Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: dlMeXUupKTGlRMLnW66ERcuhIan8iu5mHghgsQlY9I0=
Subject key identifier: 58:09:98:31:D7:34:E9:51:78:4B:35:66:52:61:40:98:BF:D8:95:D7
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 0196BC00884265EB0E4F6540BE0317B6BD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 06E9
Signing time: Sat 10 May 2025 21:01:13 +0000
Manifest this update: Sat 10 May 2025 21:01:13 +0000
Manifest next update: Sun 11 May 2025 21:01:13 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: s88Qahll+UTvniaKtDCPHNrEQRHYmMB9wUuSAiS4xhY=)
2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:88:42:65:eb:0e:4f:65:40:be:03:17:b6:bd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: May 10 21:01:13 2025 GMT
Not After : May 11 21:01:13 2025 GMT
Subject: CN=58099831d734e951784b356652614098bfd895d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:a4:07:88:93:47:a2:fc:48:c4:43:05:76:
03:10:35:5f:67:d3:ac:46:3d:51:9c:52:4e:cc:fe:
00:ac:7d:0c:1c:e9:4d:ad:f1:b3:b3:2d:5e:36:7f:
86:4f:7a:ae:2c:fa:7d:5f:52:b5:eb:87:f3:a4:3c:
da:35:0d:80:11:ca:a8:02:f4:8d:d3:8b:9a:a5:e1:
d1:e3:8e:2b:6c:a9:29:b8:b8:ed:fd:44:1c:c0:1a:
47:2c:72:4a:67:d4:2e:8e:09:50:70:5d:fd:e7:40:
b2:fd:40:18:67:d5:e8:b2:66:5b:1c:08:75:97:4f:
e9:f6:9d:6a:b6:40:ce:cc:c2:de:65:c4:28:0f:af:
b9:e4:c8:13:c8:a5:6c:b8:07:2e:0b:dd:32:79:b4:
78:8b:95:b5:7a:79:c7:3d:ad:45:14:fd:5a:39:98:
74:18:22:aa:57:3f:f7:ab:70:72:0f:fe:34:d4:13:
11:68:97:4d:18:7e:3f:a9:f1:79:7e:38:08:32:b8:
8f:5c:63:73:db:65:6a:56:d7:70:26:6b:2f:93:41:
e0:84:d2:04:10:50:47:87:36:48:0d:bd:14:9a:ce:
af:ec:4e:18:1f:8d:06:49:4e:6f:7e:6c:97:3a:64:
4d:b5:fc:3d:15:9b:77:09:65:93:f4:f7:e8:a6:e7:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:09:98:31:D7:34:E9:51:78:4B:35:66:52:61:40:98:BF:D8:95:D7
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6f:e0:ae:79:0f:9b:52:91:53:fe:72:a3:d3:89:1a:02:12:
79:e4:3e:32:14:cf:eb:13:22:1b:52:c2:b1:db:1d:f6:38:bd:
89:11:0d:85:9a:64:13:54:34:9f:51:d5:4a:58:a3:fe:8e:b5:
72:d4:bb:a7:28:ee:71:f1:4b:32:47:a6:0e:2e:dd:01:a2:d3:
63:61:30:e2:35:4c:ed:15:57:88:e0:c6:0b:14:6c:a5:35:f5:
c3:42:12:d9:73:58:c1:22:7c:f8:88:63:b3:97:48:ac:c8:8f:
95:b2:d2:f3:fb:99:21:c5:f6:c3:0d:ed:27:a5:32:4e:2a:8a:
68:4c:32:44:ff:3d:53:71:d9:30:e4:ab:dc:01:9a:00:4e:1f:
e5:c0:f8:d5:17:73:83:a7:f7:18:46:dc:87:d5:3f:5a:09:9a:
31:e1:67:44:4c:f2:d2:18:9f:02:9a:07:7e:78:a8:14:2f:a2:
d4:53:39:80:59:37:62:65:38:34:cd:cf:0b:e9:8d:b6:a5:71:
ed:22:b3:d9:34:e1:3f:e3:21:14:81:97:ec:f8:7f:8e:12:23:
fa:ae:c6:15:8c:58:85:c8:ee:be:30:ef:e2:cc:95:40:f7:6e:
5c:83:ca:47:c1:de:b5:52:c9:72:92:ec:61:b3:7a:75:ee:0e:
e7:d6:fd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:43:23 2025 by rpki-client