Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: t9iASBw5GFVioIS+rE2UDC97HS6u7Deu3WkyThdu4Jc=
Subject key identifier: 1A:F2:AA:25:7F:62:D6:FE:08:E2:74:0A:29:C7:77:5A:4F:B6:31:41
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 0196BE934D0C529A879A6638565F60E5B327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 0311
Signing time: Sun 11 May 2025 09:00:46 +0000
Manifest this update: Sun 11 May 2025 09:00:46 +0000
Manifest next update: Mon 12 May 2025 09:00:46 +0000
Files and hashes: 1: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: oWyAv+l9s9m0mrwaqAp9cHFt0j/oJRyE6+iT2wU7E0I=)
2: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (hash: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:4d:0c:52:9a:87:9a:66:38:56:5f:60:e5:b3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: May 11 09:00:46 2025 GMT
Not After : May 12 09:00:46 2025 GMT
Subject: CN=1af2aa257f62d6fe08e2740a29c7775a4fb63141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:d8:46:4e:ad:89:7b:ff:4a:c3:db:cf:eb:
09:82:d8:8c:49:ca:e3:ce:5f:5a:66:47:3f:59:ab:
58:01:1f:70:ca:bd:c3:00:f6:fd:8f:12:16:4b:8e:
ee:27:1e:5d:38:ad:ec:2b:92:d3:d5:4a:2a:e8:d7:
f1:bc:8b:85:06:a9:22:46:01:d3:bb:7f:af:d7:ad:
70:5a:28:e8:c3:66:a3:0f:72:7f:50:e0:20:82:25:
d9:ab:ce:72:df:26:99:f4:34:03:a8:97:85:24:54:
f5:43:0d:7d:9a:67:46:9f:d8:11:d9:69:43:39:12:
ea:86:0b:ae:47:a9:9c:0f:45:bd:0b:2f:0d:88:0d:
ac:ae:6e:71:e4:d8:bc:0b:52:1e:e8:14:bb:4b:c8:
90:9b:a3:9e:21:89:18:f8:95:2c:04:33:e0:d1:ef:
e6:02:36:7b:35:b9:05:37:b3:e0:a0:da:6d:aa:3e:
ed:dd:d7:d0:7e:fd:24:72:2d:f4:07:3d:a2:c5:31:
b8:95:e0:2b:ae:60:e2:fa:3b:f8:cd:6a:ab:0d:82:
ed:d4:04:aa:c7:f4:2c:46:53:f2:ea:d1:34:65:fe:
65:57:36:1d:a9:4f:c4:dd:c5:e3:36:d0:d0:db:dc:
66:0b:d6:c4:8c:65:66:1d:66:09:51:2c:a4:f4:c5:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F2:AA:25:7F:62:D6:FE:08:E2:74:0A:29:C7:77:5A:4F:B6:31:41
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:59:11:7d:f1:66:c8:f7:54:77:e1:d6:8a:33:f0:83:79:8b:
3d:c2:92:d1:4d:03:36:ac:45:51:dc:40:44:37:6e:12:ca:fb:
99:35:ca:ba:42:7d:db:53:1f:0f:b8:7d:f7:34:a9:92:7a:50:
33:f3:90:2c:23:79:56:89:d0:f4:f1:5e:03:bd:2a:d0:68:23:
3b:2c:b1:34:d1:a0:20:38:41:9d:46:bd:45:e4:c4:40:24:43:
e3:34:ac:69:a7:a0:02:5b:1a:34:49:d9:3a:52:9d:66:c5:1a:
cb:6a:51:08:23:5a:be:a2:b5:05:99:8b:8a:58:e0:78:42:df:
33:b8:b8:41:a6:38:6e:82:85:b6:96:d6:d5:65:49:29:27:2e:
29:2b:65:fe:30:7b:5f:70:87:9b:43:d5:e6:d5:58:af:d3:93:
24:51:62:39:0d:d0:09:b8:11:c8:06:0d:55:0d:43:4c:8b:65:
b8:c8:15:fe:d1:8d:b2:d9:e2:a6:68:d8:ae:c1:50:55:a6:a9:
ac:d1:91:0e:20:4b:19:b3:0c:c1:7f:0a:e6:78:e8:e6:60:a9:
e8:84:01:7f:7e:46:1c:ff:c9:6d:17:f6:4f:de:eb:a4:0d:5e:
64:30:8e:4d:ed:94:84:15:e2:ac:aa:bd:73:aa:ce:0e:d6:55:
8a:a3:b6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:11:21 2025 by rpki-client