Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: 7zQ3lzh+CZHyhzPur8jtcshgp2pSaVjQku2W4IaIjFY=
Subject key identifier: 9F:34:11:A9:9C:EF:04:A5:D4:EA:91:6E:AC:8C:91:EC:13:02:FC:96
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 0196C23900CE2E28E4AAAA0ED6E297E5B8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 02F2
Signing time: Mon 12 May 2025 02:00:37 +0000
Manifest this update: Mon 12 May 2025 02:00:37 +0000
Manifest next update: Tue 13 May 2025 02:00:37 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: FvejwxnT3fvsGrN3TksVtul75dnV3Qz6OBxlj7VZmLc=)
2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:00:ce:2e:28:e4:aa:aa:0e:d6:e2:97:e5:b8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: May 12 02:00:37 2025 GMT
Not After : May 13 02:00:37 2025 GMT
Subject: CN=9f3411a99cef04a5d4ea916eac8c91ec1302fc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:82:f0:1c:b9:1f:31:c4:e7:05:8d:03:41:
73:a4:90:98:a5:e5:25:dd:0e:04:bb:31:09:2f:34:
c5:1d:3e:14:6e:54:04:b5:1d:0c:2e:02:c2:49:a8:
f0:9f:0f:ea:b9:69:13:1a:f5:5f:73:d4:6a:03:f5:
ce:ba:b3:4b:e6:89:03:65:4a:09:d8:a2:76:63:6d:
e2:93:29:d9:b0:f2:4d:2c:6b:46:ba:9c:59:2b:f5:
2e:4e:9b:f6:d4:c7:00:a9:63:77:7a:6d:31:cc:0a:
79:e8:50:c4:cd:81:5f:e0:0b:2a:ab:04:67:79:4f:
4a:9b:ce:fc:f7:29:80:39:c6:de:a0:3e:5e:4c:59:
83:f4:58:f9:be:db:8e:dd:c6:fd:f6:77:5d:dd:67:
b8:1a:84:61:d6:1d:33:ee:85:b6:85:0f:d6:d1:6f:
fa:b8:53:40:1e:8b:56:16:a7:aa:87:26:9f:e6:2d:
6c:83:78:f0:e8:04:cd:0b:4c:53:3e:64:d7:41:3f:
02:c6:5c:c7:d0:79:dc:0a:e6:52:dd:81:58:fc:15:
26:55:34:80:94:5d:46:e3:47:95:45:64:ec:73:3c:
38:f9:da:b5:cb:b3:24:a2:33:d7:da:73:e0:d8:48:
b3:21:b6:3b:06:f1:5f:42:ed:21:6e:e1:ec:bd:af:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:34:11:A9:9C:EF:04:A5:D4:EA:91:6E:AC:8C:91:EC:13:02:FC:96
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ab:1a:b4:33:f3:30:29:d5:12:15:01:25:80:d3:78:03:57:
8a:9b:09:ca:b1:b0:72:28:46:77:d1:5e:63:95:2f:80:82:03:
9b:8f:cb:84:34:e9:52:e6:e3:46:71:59:eb:7d:60:a7:6c:a0:
80:e7:7f:b1:ee:fe:79:44:01:15:a3:2f:f6:ec:3b:3e:c5:cd:
b6:5b:8b:34:96:8c:b2:5f:4d:ee:4b:da:d7:d5:e7:fd:09:80:
fa:8d:9c:bf:86:e5:74:d3:52:a0:a0:da:87:cb:11:4b:98:8d:
18:6d:b1:c7:c7:72:74:6e:7a:71:19:b7:37:5e:9f:7f:41:00:
87:be:75:e1:96:3a:a5:08:6b:4f:57:06:a4:ed:2c:5f:50:ed:
6f:bf:8e:b8:ec:88:44:91:22:b5:08:ec:54:22:b4:06:a6:28:
d1:67:88:c3:a4:02:37:16:7e:91:82:e4:aa:3e:e5:94:49:ba:
8d:f2:e0:17:9a:89:f8:3a:35:25:26:53:91:d2:54:0f:87:42:
f8:37:6c:6b:f9:a3:77:19:c3:db:b1:89:09:dd:cf:89:85:fa:
15:6e:e4:39:f9:2b:18:78:a4:86:d7:d0:80:bc:78:60:3d:a1:
a8:a6:b0:5b:65:41:26:ca:ca:86:93:aa:57:01:1e:b0:16:4e:
58:ea:b5:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOQDOLijkqqoO1uKX5bjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjODdmZWI0YWI5YTU3NzY1ZmMwYTY2NDU3MmMzNTAzMmU4
NjZhZDQwHhcNMjUwNTEyMDIwMDM3WhcNMjUwNTEzMDIwMDM3WjAzMTEwLwYDVQQD
Eyg5ZjM0MTFhOTljZWYwNGE1ZDRlYTkxNmVhYzhjOTFlYzEzMDJmYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrKC8By5HzHE5wWNA0FzpJCYpeUl
3Q4EuzEJLzTFHT4UblQEtR0MLgLCSajwnw/quWkTGvVfc9RqA/XOurNL5okDZUoJ
2KJ2Y23ikynZsPJNLGtGupxZK/UuTpv21McAqWN3em0xzAp56FDEzYFf4AsqqwRn
eU9Km8789ymAOcbeoD5eTFmD9Fj5vtuO3cb99ndd3We4GoRh1h0z7oW2hQ/W0W/6
uFNAHotWFqeqhyaf5i1sg3jw6ATNC0xTPmTXQT8CxlzH0HncCuZS3YFY/BUmVTSA
lF1G40eVRWTsczw4+dq1y7MkojPX2nPg2EizIbY7BvFfQu0hbuHsva/UiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ80Eamc7wSl1OqRbqyMkewTAvyWMB8GA1UdIwQY
MBaAFDyH/rSrmld2X8CmZFcsNQMuhmrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQt
NDhmYjAwZmM5N2I2LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wZTQxYTYtZDg0NS00ZGExLThiMzQtNDhmYjAwZmM5N2I2
LzEvUElmLXRLdWFWM1pmd0taa1Z5dzFBeTZHYXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiasatDPz
MCnVEhUBJYDTeANXipsJyrGwcihGd9FeY5UvgIIDm4/LhDTpUubjRnFZ631gp2yg
gOd/se7+eUQBFaMv9uw7PsXNtluLNJaMsl9N7kva19Xn/QmA+o2cv4bldNNSoKDa
h8sRS5iNGG2xx8dydG56cRm3N16ff0EAh7514ZY6pQhrT1cGpO0sX1Dtb7+OuOyI
RJEitQjsVCK0BqYo0WeIw6QCNxZ+kYLkqj7llEm6jfLgF5qJ+Do1JSZTkdJUD4dC
+Ddsa/mjdxnD27GJCd3PiYX6FW7kOfkrGHikhtfQgLx4YD2hqKawW2VBJsrKhpOq
VwEesBZOWOq1zQ==
-----END CERTIFICATE-----
Generated at Mon May 12 05:37:15 2025 by rpki-client