Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json)
Hash identifier: yacQ5iBeHcgDY3zySA67Ey6hqSLwN2mc/NM6sVmuQvs=
Subject key identifier: 58:C4:23:7F:C8:12:D9:60:62:C9:FB:0B:68:49:56:D7:5B:D3:48:27
Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947
Certificate serial: 0196C194587218CB36288AD3401A9B3CC137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
Manifest number: 49
Signing time: Sun 11 May 2025 23:00:46 +0000
Manifest this update: Sun 11 May 2025 23:00:46 +0000
Manifest next update: Mon 12 May 2025 23:00:46 +0000
Files and hashes: 1: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: IbMBWWhNA61XYD92zDadtA6vOzFU503+T4J7NwzH6G4=)
2: QmVb0SoXYnlMedY0w_3_iXHpV1g.roa (hash: a3gXOD/NjdWHnE6P9SQzEQhqDOtbuugfMMDorP0aI2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:58:72:18:cb:36:28:8a:d3:40:1a:9b:3c:c1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947
Validity
Not Before: May 11 23:00:46 2025 GMT
Not After : May 12 23:00:46 2025 GMT
Subject: CN=58c4237fc812d96062c9fb0b684956d75bd34827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:08:ca:1d:98:a8:e7:b5:3c:5f:ad:0c:73:3d:
dc:76:7b:40:70:97:b5:97:51:78:0b:da:c8:d3:f3:
03:ee:a8:e7:6a:ed:ac:6b:be:5b:a1:55:51:7a:21:
35:20:8a:da:8f:24:88:e3:60:75:74:7f:c5:20:b0:
f8:37:84:89:78:a0:c2:fd:41:7b:b0:ca:8b:e5:cb:
4c:4d:3d:ea:28:fc:e5:7c:dd:cb:b0:a1:c6:47:ea:
4f:ff:a0:37:7d:e8:a6:c7:3a:c0:91:73:64:7b:5d:
55:09:9e:3f:db:42:91:c8:d0:c6:73:0e:eb:12:cd:
05:20:b3:fe:70:d3:97:e9:5e:8e:9d:96:16:23:4c:
13:af:80:9b:d1:60:3e:26:da:41:26:57:1f:1b:ab:
63:f9:00:f9:14:8a:dc:30:40:70:25:ca:7f:31:93:
c7:49:25:90:74:e3:09:b3:61:75:1b:ed:b2:78:82:
80:0a:0c:33:0a:3f:18:c4:2f:f9:47:20:7e:e1:0f:
6a:17:fa:5b:3b:4e:f2:97:f0:ce:f5:a4:3b:0e:07:
c4:eb:07:ce:52:ca:eb:00:0c:4f:99:e2:3e:1f:e2:
39:25:cb:a9:b7:26:70:cd:f7:ae:2e:5f:42:db:46:
fe:b6:ba:e7:27:ef:2a:2b:d7:1f:a8:cd:2d:92:4b:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C4:23:7F:C8:12:D9:60:62:C9:FB:0B:68:49:56:D7:5B:D3:48:27
X509v3 Authority Key Identifier:
keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:20:14:35:4b:c1:d2:4c:01:b4:f1:7a:c3:40:b1:dd:a1:74:
a7:35:5c:4a:d7:c3:cb:fa:72:6c:3b:af:90:46:a0:a4:0e:5b:
ac:ca:7c:af:a3:a4:cf:ed:a8:c9:7c:92:ba:d7:e7:aa:60:8f:
d0:3d:a5:dd:a1:68:26:2c:98:d0:34:6d:d0:70:a2:8e:15:99:
10:53:b3:da:4e:a9:25:d7:79:d9:d1:10:28:c4:cf:c3:37:c4:
c0:9e:15:7c:ed:ec:ed:18:9d:29:5c:6f:fd:d7:9f:d9:0a:ba:
49:83:a0:a4:32:5e:4e:d9:52:f8:21:da:2e:10:34:db:6c:50:
fc:f8:dd:f4:57:60:af:15:50:48:da:6e:e3:55:f9:35:c5:4d:
44:72:5a:77:31:6b:00:a1:bc:73:aa:55:ec:b3:6a:9b:62:79:
e2:13:c2:33:b0:8d:75:4c:91:58:73:d5:43:6b:34:49:35:56:
79:5b:dc:82:64:ec:04:59:99:aa:c9:e5:7a:3b:92:c7:c9:cf:
b3:79:13:e4:de:a7:13:d8:9b:30:16:ae:9f:9f:56:77:64:74:
67:26:ef:97:5b:e9:00:46:ae:5d:3b:9d:9a:92:94:dd:14:20:
30:89:51:1e:9c:98:bd:c3:e1:a8:35:1a:71:f9:a8:db:0a:64:
9a:2e:19:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBlFhyGMs2KIrTQBqbPME3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTllNmYyN2Q5MjgwOTVlNTYwZGU3Njc4ZjI4ZTM0NTlk
NTU5NDcwHhcNMjUwNTExMjMwMDQ2WhcNMjUwNTEyMjMwMDQ2WjAzMTEwLwYDVQQD
Eyg1OGM0MjM3ZmM4MTJkOTYwNjJjOWZiMGI2ODQ5NTZkNzViZDM0ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QjKHZio57U8X60Mcz3cdntAcJe1
l1F4C9rI0/MD7qjnau2sa75boVVReiE1IIrajySI42B1dH/FILD4N4SJeKDC/UF7
sMqL5ctMTT3qKPzlfN3LsKHGR+pP/6A3feimxzrAkXNke11VCZ4/20KRyNDGcw7r
Es0FILP+cNOX6V6OnZYWI0wTr4Cb0WA+JtpBJlcfG6tj+QD5FIrcMEBwJcp/MZPH
SSWQdOMJs2F1G+2yeIKACgwzCj8YxC/5RyB+4Q9qF/pbO07yl/DO9aQ7DgfE6wfO
UsrrAAxPmeI+H+I5JcuptyZwzfeuLl9C20b+trrnJ+8qK9cfqM0tkkv3VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjEI3/IEtlgYsn7C2hJVtdb00gnMB8GA1UdIwQY
MBaAFDwZ5vJ9koCV5WDednjyjjRZ1VlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yMzliNzMtN2FhNy00YjU4LWIxMmMt
NzkyN2RlNTM5MzY0LzEvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yMzliNzMtN2FhNy00YjU4LWIxMmMtNzkyN2RlNTM5MzY0
LzEvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSAUNUvB
0kwBtPF6w0Cx3aF0pzVcStfDy/pybDuvkEagpA5brMp8r6Okz+2oyXySutfnqmCP
0D2l3aFoJiyY0DRt0HCijhWZEFOz2k6pJdd52dEQKMTPwzfEwJ4VfO3s7RidKVxv
/def2Qq6SYOgpDJeTtlS+CHaLhA022xQ/Pjd9FdgrxVQSNpu41X5NcVNRHJadzFr
AKG8c6pV7LNqm2J54hPCM7CNdUyRWHPVQ2s0STVWeVvcgmTsBFmZqsnlejuSx8nP
s3kT5N6nE9ibMBaun59Wd2R0Zybvl1vpAEauXTudmpKU3RQgMIlRHpyYvcPhqDUa
cfmo2wpkmi4Ztg==
-----END CERTIFICATE-----
Generated at Mon May 12 04:31:53 2025 by rpki-client