Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json)
Hash identifier: JddXP3kadRjotdJUP3GcFbmcO/iMgeiSKJ/76cbIACU=
Subject key identifier: BF:E4:00:32:CF:E5:3E:A1:5B:C1:C5:D3:20:96:7F:9C:1D:FD:08:01
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 01969F0890F414AE6EFEA19B4CCC69FFBB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
Manifest number: 0DD1
Signing time: Mon 05 May 2025 06:01:00 +0000
Manifest this update: Mon 05 May 2025 06:01:00 +0000
Manifest next update: Tue 06 May 2025 06:01:00 +0000
Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: H1zzqr6L3aEip01kc3mDBVR3ossKmvWU2pa7cYrhs1Y=)
2: gt9goB76oJJ9IidA_tfxI6lWDIw.roa (hash: q0BFU46k9v4mjBVsSe1ZjIuLriX+JzS+b+gMagD0YfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:90:f4:14:ae:6e:fe:a1:9b:4c:cc:69:ff:bb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: May 5 06:01:00 2025 GMT
Not After : May 6 06:01:00 2025 GMT
Subject: CN=bfe40032cfe53ea15bc1c5d320967f9c1dfd0801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:30:1b:79:93:1d:f7:63:c6:04:17:17:17:
f3:81:f0:7c:86:d5:ac:1b:98:65:7b:96:03:40:95:
c8:3b:39:f0:c9:7d:67:a4:e9:eb:8c:72:73:94:9f:
72:7e:b0:dc:39:d8:6b:35:96:30:bd:aa:7d:4c:95:
2d:52:b9:f5:47:38:fe:3e:77:30:ad:56:cd:27:19:
a1:3f:bd:dc:0d:d9:f1:98:33:c1:ba:e6:ca:2e:bf:
2c:66:be:80:b3:b5:0c:ad:22:06:15:df:14:ee:2b:
fe:fb:4b:2b:66:07:0c:8c:94:58:1e:da:ac:86:bc:
32:1d:41:c4:ed:f8:63:82:df:0f:1b:e6:51:aa:7e:
8c:3f:cb:93:fc:86:d7:71:bf:41:78:ed:ce:bd:af:
0c:74:e7:23:5d:27:30:91:10:2a:75:72:be:bb:b7:
de:38:a9:00:b5:7d:8d:a2:b6:eb:e0:e1:eb:ad:84:
e3:99:ab:e2:23:56:fb:a6:ca:47:32:17:70:c5:14:
4b:6f:f9:9e:35:68:72:aa:29:82:f3:28:e6:88:ab:
c9:e4:d9:1f:a3:09:10:7e:94:39:38:cf:05:04:8e:
ae:c4:d5:83:ad:4e:8f:99:88:a8:03:ff:05:a7:ad:
e2:8d:c1:47:5a:c5:7d:35:d7:74:7b:5e:59:e5:54:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:00:32:CF:E5:3E:A1:5B:C1:C5:D3:20:96:7F:9C:1D:FD:08:01
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8e:4a:2d:77:72:f7:7d:28:3e:0f:38:07:f5:fe:14:34:50:
bb:67:59:79:31:b9:10:55:e3:0b:8b:62:43:e6:71:aa:f1:0b:
9e:72:c9:b7:c8:89:0a:95:c2:f0:eb:13:e1:e6:4f:36:ea:2e:
dc:39:40:35:6b:62:fe:ee:8e:ba:24:ec:1e:f4:1f:99:13:78:
ab:49:53:ee:fb:64:7c:f5:16:23:7b:d7:70:4e:bf:0a:dd:ce:
6a:77:fb:f9:fc:b9:03:19:e1:04:bb:6f:1e:0e:5f:04:26:7b:
33:40:26:c8:d0:d2:a2:22:37:0e:2d:21:54:36:a8:06:ce:40:
c1:53:a0:e0:00:d7:a3:c4:3e:8b:1c:9f:d3:2b:e4:1d:b1:b3:
8c:6a:7f:57:81:2b:fc:5d:f8:02:18:b7:e9:24:68:54:2a:ac:
39:4a:31:1a:1e:b8:35:15:f1:57:17:b2:e8:fd:2e:13:a2:19:
fb:ab:0a:6f:e5:1d:86:a9:d7:29:43:a3:49:b5:2a:d6:59:51:
a5:3c:5f:a5:5a:34:97:f2:b8:d5:0f:04:bf:22:20:ab:3c:50:
60:3b:c0:17:33:f5:d3:93:c6:83:e8:da:65:5d:02:bc:17:35:
3a:fa:33:1f:54:6c:2d:fa:96:d2:35:6b:4c:49:ec:78:c4:3c:
26:0e:1d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:32:41 2025 by rpki-client