Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: dShEVl7WZosV5yEX7jq+lAWNZ9Xz92ECkNsLCCZjuKY=
Subject key identifier: DE:26:A2:68:E0:C5:F3:F4:45:85:3D:4F:EE:6D:0B:1B:BF:52:16:CE
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 0196A653E5DD27FBAFA83743F508AD0E0A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 01B1
Signing time: Tue 06 May 2025 16:00:38 +0000
Manifest this update: Tue 06 May 2025 16:00:38 +0000
Manifest next update: Wed 07 May 2025 16:00:38 +0000
Files and hashes: 1: 2DxOeFRwGr0ZkLmLFLoh-xJZObE.roa (hash: aeAg8fL5FqA68LiiZmemChuMc/666QpvAefI6BAnFLU=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: vtcst5fsHeY/EJYl4F697R9lHkUepQwCxA0yEMihhdA=)
3: QubVM_6N5lx1EgDJtxcjPI_RV3o.roa (hash: 0U5OEeLVzA3Fo3jdio9FkyyDkZiO1CmcUt6CGyuWF74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:53:e5:dd:27:fb:af:a8:37:43:f5:08:ad:0e:0a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: May 6 16:00:38 2025 GMT
Not After : May 7 16:00:38 2025 GMT
Subject: CN=de26a268e0c5f3f445853d4fee6d0b1bbf5216ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:29:cd:38:8a:ab:b4:88:88:0e:e2:05:5b:
18:46:b1:81:ca:e2:c9:30:78:81:ef:2f:52:d3:b8:
1a:04:d5:a0:80:b0:d6:48:97:d1:75:49:33:a6:c8:
cd:b6:02:3c:d7:6b:ff:f0:e0:71:8a:3e:d6:46:d7:
e4:52:28:b2:90:28:18:03:6c:80:96:31:f0:91:e3:
46:6f:3b:82:83:25:90:77:3c:e4:73:85:6a:4f:c3:
51:a6:eb:72:4e:eb:0b:3a:fa:9e:c2:3d:26:0d:fe:
29:fc:2a:27:04:b4:7a:4a:36:ee:22:a8:6a:76:f0:
c8:4f:d2:81:77:a0:37:33:f6:30:0a:f5:ca:1c:da:
90:d4:26:bd:27:f3:23:2b:cd:85:0f:28:e7:17:1c:
a6:16:50:72:66:78:c5:b5:81:15:4a:47:06:48:ba:
92:13:a2:9c:20:79:d8:69:d2:0d:35:5a:3e:f8:c3:
8d:f8:38:e4:cc:03:9a:4c:03:01:55:66:b1:7c:e6:
e6:51:e0:49:65:67:0b:e2:01:d1:02:0a:73:0d:17:
a5:7c:ad:d0:5e:37:36:73:8e:77:c1:02:e5:b3:88:
af:67:fa:fa:4d:2f:1a:ff:cd:14:dd:7a:78:ba:eb:
a7:6a:44:d4:d1:e0:e6:ed:ba:80:f5:17:9e:0c:a3:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:26:A2:68:E0:C5:F3:F4:45:85:3D:4F:EE:6D:0B:1B:BF:52:16:CE
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0e:57:e8:a7:68:49:a7:f0:27:a3:3a:64:20:da:89:e0:86:
ff:74:c3:c7:b5:fb:47:9d:b7:9b:97:fd:25:66:11:19:da:28:
16:97:4f:3b:ad:b1:9d:1d:bc:30:d6:48:6b:67:cd:d9:08:79:
8b:b4:ea:3d:60:64:2a:f6:48:4a:ab:e1:e6:d6:30:25:9d:d5:
cf:d8:09:f8:44:5a:81:82:32:63:46:29:73:4c:3e:e3:21:fd:
99:fc:62:13:1f:fd:b6:1c:13:68:b7:91:dd:73:37:77:ff:b7:
dd:a7:53:cc:eb:e3:59:75:cd:d3:18:8d:9f:05:80:f2:fd:62:
26:22:54:84:0e:31:41:3d:63:9f:b4:51:5e:3a:34:56:54:98:
13:52:16:6b:c4:38:01:e7:9d:90:4b:6e:31:aa:8d:39:a4:b8:
ee:f7:6e:62:80:bf:d1:8a:2b:5f:a1:86:5e:97:0b:c2:4b:c9:
62:98:ad:ee:61:9d:ec:d2:07:88:08:d7:e8:7b:bb:10:52:65:
a4:27:31:68:3e:61:ae:37:cc:37:ae:48:40:23:8e:9b:b4:e0:
c3:db:ad:66:61:84:ec:48:9d:3e:61:d1:33:bd:89:f4:0e:b8:
c6:26:ea:30:ae:e7:4d:0f:20:73:fe:27:ed:71:2a:9b:59:3d:
73:c2:7b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:36:11 2025 by rpki-client