Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: lX2sOFxvLM6fWW1g2T+882lu8GoQZMyg92fnmubBHHM=
Subject key identifier: 62:3B:EA:F5:1E:18:EF:7C:A0:7F:60:E8:E8:77:E7:34:FC:E3:4C:89
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 019676E812E2E24FA1875EB75A55533585AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 07C6
Signing time: Sun 27 Apr 2025 11:00:42 +0000
Manifest this update: Sun 27 Apr 2025 11:00:42 +0000
Manifest next update: Mon 28 Apr 2025 11:00:42 +0000
Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: snwRVn7W137W00+wQ525gyvTH9hcNEu1zJSojhRhVY4=)
2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:12:e2:e2:4f:a1:87:5e:b7:5a:55:53:35:85:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Apr 27 11:00:42 2025 GMT
Not After : Apr 28 11:00:42 2025 GMT
Subject: CN=623beaf51e18ef7ca07f60e8e877e734fce34c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:11:64:34:4c:72:99:6e:2e:10:29:14:e1:63:
f1:e6:ef:29:ed:90:5b:a0:de:af:a3:45:74:9a:04:
a8:c5:ac:4d:27:b2:ad:c0:4f:5f:72:43:06:cd:e5:
28:c5:37:52:35:a8:38:5f:ec:d2:93:4b:b8:39:27:
f9:f2:c8:f1:5c:94:4f:2c:35:94:53:df:fa:af:b1:
16:f2:b9:63:11:a2:00:1d:70:ee:d0:19:c0:8f:fb:
81:c9:63:95:c3:d6:f9:f7:b5:f0:ea:1b:f4:e8:27:
88:08:50:f6:e0:29:59:c0:fd:34:37:f0:f8:7a:1b:
a1:5e:48:5b:c3:d2:79:77:b3:6a:a5:a6:de:31:f5:
88:ce:40:47:a8:7e:05:36:8e:a8:f3:2e:65:13:19:
ca:8c:4a:5f:f9:4c:7a:75:38:1c:0d:64:cf:66:74:
82:82:3b:32:d3:64:be:3c:a4:64:d0:89:2b:4b:ea:
2d:f0:9f:0d:da:67:70:d9:11:77:0a:ce:67:25:1f:
ec:e6:4e:f9:b3:ca:64:5c:b2:dc:24:d6:79:b8:d5:
7e:bb:16:1d:ed:92:76:ba:b3:c5:43:8e:c7:3d:16:
d4:fb:aa:60:86:ac:2d:4c:46:01:0b:7b:07:93:fe:
42:7c:bf:00:8f:fa:6e:4d:c4:8e:b1:f1:52:01:a3:
e4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3B:EA:F5:1E:18:EF:7C:A0:7F:60:E8:E8:77:E7:34:FC:E3:4C:89
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:78:0c:f4:bd:63:84:c0:a3:f9:5c:7d:27:93:3f:85:aa:2a:
e4:8a:4b:fe:b7:e6:36:b3:e8:3b:76:f4:91:aa:e0:ee:cf:56:
a8:b0:8f:d1:e8:c0:07:ea:87:6d:60:76:3c:26:6b:a0:01:09:
16:07:03:27:a3:da:3b:05:32:b6:14:1f:33:26:8a:62:8e:e7:
d4:f5:1b:42:45:ac:2c:14:91:b4:64:29:c0:4b:e2:4f:d5:cc:
d9:6e:3f:c4:bd:e7:09:2f:c0:76:a7:73:84:2c:7d:89:90:67:
fd:63:4b:12:68:e6:c2:00:3b:2e:dd:56:88:56:e4:37:f9:82:
df:0e:dd:61:6e:c4:47:49:da:c3:df:89:f7:36:4c:4f:04:0c:
9a:21:2a:2f:fd:01:d9:73:9d:18:66:3f:6b:f7:6f:d9:86:51:
c0:a2:30:d2:6c:71:74:b9:49:58:d4:a4:c3:d3:1c:82:e1:df:
59:8b:5f:bd:84:94:77:31:ff:55:ae:b5:82:f7:d2:92:d2:21:
78:ed:b6:45:34:64:fd:37:53:15:b5:b5:db:1b:b1:a0:5c:66:
80:e7:50:5d:dd:79:ec:a9:9a:1a:f7:45:bd:47:39:49:49:fa:
1a:4a:71:55:51:1c:c3:b5:4d:bf:68:f3:43:39:db:c5:fb:f1:
fb:e9:9d:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ26BLi4k+hh163WlVTNYWuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMGNjZDI1MDQ3YjljYjhiNmYwMTg2N2NkZWRlODI1NmY3
MzRhMjMwHhcNMjUwNDI3MTEwMDQyWhcNMjUwNDI4MTEwMDQyWjAzMTEwLwYDVQQD
Eyg2MjNiZWFmNTFlMThlZjdjYTA3ZjYwZThlODc3ZTczNGZjZTM0Yzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RFkNExymW4uECkU4WPx5u8p7ZBb
oN6vo0V0mgSoxaxNJ7KtwE9fckMGzeUoxTdSNag4X+zSk0u4OSf58sjxXJRPLDWU
U9/6r7EW8rljEaIAHXDu0BnAj/uByWOVw9b597Xw6hv06CeICFD24ClZwP00N/D4
ehuhXkhbw9J5d7NqpabeMfWIzkBHqH4FNo6o8y5lExnKjEpf+Ux6dTgcDWTPZnSC
gjsy02S+PKRk0IkrS+ot8J8N2mdw2RF3Cs5nJR/s5k75s8pkXLLcJNZ5uNV+uxYd
7ZJ2urPFQ47HPRbU+6pghqwtTEYBC3sHk/5CfL8Aj/puTcSOsfFSAaPkYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGI76vUeGO98oH9g6Oh35zT840yJMB8GA1UdIwQY
MBaAFD4MzSUEe5y4tvAYZ83t6CVvc0ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjkt
OWNkMDE3MjQzYTA2LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjktOWNkMDE3MjQzYTA2
LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHgM9L1j
hMCj+Vx9J5M/haoq5IpL/rfmNrPoO3b0karg7s9WqLCP0ejAB+qHbWB2PCZroAEJ
FgcDJ6PaOwUythQfMyaKYo7n1PUbQkWsLBSRtGQpwEviT9XM2W4/xL3nCS/Adqdz
hCx9iZBn/WNLEmjmwgA7Lt1WiFbkN/mC3w7dYW7ER0naw9+J9zZMTwQMmiEqL/0B
2XOdGGY/a/dv2YZRwKIw0mxxdLlJWNSkw9McguHfWYtfvYSUdzH/Va61gvfSktIh
eO22RTRk/TdTFbW12xuxoFxmgOdQXd157KmaGvdFvUc5SUn6GkpxVVEcw7VNv2jz
Qznbxfvx++mdig==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:43 2025 by rpki-client