Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
File: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft (raw, json)
Hash identifier: LpeKe7/bnvO4j6Rxy3uSm7mhPtLiY2XNNzJXUZrENxU=
Subject key identifier: 71:E7:BA:DE:20:87:06:01:89:09:02:AA:75:F5:8B:B3:DC:8D:B2:7D
Authority key identifier: 3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
Certificate issuer: /CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Certificate serial: 01969D197F9B21113679FAFB8EC886F39D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
Manifest number: 0216
Signing time: Sun 04 May 2025 21:00:15 +0000
Manifest this update: Sun 04 May 2025 21:00:15 +0000
Manifest next update: Mon 05 May 2025 21:00:15 +0000
Files and hashes: 1: PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl (hash: u0FFmBnEirSuif0uJ2//7KbTrYYT1bKIyMyVSms4uqo=)
2: x_RfurRNedmEj2hSqHVNcrKbV_E.roa (hash: 8G+RNYkhEQwOffPjlh7thkZsriDB79Nwv1PSXlUOkh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:7f:9b:21:11:36:79:fa:fb:8e:c8:86:f3:9d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9219dac3584986e78b41dc9ffb622623b4ac61
Validity
Not Before: May 4 21:00:15 2025 GMT
Not After : May 5 21:00:15 2025 GMT
Subject: CN=71e7bade20870601890902aa75f58bb3dc8db27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:81:02:23:0e:20:9f:af:a6:8c:15:d8:52:
36:b8:79:48:8c:d3:49:73:dc:e4:c4:24:19:9e:32:
67:f5:9c:84:e7:6e:02:43:3c:f8:70:63:e5:57:09:
c6:ac:87:24:1b:44:2a:ab:6b:fa:f8:f4:78:71:77:
9a:ec:b6:6f:8a:10:65:b0:ea:cf:85:2b:92:6d:76:
31:3c:9a:01:6b:94:a0:92:99:4e:3d:89:bc:9d:68:
75:55:02:72:31:f4:35:75:32:b2:c3:c9:13:c6:52:
d4:88:2b:e8:82:a3:d8:ca:b0:b3:52:64:18:bb:43:
cb:5c:d7:2a:c0:12:ad:98:4a:80:4a:ae:2b:37:c9:
be:60:7e:71:fb:7d:e6:7b:8c:a2:a3:5e:23:ae:c0:
f6:c2:af:8c:da:a1:64:fb:0d:4a:7d:43:3b:54:ab:
11:5b:52:84:61:f0:93:8d:42:d6:7f:f5:25:95:42:
4c:fc:6b:35:08:15:42:39:aa:28:14:02:35:66:62:
94:b7:81:85:02:bc:e3:45:59:81:60:9f:b6:12:4e:
2d:17:2c:ce:d9:e4:4d:3f:54:a5:ee:de:96:f8:03:
bb:f1:b4:f8:74:60:2e:53:37:9a:66:bf:16:e7:57:
eb:16:d8:c7:b2:17:55:ba:1e:ce:8d:4e:06:cf:51:
b0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E7:BA:DE:20:87:06:01:89:09:02:AA:75:F5:8B:B3:DC:8D:B2:7D
X509v3 Authority Key Identifier:
keyid:3C:92:19:DA:C3:58:49:86:E7:8B:41:DC:9F:FB:62:26:23:B4:AC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b0d1d2-842c-4d05-a623-b50c2f2e4704/1/PJIZ2sNYSYbni0Hcn_tiJiO0rGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:87:f6:49:6f:db:2f:48:a5:47:74:4e:85:9a:8c:1a:22:b3:
a1:e6:83:30:13:0e:5b:89:d8:86:69:55:3b:5d:0c:8d:f6:4e:
f5:9f:a3:d5:ee:3f:86:1a:9e:6d:be:18:8d:5a:e7:4e:05:7b:
47:10:5b:54:ba:a8:62:90:78:21:63:eb:b3:b6:9a:b8:81:bf:
8d:de:0a:4d:5f:9d:87:ab:ca:d3:6c:27:69:52:16:42:b3:44:
cb:ab:10:84:1a:23:bc:a7:75:5a:b2:ce:20:8d:fa:83:12:41:
4d:4d:16:15:04:24:44:91:df:32:37:f5:87:09:64:9e:2a:11:
7c:76:21:a9:b3:66:06:17:76:d7:c4:c4:38:b1:ce:61:36:cf:
a6:4b:0e:9f:4b:96:fe:70:1e:15:da:d3:92:37:40:06:c2:d9:
4b:f9:6c:f6:c1:bf:97:95:63:41:f5:20:14:7e:43:81:02:85:
ce:a8:cf:47:bd:e4:b2:c8:b7:02:25:df:ed:cc:8b:f9:de:07:
ec:ad:cf:8c:3b:7c:91:9d:dc:c8:a8:14:23:f8:b8:ec:8f:1f:
de:9d:21:a9:10:db:65:3b:d7:1c:b0:7f:fa:1b:52:53:b9:94:
cb:df:18:d7:3e:d8:4f:8d:e3:f0:ee:f6:ec:b9:36:68:03:ea:
ae:ba:f8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:21:59 2025 by rpki-client