Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: gMidma427GVV9UQPlqiBfpFBeTjpMIA9SjmNDHQLI7Q=
Subject key identifier: C5:EA:85:3A:C9:2A:E6:1D:48:F4:53:36:14:E7:D1:34:A1:86:F9:B1
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 0196C2A6E796EE0795EFCF333C7D7C435179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0CC5
Signing time: Mon 12 May 2025 04:00:40 +0000
Manifest this update: Mon 12 May 2025 04:00:40 +0000
Manifest next update: Tue 13 May 2025 04:00:40 +0000
Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: dPJaogwaI9S9kvpa/Quq/KIHUNbrjgHNjPlttDm+7og=)
2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=)
3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:e7:96:ee:07:95:ef:cf:33:3c:7d:7c:43:51:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: May 12 04:00:40 2025 GMT
Not After : May 13 04:00:40 2025 GMT
Subject: CN=c5ea853ac92ae61d48f4533614e7d134a186f9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:9e:55:b7:1a:09:50:ae:1f:1d:40:4f:9c:
e9:93:38:d1:43:31:25:7b:96:10:e9:a5:16:6e:96:
e9:8f:de:cb:37:8a:d8:b4:3c:1e:0c:6f:5a:4c:6c:
a4:c7:87:bb:97:84:b7:62:1e:0c:0a:bc:8b:4d:3a:
15:e1:e0:dd:5c:a8:df:e9:05:7e:bf:ad:8a:a5:e5:
b8:bd:d1:8f:08:59:db:4a:1b:fc:d4:31:cc:f5:cc:
a7:9b:e2:41:d0:2e:00:34:df:87:20:dc:e0:1b:40:
bb:40:4f:f0:ea:c3:d0:72:76:53:92:d9:36:fe:48:
3b:3b:c9:27:3d:b4:19:61:23:f0:41:01:b7:e0:26:
29:6f:99:dc:9b:0b:19:40:8f:cc:1c:8a:85:9c:00:
77:1b:bd:9b:67:81:32:98:bd:aa:ee:bf:50:fb:ea:
6d:10:a5:42:d4:3f:21:b6:7a:7d:16:42:8a:56:88:
66:5b:dc:4c:50:0d:05:cb:02:5c:a6:2a:21:28:3a:
e0:35:22:ae:cc:b8:a3:b2:5e:6f:87:7b:51:a9:5e:
af:2e:63:fc:4a:41:15:fa:05:2e:75:9a:78:7f:54:
b2:aa:6d:86:84:a0:de:19:14:70:85:c0:6d:c8:ca:
79:53:5d:32:4b:e2:5b:f6:d3:27:f7:60:16:7f:86:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EA:85:3A:C9:2A:E6:1D:48:F4:53:36:14:E7:D1:34:A1:86:F9:B1
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:20:b8:d3:92:e4:69:c0:8c:46:c6:30:be:42:f2:30:81:bf:
e5:e2:9e:8e:7a:4e:9a:83:49:ab:b5:d3:eb:96:b7:58:46:6e:
d6:06:0e:fe:d7:7d:c0:72:01:f6:e1:a1:ec:1f:48:e1:a2:6c:
0c:01:76:fd:e6:19:ff:57:89:0d:ce:a0:11:20:20:ab:29:86:
a3:21:f4:cb:c2:d6:96:be:95:43:e3:ee:4d:85:4c:ff:e4:8b:
4d:37:2e:01:a1:10:d3:cc:3a:b2:08:ec:d8:2a:c1:3b:99:08:
d2:a3:a1:22:1a:e2:ba:e5:9a:ef:c3:95:08:92:d0:cf:52:91:
ed:c5:90:c7:a4:68:22:30:e1:3a:68:a9:32:c0:90:3e:e9:20:
4d:95:77:08:e3:71:8d:77:25:13:32:91:c7:0b:42:a9:16:5e:
95:85:1c:2f:83:23:44:2d:0a:43:7f:8b:18:45:6b:3f:6e:a7:
e7:5d:41:16:44:f8:1e:d9:16:3b:50:f4:10:58:dc:fb:75:79:
3b:a3:89:eb:9b:b8:58:42:60:cd:b7:6f:49:d3:bc:73:a5:69:
8a:7c:a2:0c:19:fd:38:7f:fd:5d:5c:5c:ac:f4:71:17:b2:ca:
0a:b3:4c:6e:2e:18:f8:67:c0:33:cf:2c:a0:d3:f6:06:60:6f:
bd:21:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:13:48 2025 by rpki-client