Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File: Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier: WMQmXrORZZG0+Khz5/YQDOiK6AFMwEBEenF8YwMz8Yw=
Subject key identifier: 02:60:D9:21:3F:4D:C9:6D:D3:9C:26:A5:B6:D4:A2:9D:F0:CB:AD:05
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer: /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial: 0196CD2A50AC7848919A74EF15401DBB0D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number: 153B
Signing time: Wed 14 May 2025 05:00:24 +0000
Manifest this update: Wed 14 May 2025 05:00:24 +0000
Manifest next update: Thu 15 May 2025 05:00:24 +0000
Files and hashes: 1: 3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa (hash: kD23fxg6HJol+5c+jQle3o8CP0BhvDm3gW0I2oTpUsE=)
2: 9ZGSbvVWGJA03vrSyQUEVarRr-4.roa (hash: cPvp9kLsR1g5wI6QgkJQ/4iEUD2cM7N5TL8rSHXBr1c=)
3: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: hBQgFngd1bSZXqO0ddoDcGXsCOKDgdy1uzs2C26rL/o=)
4: k6_D03YidxIC349EjXRq0tAB-Qo.roa (hash: EeEY/m7OL+tVaal0Hy7U3tDs+glAoHmKchjSxGhakus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:2a:50:ac:78:48:91:9a:74:ef:15:40:1d:bb:0d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Validity
Not Before: May 14 05:00:24 2025 GMT
Not After : May 15 05:00:24 2025 GMT
Subject: CN=0260d9213f4dc96dd39c26a5b6d4a29df0cbad05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:7e:fe:48:16:e8:88:2c:58:cc:5c:94:a5:
d1:41:ce:85:2c:c6:77:4e:fd:de:fa:be:2a:e8:4f:
e4:2a:df:ef:75:3b:f7:72:cd:6d:15:62:fb:a8:8a:
39:34:ba:14:ed:06:4e:2c:26:94:d7:93:cd:9a:e7:
1f:5c:5f:58:02:81:75:ad:9f:49:f1:ac:7c:e8:3c:
5b:9d:40:4c:61:13:7c:43:bd:69:83:d1:b4:1c:86:
87:62:ac:b2:02:06:21:3d:70:09:5b:8d:68:5f:69:
6a:f3:08:bd:94:45:f6:d9:a9:7d:f0:68:c0:9a:07:
d7:fb:94:3c:06:f8:a5:ac:e4:a7:1d:29:52:f3:20:
d7:1a:8c:92:02:6b:20:f1:8d:a6:6d:24:8b:25:d2:
a1:d5:9e:d3:db:bd:6e:0f:d1:f7:f8:7a:f4:f7:99:
cb:77:e3:04:92:68:2f:35:47:7b:55:3c:8f:49:c5:
1d:be:e0:da:87:a4:da:3e:fe:3e:bc:66:41:f0:86:
0d:9d:5e:ea:a8:f8:85:ff:bf:e6:36:c1:f0:ee:23:
7f:05:29:2f:b3:69:a2:11:a3:3a:1b:40:1b:6f:56:
0d:00:a6:e7:8d:f8:01:04:dd:fb:52:04:94:bb:67:
a3:91:78:2a:9a:13:31:83:77:1c:be:b2:85:4b:0b:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:60:D9:21:3F:4D:C9:6D:D3:9C:26:A5:B6:D4:A2:9D:F0:CB:AD:05
X509v3 Authority Key Identifier:
keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1d:78:13:43:08:99:5e:86:93:67:97:53:6d:ee:60:c6:6f:
53:67:7b:13:63:a4:d0:0b:e6:ce:79:6d:50:30:4e:ae:bf:48:
8b:98:b2:a3:3c:56:05:25:e5:90:f9:dd:57:e6:8a:53:d1:d7:
75:a1:40:70:43:d8:64:b7:bc:55:02:d2:1c:e2:91:c7:14:14:
db:0b:a8:92:00:38:b0:de:1b:e1:09:7d:78:de:1a:61:9c:f8:
b6:90:63:b5:35:d9:03:01:b1:ad:13:0b:e3:78:95:0e:00:40:
f2:34:d7:be:0c:65:5d:04:b2:2e:61:90:da:75:6a:16:b9:36:
ac:54:f9:87:cc:a8:03:f3:be:2a:d4:3a:cb:ab:b2:39:5f:09:
6c:79:0a:a3:5e:10:1b:f2:33:aa:f6:81:62:e8:00:14:52:c0:
d8:01:b5:d8:46:09:36:2f:eb:84:0d:bb:31:a5:02:67:5a:aa:
58:5b:f4:4c:ab:17:a9:41:62:e8:c7:6a:9d:ca:11:f7:40:5a:
05:c6:d0:87:c8:0a:27:44:1f:51:57:6e:6d:a4:65:18:f3:55:
89:45:fd:b4:c2:26:77:46:42:1b:14:a1:ba:b5:35:c4:1e:be:
d5:93:48:12:a8:f5:51:74:fe:7b:28:ab:df:76:74:d5:9e:e7:
5f:4b:58:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:10:34 2025 by rpki-client