Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
File: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft (raw, json)
Hash identifier: jsDG07uNMdfI0s9OpapOo5TvAqg6vSf4m0dLHZFeS1c=
Subject key identifier: BC:AB:0E:B7:23:C6:3E:2A:F5:C4:24:D6:14:D9:42:CA:E0:16:90:19
Authority key identifier: A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
Certificate issuer: /CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Certificate serial: 0196857FE52C1CB7011E7D1A6EEEA295CBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
Manifest number: 0E34
Signing time: Wed 30 Apr 2025 07:01:13 +0000
Manifest this update: Wed 30 Apr 2025 07:01:13 +0000
Manifest next update: Thu 01 May 2025 07:01:13 +0000
Files and hashes: 1: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl (hash: hdsr9QQgtbS2kil4S6wDs7OHSl74cgZI/vL1cqg5pZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:e5:2c:1c:b7:01:1e:7d:1a:6e:ee:a2:95:cb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Validity
Not Before: Apr 30 07:01:13 2025 GMT
Not After : May 1 07:01:13 2025 GMT
Subject: CN=bcab0eb723c63e2af5c424d614d942cae0169019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:81:17:52:fe:f5:32:27:03:4c:80:da:a4:
4d:52:12:f0:fd:8d:aa:5a:d5:ee:d9:62:0c:e6:f6:
c9:03:e8:26:67:64:cc:b5:e8:5e:c3:88:27:41:b2:
09:91:e5:8b:42:97:ad:52:22:c8:45:8c:a3:ea:60:
65:41:d5:ef:5c:89:5b:6e:f9:10:db:2c:14:bb:9d:
58:7e:6e:d5:7c:a9:c5:a8:95:c2:0c:ad:03:8f:59:
ce:ba:36:7e:c1:d4:62:34:41:bf:e9:b0:91:a5:72:
5b:82:eb:63:5d:79:21:82:2e:b9:38:4e:d2:73:d7:
dc:65:b3:ed:f2:f9:ac:b4:9c:3d:68:98:aa:23:43:
62:bf:fc:14:ef:7e:1e:f9:50:2c:db:11:44:33:68:
2e:4e:2b:93:a7:18:5b:0e:2a:01:4c:e8:70:06:aa:
e7:87:f1:33:05:43:f6:e2:94:bb:f3:3b:4a:92:01:
b5:6e:b7:0e:0e:71:fb:8a:9b:40:32:c6:25:db:54:
85:d5:24:03:6a:34:84:83:fa:04:02:39:95:7d:75:
ef:45:35:c4:72:3f:32:2c:32:5a:2a:a6:b4:25:61:
f0:c4:e4:b5:7e:6d:ce:77:b7:b1:a3:71:fb:b7:3e:
02:db:16:c8:89:37:14:4d:cc:18:a4:7a:c8:e5:73:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:0E:B7:23:C6:3E:2A:F5:C4:24:D6:14:D9:42:CA:E0:16:90:19
X509v3 Authority Key Identifier:
keyid:A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1f:eb:53:41:3c:33:d5:1e:9e:d6:e4:aa:92:da:5e:1a:e7:
57:a5:1f:df:41:5c:b8:ee:e9:c2:dd:68:ec:17:d4:94:bd:78:
2d:68:d1:c6:4e:f5:89:3f:aa:51:7a:86:ed:e2:0c:0c:ae:71:
8f:e5:1b:74:21:dd:5b:5e:17:64:9b:f6:cc:68:00:55:31:7e:
57:27:66:63:de:b8:c8:51:e9:5a:a2:ff:e5:49:27:c2:53:04:
da:cf:cd:4e:84:2f:b3:08:4e:ae:11:09:e7:8a:27:f4:42:d6:
4d:92:39:f7:9b:5c:fb:ba:95:bb:65:93:7e:64:58:c9:ff:1d:
c2:4f:a6:6a:b2:d1:b1:7c:3c:b5:d1:63:3c:49:46:7d:06:7f:
c5:4c:ca:a2:53:88:72:82:7a:fd:69:b3:7f:c6:a3:22:19:a2:
4e:d1:06:2b:2a:8a:5a:db:7a:15:5a:c1:cb:d1:ac:26:e5:eb:
e8:0b:ed:58:bd:5b:ae:2a:41:4f:a5:58:ba:9c:56:4a:6d:92:
95:a6:b8:99:d6:2c:de:ff:46:4b:dc:07:8e:fd:3b:ad:2b:50:
50:ee:f4:02:53:d9:72:59:0f:4f:3a:53:91:b7:50:c5:13:c5:
06:cd:78:e8:ac:64:25:22:32:38:f6:fb:77:da:84:e2:f9:97:
7b:53:3d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:53:44 2025 by rpki-client