Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: GtNvSC2XlmKKkq9a/IHyQcOtlYM6aoni5MfB6y+kWZc=
Subject key identifier: 29:CC:29:A7:C5:00:5E:62:AF:AE:E7:C3:84:21:E8:F9:8D:20:76:2E
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 0196B36AA9CE206AFAD5A68362CE1054A51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 0410
Signing time: Fri 09 May 2025 05:00:34 +0000
Manifest this update: Fri 09 May 2025 05:00:34 +0000
Manifest next update: Sat 10 May 2025 05:00:34 +0000
Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=)
2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: YbG4wl7AznLg1Mc4ZiI8jT5+CVAHfwHkWY3MtDjRyKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:a9:ce:20:6a:fa:d5:a6:83:62:ce:10:54:a5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: May 9 05:00:34 2025 GMT
Not After : May 10 05:00:34 2025 GMT
Subject: CN=29cc29a7c5005e62afaee7c38421e8f98d20762e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:1d:29:db:2b:e8:20:7d:ae:99:30:3d:0c:
da:3a:56:5e:be:77:fe:2b:7e:43:6a:7a:5f:7b:d1:
ea:af:8c:e3:54:99:90:6b:0f:ed:e7:53:28:7e:a7:
39:7b:4a:49:3e:ba:00:ea:3c:7b:54:32:ab:a1:50:
9a:53:d0:4a:9e:d5:1b:23:6c:a9:dc:7a:58:0c:96:
79:7a:47:9d:90:ee:5d:f4:37:89:f7:83:2b:ee:77:
42:43:b3:b1:6f:23:24:d8:4d:ea:ce:87:d5:f5:bb:
99:bd:d2:ee:87:74:1b:42:31:02:ec:4c:f8:42:ba:
85:1e:e1:ac:34:3b:e0:1a:4e:90:44:44:ce:0d:43:
f4:69:cd:27:3a:7f:17:d1:fe:cd:65:99:a5:75:c3:
e5:fa:b7:d5:20:50:34:12:67:36:fd:12:61:b9:a2:
99:0d:43:a0:1e:38:fa:15:3d:7d:67:55:b7:d7:8e:
50:d5:ba:02:34:52:77:2d:7d:33:49:54:e0:e4:e4:
c8:1e:66:de:fa:a8:f6:04:53:5f:0e:e3:22:7d:df:
6f:38:3c:12:fa:f7:99:ce:b0:1e:71:1a:a7:18:4b:
4f:d2:85:31:31:f6:2a:b1:a5:a3:d9:44:f7:25:7b:
3c:2e:f6:aa:67:28:e8:77:57:ac:f6:66:0f:4d:76:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CC:29:A7:C5:00:5E:62:AF:AE:E7:C3:84:21:E8:F9:8D:20:76:2E
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:79:53:32:f8:df:2e:54:ee:32:ad:8a:d7:fb:c6:aa:13:bd:
bf:31:d6:5a:e2:f5:1c:8d:dc:3e:e4:9d:de:82:05:9e:73:4a:
02:f1:f6:6e:18:57:5b:0a:51:13:0b:f9:ef:b8:72:33:3b:c2:
57:3f:9b:f9:85:77:bd:cc:5c:c9:c1:a7:1a:f3:6b:4f:48:94:
4f:bf:36:89:d1:4b:e1:38:3b:05:54:ff:d6:c1:d3:6f:41:05:
c0:56:8e:02:17:49:f8:e3:f6:8e:9f:1b:ca:61:cb:f5:51:af:
5f:34:7e:26:6a:02:b1:57:20:29:6e:8c:68:59:16:e6:5e:72:
72:fc:ac:44:6b:57:2d:82:e0:98:70:9b:9f:74:3b:03:46:0f:
92:12:aa:8d:fe:20:fe:e0:33:5a:ba:81:ce:6a:d5:68:a9:a5:
57:74:87:6a:6b:12:60:34:61:c3:ed:d2:7e:53:d1:d9:3f:2c:
3e:0b:0c:b0:65:9e:61:3d:7b:48:2f:9d:3b:2e:60:c0:14:b4:
8b:c5:cf:d6:ee:69:e3:62:56:29:8a:9d:aa:a9:a2:91:b1:60:
0b:6e:70:db:76:72:81:bc:43:5f:0e:ec:af:44:ca:42:f3:41:
57:aa:f6:f4:de:a7:91:a3:b5:af:71:0b:72:38:46:7e:80:42:
9e:2c:87:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazaqnOIGr61aaDYs4QVKUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMDg4MzRiM2IyOTczOTA5YzBhYWY1YmI1ZDM1NGIxYzBl
NWNhM2UwHhcNMjUwNTA5MDUwMDM0WhcNMjUwNTEwMDUwMDM0WjAzMTEwLwYDVQQD
EygyOWNjMjlhN2M1MDA1ZTYyYWZhZWU3YzM4NDIxZThmOThkMjA3NjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYUdKdsr6CB9rpkwPQzaOlZevnf+
K35Danpfe9Hqr4zjVJmQaw/t51Mofqc5e0pJProA6jx7VDKroVCaU9BKntUbI2yp
3HpYDJZ5ekedkO5d9DeJ94Mr7ndCQ7OxbyMk2E3qzofV9buZvdLuh3QbQjEC7Ez4
QrqFHuGsNDvgGk6QRETODUP0ac0nOn8X0f7NZZmldcPl+rfVIFA0Emc2/RJhuaKZ
DUOgHjj6FT19Z1W3145Q1boCNFJ3LX0zSVTg5OTIHmbe+qj2BFNfDuMifd9vODwS
+veZzrAecRqnGEtP0oUxMfYqsaWj2UT3JXs8LvaqZyjod1es9mYPTXYIDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnMKafFAF5ir67nw4Qh6PmNIHYuMB8GA1UdIwQY
MBaAFD4Ig0s7KXOQnAqvW7XTVLHA5co+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYt
ZmQ3Yjk3MzljYTI2LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYtZmQ3Yjk3MzljYTI2
LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXlTMvjf
LlTuMq2K1/vGqhO9vzHWWuL1HI3cPuSd3oIFnnNKAvH2bhhXWwpREwv577hyMzvC
Vz+b+YV3vcxcycGnGvNrT0iUT782idFL4Tg7BVT/1sHTb0EFwFaOAhdJ+OP2jp8b
ymHL9VGvXzR+JmoCsVcgKW6MaFkW5l5ycvysRGtXLYLgmHCbn3Q7A0YPkhKqjf4g
/uAzWrqBzmrVaKmlV3SHamsSYDRhw+3SflPR2T8sPgsMsGWeYT17SC+dOy5gwBS0
i8XP1u5p42JWKYqdqqmikbFgC25w23ZygbxDXw7sr0TKQvNBV6r29N6nkaO1r3EL
cjhGfoBCniyHcw==
-----END CERTIFICATE-----
Generated at Fri May 9 10:50:34 2025 by rpki-client