Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: v6iDvz+V/eFO46i5i128VWuvbbaaGcLqHtWhoRS+qLw=
Subject key identifier: 78:27:84:EE:2A:5B:0B:E7:40:58:6A:AF:8F:9D:B0:BA:31:05:C6:F6
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 0196BE253EED07213C4404881A8ED68B632F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 1232
Signing time: Sun 11 May 2025 07:00:33 +0000
Manifest this update: Sun 11 May 2025 07:00:33 +0000
Manifest next update: Mon 12 May 2025 07:00:33 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: nTYomVyZbtJiQnWg+fSQmRSa7I1/MXI7/UfG9yuQs2w=)
2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:3e:ed:07:21:3c:44:04:88:1a:8e:d6:8b:63:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: May 11 07:00:33 2025 GMT
Not After : May 12 07:00:33 2025 GMT
Subject: CN=782784ee2a5b0be740586aaf8f9db0ba3105c6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:93:b6:59:17:d9:d5:8e:1c:97:23:fe:29:d9:
7a:3b:41:ba:87:b1:66:8d:8c:6d:80:75:ed:e3:24:
bb:31:fe:b3:09:ca:96:57:54:87:3a:2d:80:3d:a3:
cf:46:c6:70:75:47:e7:50:9c:3d:da:18:47:31:2e:
ef:9c:af:1d:fd:64:82:48:08:8e:49:05:d3:cf:df:
25:dc:af:dc:7a:a4:da:eb:35:f2:78:e7:ef:25:4d:
b6:c8:49:59:20:ce:6f:ec:2d:ff:01:42:b2:b5:95:
75:59:e1:14:b1:7e:df:b5:8f:6a:1f:97:ec:53:79:
e0:fe:97:5b:f4:65:5a:95:fe:ce:c8:18:43:b0:49:
13:ae:82:44:00:a2:cf:43:ef:52:ba:f7:e1:3a:e5:
e9:ce:e7:a6:16:9a:ad:1c:8f:16:f8:13:7f:e2:22:
8a:41:44:ec:d9:c2:5f:2f:16:c9:ce:33:8f:36:6d:
4b:b2:df:73:10:58:c8:6c:cb:63:a7:27:2b:5a:28:
34:ee:64:20:85:80:64:6c:5f:d7:24:47:cf:6a:5b:
49:cf:0a:c4:27:a3:cc:3f:bb:ff:91:cd:41:04:36:
77:b1:77:1b:09:83:dc:fb:a9:d0:e0:5d:e2:72:fa:
41:fb:37:bf:8a:52:a6:e1:a7:ce:a9:66:03:f2:27:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:27:84:EE:2A:5B:0B:E7:40:58:6A:AF:8F:9D:B0:BA:31:05:C6:F6
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:17:c1:b7:50:23:79:7c:0d:ec:e4:37:33:d8:54:4a:54:7a:
aa:b5:e7:d3:59:86:38:8f:ef:ec:db:87:92:a8:be:64:1f:93:
29:2b:a8:93:4e:bb:cf:cc:45:5b:bb:5f:a7:ed:db:a2:63:71:
0d:ea:65:9b:5e:7d:ed:e6:b8:11:c9:a8:db:b3:54:7d:d8:68:
a4:f9:b6:9e:05:93:b7:61:50:8e:f9:d6:25:28:9a:86:ec:3d:
c8:5f:c5:d5:9f:6c:01:8a:a6:df:4c:2d:04:1e:d7:43:6a:85:
06:03:45:d9:95:02:6a:6b:4d:a9:d2:c7:21:88:4c:b5:65:cc:
41:ab:13:55:c5:c3:dc:ab:22:45:9e:3a:3b:cd:6e:c5:4a:59:
e1:ef:8e:3f:e5:70:75:a9:65:4a:80:05:d3:b1:09:af:b9:1f:
6e:1c:54:a4:2e:09:b6:2c:fb:29:5c:e2:73:72:e2:59:36:52:
30:53:69:69:13:7f:a7:cd:fe:3b:4e:73:63:c2:6c:01:f4:0f:
cc:22:b6:71:00:1e:57:dc:99:29:a3:34:40:06:80:26:30:09:
86:9b:06:69:ec:61:e9:9e:4b:12:d2:8c:c4:49:25:02:95:df:
ed:9e:d9:43:9e:1c:84:b9:4d:c4:1b:a6:6b:cd:ba:19:d2:46:
f2:5e:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:24:26 2025 by rpki-client