:46:69:c3:28:68:af:71:f1:95:92:15:5d:1d:b8:6f:84:
f7:6d:59:2c:24:99:a9:26:6a:d9:5d:bf:1c:60:d8:12:fa:1b:
65:cf:36:ea:46:fd:de:25:cc:fb:53:bf:c4:a2:f3:ff:73:a1:
c6:d2:43:15:11:a5:3b:94:dd:99:95:9d:14:19:bc:ab:30:04:
da:8f:f0:ee:55:66:54:5e:2c:25:c7:c4:dc:7b:91:50:a1:28:
9a:72:aa:4d:61:1d:2d:f7:3a:a0:fc:d8:02:b3:94:e3:80:06:
3e:24:18:fd:b2:d8:6a:5a:f1:1c:4b:f9:85:1c:d2:1e:00:74:
20:e3:c8:a5:f8:25:2b:06:23:3e:26:7d:34:6e:aa:44:84:f8:
7f:b1:9f:45:28:15:f4:30:f6:59:8e:ff:39:8e:6b:e0:b7:4c:
7b:4a:c6:bf:23:ca:d8:8c:8c:27:7a:8f:0a:72:69:ed:db:53:
83:ee:fd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:21:55 2025 by rpki-client