Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
File: PzTUjYQaUqQifUn6PvhbpavyIkg.mft (raw, json)
Hash identifier: VgYgKZjuOL2nJ+GBHbw9IIfkl7PnHu8urPMevEETEac=
Subject key identifier: C8:0E:B6:21:88:79:38:51:39:C8:58:F2:01:B7:81:80:D3:87:2B:24
Authority key identifier: 3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
Certificate issuer: /CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Certificate serial: 0196AFC51226EAD59754B9AFAE4958CE419B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
Manifest number: 0442
Signing time: Thu 08 May 2025 12:00:49 +0000
Manifest this update: Thu 08 May 2025 12:00:49 +0000
Manifest next update: Fri 09 May 2025 12:00:49 +0000
Files and hashes: 1: 4boeBlk7o1BaTuZdEOVxwc-y71c.roa (hash: RGuBRtk99FPER/w90B0w3hwMlxFq4HdA7ruV2FfydxY=)
2: PzTUjYQaUqQifUn6PvhbpavyIkg.crl (hash: qSNuOuuGWww+j7HrpX6pgHTMAAnePUMurzy3rgbGd4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c5:12:26:ea:d5:97:54:b9:af:ae:49:58:ce:41:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Validity
Not Before: May 8 12:00:49 2025 GMT
Not After : May 9 12:00:49 2025 GMT
Subject: CN=c80eb6218879385139c858f201b78180d3872b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6d:74:c2:b8:10:48:36:e3:87:80:80:c6:7f:
f6:a8:37:39:4b:ef:c9:99:bd:48:07:55:26:3f:e4:
77:24:19:8e:50:27:18:2a:ac:00:bf:9c:6a:05:fa:
7a:1b:0b:15:bc:0f:49:8c:d0:a7:9f:b0:27:6e:7a:
bb:21:1c:a2:37:c8:ae:42:b8:a3:67:44:76:66:a3:
70:07:17:cd:b8:9b:23:3a:51:fa:fc:ea:b8:b5:72:
9d:d2:b7:6f:ef:b0:d4:ee:53:0c:ab:85:93:4e:5e:
80:95:d6:a8:e0:8e:ab:fb:3e:ef:a3:83:a9:10:b5:
dd:3b:16:16:72:fb:a9:ee:99:fd:1c:57:d5:b7:4b:
5a:ef:18:4d:31:2b:b3:93:27:36:86:5d:6f:8e:f7:
75:58:58:2d:72:c3:39:51:95:2b:61:f2:77:26:c1:
35:33:44:c3:7d:a1:d6:84:a9:ab:4c:b2:57:90:92:
e2:7a:0c:7e:4d:f7:98:43:f2:65:4b:54:c1:0a:d1:
0d:e0:c1:fd:ed:39:cb:87:12:f2:b7:06:5d:49:6f:
41:01:3d:3c:4c:42:72:db:92:2d:7a:13:5e:d9:ba:
d0:6f:53:ab:f3:f0:21:89:2a:f3:dc:fb:34:03:14:
a5:c8:15:b6:97:c2:25:50:69:31:7c:0b:3f:f8:b4:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0E:B6:21:88:79:38:51:39:C8:58:F2:01:B7:81:80:D3:87:2B:24
X509v3 Authority Key Identifier:
keyid:3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1a:bd:31:85:c0:f0:dc:1c:da:9d:80:ae:dc:e5:16:ca:51:
2a:2b:25:35:f3:67:8e:86:4f:ef:0a:54:b1:a3:09:7a:a0:af:
55:d9:99:1e:09:be:fa:3d:00:8c:51:5e:64:d6:91:bc:98:dc:
30:07:19:55:30:51:0b:76:7c:99:13:d1:61:b3:6c:0c:eb:df:
11:01:05:37:38:62:c2:51:f5:79:5f:48:2d:77:55:a2:7e:1c:
b4:fa:70:9e:3c:aa:12:04:30:34:47:a7:8a:28:95:9c:9f:c8:
71:19:ed:12:1f:2a:4f:9b:a3:3a:13:9d:25:c1:d5:a2:bc:4e:
78:3e:5d:a6:3f:19:c8:b8:ec:2a:1e:28:ae:b1:15:c5:c2:65:
d3:44:25:de:0c:56:05:ed:bf:71:cf:6f:e4:d1:1c:9f:e6:c3:
87:15:b5:6f:ab:8a:0f:51:b5:1c:e8:29:4c:8f:9c:5e:eb:cf:
00:ae:1e:79:07:43:e8:1e:d9:31:bd:13:14:98:1a:79:ea:67:
c0:ae:65:60:b4:8b:0b:2d:4d:cd:8e:c9:9d:fa:04:be:64:ef:
eb:f9:7a:76:49:41:67:97:54:e0:0a:c5:9f:16:dc:1b:d1:3c:
6a:c9:e7:48:a1:a2:0a:c8:bc:ea:18:3f:1d:5a:9e:5b:4e:56:
8d:d4:dd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:13:00 2025 by rpki-client