Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
File: PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json)
Hash identifier: Uj2JuFH6HtYIZRm5/r9D6U+ftq5aKb3f4veBneaoQPs=
Subject key identifier: 83:44:5B:48:39:27:C0:21:08:55:B8:7E:47:8E:9D:CB:98:D5:F8:31
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial: 0196AB4340D197C1D59EF378A1AABCFDFACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
Manifest number: 021D
Signing time: Wed 07 May 2025 15:00:33 +0000
Manifest this update: Wed 07 May 2025 15:00:33 +0000
Manifest next update: Thu 08 May 2025 15:00:33 +0000
Files and hashes: 1: HpXNaI-YZ__bNVvsLhzCVmON0vA.roa (hash: 4ppKjsjUaSdmkdjg9+HGXDZITHcsYFbzqeckmlgFcTA=)
2: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: 31pRVguqa6YRhF/hXn47+9VPzh07SPsbon3nVdxkO9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:43:40:d1:97:c1:d5:9e:f3:78:a1:aa:bc:fd:fa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Validity
Not Before: May 7 15:00:33 2025 GMT
Not After : May 8 15:00:33 2025 GMT
Subject: CN=83445b483927c0210855b87e478e9dcb98d5f831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:8e:1d:c3:a7:f3:0b:51:ba:d2:77:2a:ca:
71:f9:11:5e:4f:ce:a2:fe:5f:61:d3:e6:40:f8:68:
3a:a4:c6:46:d4:36:d6:c4:2f:31:2b:11:0f:53:7b:
22:ec:c6:3e:d2:d6:7f:57:a9:3e:74:61:d5:92:fc:
1f:ee:0f:d0:10:5e:4b:43:59:d3:ae:64:94:c3:13:
49:80:6e:f2:c0:64:9d:ce:0c:d5:43:da:41:58:24:
e0:db:c8:6b:dd:5f:32:17:ff:b0:ee:f6:8c:5a:54:
1b:b7:d0:8e:c2:7a:1e:45:26:ab:17:16:68:8c:8b:
73:5d:39:e7:02:fe:61:62:54:2a:db:6d:b8:69:cb:
a2:50:c7:65:2d:dc:08:16:93:c1:e6:66:2d:e2:20:
2f:be:77:01:1c:86:cb:f7:96:68:d5:93:2d:e7:46:
c1:a9:7a:7a:d8:45:e0:d7:82:ff:d1:c2:e8:67:2e:
6a:4b:ec:f5:a0:3b:04:c5:d0:d9:32:dc:1a:65:26:
9c:82:7a:d6:d7:38:33:82:98:cc:0e:db:cd:0e:35:
d2:50:e7:99:87:45:be:bb:2c:3f:70:e0:08:51:7a:
1e:1f:c7:7f:20:8c:a8:5b:41:bb:eb:bb:77:c1:34:
b5:d8:2d:5e:cd:5a:79:22:42:49:aa:13:b1:09:ec:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:44:5B:48:39:27:C0:21:08:55:B8:7E:47:8E:9D:CB:98:D5:F8:31
X509v3 Authority Key Identifier:
keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:79:fa:f6:63:37:50:20:38:43:b3:c6:2e:a9:fb:65:ef:17:
89:91:2f:86:e3:76:62:36:4f:f5:31:d8:c5:ca:ed:7b:16:04:
75:a5:87:b5:dc:ef:4c:84:bc:d0:47:41:2a:6c:48:48:a4:5e:
67:5b:bc:c0:a3:2e:17:2e:e5:b7:51:35:cf:34:9a:8f:1f:21:
71:d0:b7:5f:e3:12:55:82:45:49:68:a9:93:6c:df:80:25:c4:
1e:a1:83:42:3a:65:09:4d:e9:88:6a:0b:72:ed:3b:46:44:81:
bb:1a:20:28:8e:b3:73:dd:69:9f:5f:6d:2c:ac:4c:71:a6:4b:
3f:ae:92:be:f1:7a:e8:df:36:85:93:99:85:77:f6:63:56:b0:
53:bd:64:bb:00:54:1a:dd:c7:65:f0:ca:a9:64:46:88:52:d1:
ef:50:32:9d:cb:5b:76:78:9d:fd:92:34:33:e8:08:05:3f:4f:
8b:59:a8:0a:7b:28:02:c4:5c:2e:33:25:6a:84:d3:25:ff:4c:
17:ea:9e:d7:26:56:93:fe:db:ab:44:8f:01:8e:a7:1b:95:79:
2e:70:87:f8:97:8c:23:9a:d8:c8:e9:da:75:c3:f8:24:31:1f:
ad:fa:4f:c5:1a:ce:7c:3e:c2:b3:d7:ac:08:d6:17:c4:0f:89:
74:d8:01:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZarQ0DRl8HVnvN4oaq8/frOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMmViNDE0N2VlN2JmYzZiYTcyZmMwMzQ5NDUzNDk4ZjAw
MGU1ODEwHhcNMjUwNTA3MTUwMDMzWhcNMjUwNTA4MTUwMDMzWjAzMTEwLwYDVQQD
Eyg4MzQ0NWI0ODM5MjdjMDIxMDg1NWI4N2U0NzhlOWRjYjk4ZDVmODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotOOHcOn8wtRutJ3Kspx+RFeT86i
/l9h0+ZA+Gg6pMZG1DbWxC8xKxEPU3si7MY+0tZ/V6k+dGHVkvwf7g/QEF5LQ1nT
rmSUwxNJgG7ywGSdzgzVQ9pBWCTg28hr3V8yF/+w7vaMWlQbt9COwnoeRSarFxZo
jItzXTnnAv5hYlQq2224acuiUMdlLdwIFpPB5mYt4iAvvncBHIbL95Zo1ZMt50bB
qXp62EXg14L/0cLoZy5qS+z1oDsExdDZMtwaZSacgnrW1zgzgpjMDtvNDjXSUOeZ
h0W+uyw/cOAIUXoeH8d/IIyoW0G767t3wTS12C1ezVp5IkJJqhOxCexwiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINEW0g5J8AhCFW4fkeOncuY1fgxMB8GA1UdIwQY
MBaAFD0utBR+57/GunL8A0lFNJjwAOWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYt
NDI5NTFjMmNhNzM4LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYtNDI5NTFjMmNhNzM4
LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3n69mM3
UCA4Q7PGLqn7Ze8XiZEvhuN2YjZP9THYxcrtexYEdaWHtdzvTIS80EdBKmxISKRe
Z1u8wKMuFy7lt1E1zzSajx8hcdC3X+MSVYJFSWipk2zfgCXEHqGDQjplCU3piGoL
cu07RkSBuxogKI6zc91pn19tLKxMcaZLP66SvvF66N82hZOZhXf2Y1awU71kuwBU
Gt3HZfDKqWRGiFLR71Aynctbdnid/ZI0M+gIBT9Pi1moCnsoAsRcLjMlaoTTJf9M
F+qe1yZWk/7bq0SPAY6nG5V5LnCH+JeMI5rYyOnadcP4JDEfrfpPxRrOfD7Cs9es
CNYXxA+JdNgBZQ==
-----END CERTIFICATE-----
Generated at Wed May 7 21:35:05 2025 by rpki-client