Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
File: PCyFQBEUChCUfae1O7s1DzxUsz4.mft (raw, json)
Hash identifier: r+kQW3PsfMElukmi1APprtdmq/k7rvy8zed3xuJZ8DQ=
Subject key identifier: E1:F6:80:7C:82:9B:B2:64:85:36:E1:61:A6:BF:58:B9:03:1D:54:69
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial: 0196A80B4C8A161A91A8C45F461F04EEE6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
Manifest number: 0529
Signing time: Wed 07 May 2025 00:00:34 +0000
Manifest this update: Wed 07 May 2025 00:00:34 +0000
Manifest next update: Thu 08 May 2025 00:00:34 +0000
Files and hashes: 1: NtKyDgbGesEe8awF15SqP0_3q5E.roa (hash: 5/QwTKhvWnKsc5Bc5M0m9rQLZKRH4InU93sknSCwHzs=)
2: PCyFQBEUChCUfae1O7s1DzxUsz4.crl (hash: HgtsH4xEHqHvYDjRQMAOJF7rzh8XSkUK5l7aZCI2JOk=)
3: WNJuWEXBIip_f5G2ObX5HLas-6I.roa (hash: boUS884QFMK9V7SQvxUAnalpgEFhwVVzKbrcjkzFqDQ=)
4: hUje3HFTF6f1DLkrPmJro0BJv84.roa (hash: kR65nTDvmrqvVF+VEljMTGu7vMzX0EU8UFNtyZDk3w8=)
5: i63lT8gZ80ZQnoxkIIq3_XH-qGo.roa (hash: u7r5j40jao9jpdMvyg5KQYNAFcKXMkC3d+QE0v1EduY=)
6: ibMRX0UskUZ1fKV63OderSyFGp4.roa (hash: eA4MV5O6XQVzVYEe9jvmxnmU146aKwd4Gt1iGOJqAdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:0b:4c:8a:16:1a:91:a8:c4:5f:46:1f:04:ee:e6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Validity
Not Before: May 7 00:00:34 2025 GMT
Not After : May 8 00:00:34 2025 GMT
Subject: CN=e1f6807c829bb2648536e161a6bf58b9031d5469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:c1:64:bd:88:78:3b:17:f2:b4:8a:14:5e:
c5:1f:bc:ba:49:cb:54:f7:c1:0e:51:ef:1e:d1:a8:
65:2a:2c:05:ec:65:d5:04:65:47:7a:6f:3c:38:a3:
ff:94:db:28:ac:08:3b:3c:d1:72:7e:90:c3:f7:02:
92:de:04:28:e2:f4:fd:32:eb:d8:79:59:52:1c:37:
7e:79:6e:88:cf:4c:4a:3f:93:5a:66:fd:e6:9b:6c:
c6:2f:98:23:d6:be:11:ba:12:82:76:85:19:38:7a:
4a:40:f5:ad:8e:22:3c:6b:83:d4:da:ea:9c:b4:22:
15:37:b4:ea:68:37:c8:d7:09:dc:77:b4:d3:88:5f:
51:25:db:f2:07:72:19:19:67:e6:d9:54:e7:e1:6c:
1a:5e:91:32:fc:90:f6:d4:f0:01:1a:77:bf:46:38:
32:f1:71:ce:07:7d:33:79:08:58:3b:19:d1:bd:29:
4e:31:07:6b:9e:2d:f6:4d:cd:e0:e9:57:f8:a5:1e:
33:54:61:d7:49:65:a2:49:71:66:f1:15:1c:be:0b:
c8:f4:2b:38:bf:f3:80:69:d7:51:d9:5d:6e:c2:d1:
e6:e2:5e:1a:e4:b9:bd:16:5c:da:ab:47:10:dd:85:
a7:a5:a0:c6:e0:db:fb:82:2e:ef:4a:58:ef:a3:96:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F6:80:7C:82:9B:B2:64:85:36:E1:61:A6:BF:58:B9:03:1D:54:69
X509v3 Authority Key Identifier:
keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9f:f0:7d:1f:01:43:b6:a8:ff:47:b1:8e:f3:79:cf:18:b7:
d4:1b:26:46:2f:c7:6e:c0:21:8f:52:b9:0d:6a:5b:a5:9c:e1:
0a:47:0e:d1:8e:e5:20:38:76:30:69:92:f9:c8:df:02:45:a7:
cb:4f:e5:e8:6a:94:dd:b9:28:a2:25:bb:77:58:45:e3:74:77:
7d:9b:37:d9:bf:19:57:99:29:fa:32:f0:68:3f:b0:12:27:41:
17:7f:82:3a:11:26:15:f5:60:9a:91:3e:69:ec:22:4f:83:6d:
31:21:9f:3e:83:ad:65:63:e1:ab:3f:06:ae:e4:ba:65:1b:f1:
27:c4:0e:1d:cc:dc:91:c2:c3:ea:ed:c4:12:6a:88:28:45:90:
c8:1b:dd:cc:21:79:1c:98:46:6a:ff:1e:4b:3d:f6:2d:78:50:
82:3f:67:17:8a:40:da:34:79:a4:e5:b8:6c:8d:55:06:2e:f6:
d3:bb:43:96:1d:17:f1:a6:65:70:ee:1b:4a:a1:e3:48:df:63:
65:9e:f9:09:cf:34:cf:8a:78:9c:7b:0b:81:1b:c1:c7:f5:de:
0f:0b:47:df:1f:87:8f:c1:55:4a:bf:9f:20:d0:6a:83:60:40:
b8:08:ad:ef:68:a6:45:6e:bc:4e:a5:95:63:97:18:57:56:7d:
67:ef:54:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:01:35 2025 by rpki-client