Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier: Wpkbiir7MhAvk2shJ+Wa3ZWxtJZ6ccDxkfK9OQayjKM=
Subject key identifier: 8C:55:7D:A1:BC:49:E6:E6:47:A7:82:36:C0:D8:F3:07:2E:6D:63:DD
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 0196BAB64141599C7E2324149B67C33D534E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 15:00:28 +0000
Manifest this update: Sat 10 May 2025 15:00:28 +0000
Manifest next update: Sun 11 May 2025 15:00:28 +0000
Files and hashes: 1: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (hash: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=)
2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: IaWWXAtmETkEgia860vPIIYWJFcVj/CDtFhKNulZlrg=)
3: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (hash: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=)
4: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (hash: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:41:41:59:9c:7e:23:24:14:9b:67:c3:3d:53:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: May 10 15:00:28 2025 GMT
Not After : May 11 15:00:28 2025 GMT
Subject: CN=8c557da1bc49e6e647a78236c0d8f3072e6d63dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:fc:3c:11:e1:b4:b1:f5:19:34:8e:26:ed:
94:21:fa:bb:d7:1f:8a:f0:af:df:41:09:0e:ef:c2:
10:b3:64:17:2e:9c:a2:4c:a1:67:45:7f:a3:8f:6f:
7b:04:cf:b7:c9:24:d1:b2:91:69:b0:ba:24:2c:8f:
82:d0:9a:54:c0:6f:10:c9:d9:3f:1e:a7:0c:fb:68:
a3:45:bd:7c:1c:45:87:fe:cc:47:c1:e9:e0:dd:62:
2d:9a:71:00:53:bf:23:b7:4d:06:7b:c0:c3:6d:31:
40:56:3d:fa:3c:33:90:d9:70:98:1a:01:2e:9d:15:
b5:0a:9f:ea:21:45:b4:aa:bb:af:2d:b0:ac:ec:d2:
03:74:b4:78:6b:ee:fc:b3:71:2a:d5:d7:4c:bc:de:
92:f9:6f:cf:25:d4:0c:61:eb:50:8c:44:dd:3f:36:
43:20:40:6a:d6:72:f3:a5:2f:31:b0:c8:52:63:0a:
cb:c8:a0:6b:c7:c1:24:93:2f:cf:8f:b1:bf:21:37:
94:a4:9c:49:d4:03:d2:1d:ef:b0:7e:d1:d7:d4:36:
28:65:b8:ec:03:06:e5:42:a2:ae:21:4f:e1:b3:30:
75:82:83:38:07:b3:77:69:3f:e1:d7:5c:75:37:bb:
59:cc:8e:f1:1a:96:b5:d1:b3:b6:33:60:68:c2:a4:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:55:7D:A1:BC:49:E6:E6:47:A7:82:36:C0:D8:F3:07:2E:6D:63:DD
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9c:d0:b3:10:67:43:3d:8d:a6:2b:9e:17:ba:64:73:dc:ce:
b9:5b:52:81:19:45:bd:1f:d5:a5:b7:29:51:80:0e:76:1f:50:
cd:04:6d:ff:f4:13:6b:35:f2:94:e3:b4:2c:30:d2:7c:88:b8:
cf:32:3c:a9:59:99:66:86:94:88:e3:be:d8:16:c1:bd:12:b8:
04:eb:64:54:d9:9e:7e:8d:03:2f:8f:d5:91:aa:a4:2f:e6:4a:
5f:73:a9:15:e4:41:15:28:32:b8:cb:4c:50:24:c9:51:57:c8:
6b:b2:f6:1c:5c:ba:46:b2:72:a6:a3:26:c3:04:45:3f:ad:80:
6d:82:74:e0:86:bd:f7:e3:81:e0:d3:5c:0d:19:cb:a4:26:49:
eb:2a:73:be:4d:1b:77:50:17:49:e1:81:88:16:96:ce:e0:60:
fb:10:35:8b:78:e9:18:bc:b5:37:65:70:92:4b:65:95:ea:c5:
23:0c:06:ba:97:3e:7d:e1:6b:43:58:cb:d5:0d:54:cc:97:44:
7c:21:fd:00:63:6e:68:89:e3:f8:59:01:ea:d9:ed:ed:0a:15:
e4:24:e8:f9:62:68:47:04:fa:db:f0:01:65:c8:67:5f:1a:8c:
e6:4c:c4:ad:cf:b1:84:a7:29:6b:b5:06:ef:2b:8a:3c:43:05:
93:ed:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:46:15 2025 by rpki-client