Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: 8/DSf7OXLc0hGtUbcsfoChWBK1jQ7dvD95uNfHF26jE=
Subject key identifier: 4C:3B:69:99:E4:BB:EC:44:1D:C1:9A:C1:F9:B7:48:9D:9B:32:29:D6
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 0196AA6783CCBA4C1731BA09701996DAF897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0C11
Signing time: Wed 07 May 2025 11:00:32 +0000
Manifest this update: Wed 07 May 2025 11:00:32 +0000
Manifest next update: Thu 08 May 2025 11:00:32 +0000
Files and hashes: 1: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: RF3qBRdat5WzcMZOeTfaPiXCoAT6imJpHcDMeK5E+io=)
2: x9hUxJfn47T_kDyiFQOIzJ-cz6A.roa (hash: xdaaD+GtntD/xfR79byZL40UTK4Nd3mN7SfVEUnzNx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:83:cc:ba:4c:17:31:ba:09:70:19:96:da:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: May 7 11:00:32 2025 GMT
Not After : May 8 11:00:32 2025 GMT
Subject: CN=4c3b6999e4bbec441dc19ac1f9b7489d9b3229d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:47:1d:f6:ef:8f:34:46:e0:c5:09:ad:11:
87:07:57:cb:12:76:a7:a3:00:1a:dc:5d:2c:2a:72:
22:ad:41:6f:9f:e8:89:48:e2:3c:ac:7f:fc:8f:95:
d4:d5:ad:eb:97:16:e2:7d:16:d8:90:d1:2d:e4:39:
3c:c8:f1:6f:57:b2:54:bb:0d:25:89:d5:e0:09:0e:
66:54:06:1b:97:a6:17:76:2e:88:44:a4:d0:79:d1:
ea:2c:15:13:7e:27:5b:4b:d6:d8:b2:84:77:54:0a:
af:d5:6a:75:d1:2c:51:1c:75:0d:3a:02:96:64:38:
85:9d:f9:af:47:15:80:19:0e:8d:6d:8b:26:84:30:
42:31:04:5b:72:66:cb:2e:91:61:44:6b:fd:32:cb:
de:33:de:16:c1:c0:25:3a:59:77:f8:68:32:67:15:
54:ba:34:0e:a4:58:60:a3:82:d1:6b:5c:bb:d7:39:
ed:76:6a:f3:26:d2:38:ab:70:5e:a2:30:0a:2f:e0:
da:e2:1d:ba:09:31:68:21:fb:16:3a:c2:bd:f8:3e:
99:f8:1e:70:eb:ea:04:52:4e:60:d3:15:0f:a6:4d:
47:2f:24:11:7a:77:05:37:49:a3:2a:cf:ad:e2:b0:
68:91:bf:6f:e6:e8:95:84:29:ba:3b:05:cc:00:42:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3B:69:99:E4:BB:EC:44:1D:C1:9A:C1:F9:B7:48:9D:9B:32:29:D6
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e1:bb:bf:f4:74:af:1a:52:73:a6:f4:b9:48:0e:85:82:84:
4d:e7:12:eb:89:a8:0b:f3:2e:9a:55:85:9c:c7:b5:26:cd:39:
20:45:ff:9b:f8:88:ff:d6:c5:ec:8d:75:99:77:cf:30:5f:a5:
1c:f3:82:d1:d1:9e:80:d2:23:ef:cd:5a:cb:63:f6:64:c5:a2:
ee:1a:8a:62:f9:8e:0c:eb:64:3e:19:9c:5b:d2:e3:bc:6e:60:
d8:b0:0b:be:14:4c:76:11:13:b9:bc:3c:fe:ea:7d:fc:cb:68:
25:92:7b:07:96:b5:b5:d4:02:98:9f:ca:3b:c5:ef:5b:11:82:
e8:a7:aa:6e:73:fa:55:34:9b:88:cf:1a:1c:36:f8:0d:c2:05:
e2:81:7b:10:ab:eb:82:47:98:93:28:ba:cc:06:82:92:34:d5:
8b:c2:89:da:cc:9b:2a:2d:f6:35:19:64:ff:69:ce:56:4f:b0:
c1:f9:f8:0e:f2:d8:da:1b:4c:4f:72:56:58:67:e1:d2:c9:56:
6d:b1:57:dd:9b:57:4f:33:ce:89:f0:b9:77:44:2d:c6:f9:16:
02:a8:2c:b1:76:34:ad:77:fa:c1:c1:a0:e2:a0:c4:1b:f1:c8:
83:cb:2b:7a:0e:01:e1:2f:f1:0c:71:5c:68:c9:2d:58:2e:22:
59:14:23:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:47:51 2025 by rpki-client