Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: tV7H+C/vu6tMzDIWnG/qDLUscWx+hVsGT6+IgWhwDrs=
Subject key identifier: 26:F1:1F:69:0D:64:A4:6D:DA:A2:17:C8:65:F6:D0:A1:F5:94:34:3A
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 01969E9ABB86986DF7C5A9171D7527869E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 05DA
Signing time: Mon 05 May 2025 04:01:02 +0000
Manifest this update: Mon 05 May 2025 04:01:02 +0000
Manifest next update: Tue 06 May 2025 04:01:02 +0000
Files and hashes: 1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: mWGEOGT6jJrikf4eNXOdvPM5f4BkGzFc6/ShMwl9g0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:bb:86:98:6d:f7:c5:a9:17:1d:75:27:86:9e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: May 5 04:01:02 2025 GMT
Not After : May 6 04:01:02 2025 GMT
Subject: CN=26f11f690d64a46ddaa217c865f6d0a1f594343a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:4d:49:d5:51:5c:60:79:6d:0d:fe:ae:5c:
d8:eb:df:fe:c4:be:74:af:61:3f:70:0b:fa:75:59:
f4:c7:1e:ed:5a:a7:3d:89:2e:ce:06:20:e0:4d:d0:
8a:0d:ab:96:60:38:44:f6:45:a4:1f:0d:0a:a0:51:
2b:f2:12:a7:e5:dc:14:9e:4c:74:4f:f7:b3:7b:1b:
85:87:69:9d:99:92:db:65:1f:fe:4d:8a:96:bb:65:
03:57:56:f6:66:0d:df:b6:69:cd:f1:42:da:b0:48:
38:c4:fb:14:80:a0:1a:91:23:d5:dc:18:1a:42:15:
0c:cf:f2:a5:d1:e2:2c:b9:79:47:d9:c6:2b:18:71:
cc:1c:64:c2:9a:78:4f:e8:1a:f7:1e:d6:39:3b:a7:
7e:42:1c:3e:21:69:dc:39:92:45:9b:b6:2f:67:b5:
5d:1c:da:1d:ba:d0:41:2b:a6:2a:92:01:f0:d8:9b:
f7:5a:4f:38:48:8a:3f:5b:5b:0a:44:01:c1:34:01:
28:d0:e7:2c:ec:b5:83:6a:00:76:fb:f9:63:c7:d6:
05:ca:58:66:a8:8e:50:c9:0f:c6:8a:bf:8f:0a:18:
41:1c:03:5a:c2:41:ee:9e:97:4c:e0:a0:a5:f9:cd:
76:f0:76:9d:b3:2a:f9:7f:8d:8c:9e:30:00:d6:3e:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F1:1F:69:0D:64:A4:6D:DA:A2:17:C8:65:F6:D0:A1:F5:94:34:3A
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:55:9d:29:11:98:09:40:51:4a:e3:8e:42:6c:bc:88:7a:99:
92:9f:65:b3:a8:e5:35:e0:5d:b0:b0:69:5d:25:61:57:20:58:
29:8c:5b:0b:e8:60:03:56:2d:95:c5:63:de:ef:00:bb:d1:99:
76:1a:65:5d:aa:9b:e6:51:1e:63:78:c6:c4:65:36:c7:e8:d8:
c3:a2:27:1f:04:f5:62:65:9f:8f:9e:30:f7:ef:b1:60:8f:8d:
48:2c:04:b6:8b:52:0d:45:df:08:4d:43:00:57:d2:9b:68:cd:
d3:93:2a:b1:fa:a5:c8:c2:53:9e:8c:e3:45:61:a7:72:fa:c0:
8c:b7:16:f9:f4:07:6d:d0:59:c9:b4:59:ee:8e:54:02:5b:ac:
78:60:37:ff:f8:05:39:1c:20:23:71:a5:28:68:37:ad:b2:ee:
4c:9d:43:31:05:b5:38:44:2e:3a:79:20:ef:5f:e0:27:dd:1a:
24:07:f6:e0:31:d5:ee:e2:64:6e:ab:67:b4:49:ed:7d:59:3b:
d9:05:4d:4e:d4:c6:8e:ac:f8:82:24:1e:b8:da:b6:23:45:00:
3a:79:a5:b6:11:1d:f0:b0:80:fd:20:12:d4:41:ce:60:cd:e2:
0a:c4:ed:43:55:19:ac:c8:48:38:83:d6:7d:00:32:bd:37:4c:
54:fe:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:58 2025 by rpki-client