Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
File: PKE4ItxLDjEIGkhX_QQHDW2svgw.mft (raw, json)
Hash identifier: 7+nNOZI0va9pmpMQX2Nure5Tnc4iZWDB9vgKZv8CdQ0=
Subject key identifier: 11:54:49:E5:67:A0:ED:D2:06:EA:1C:7D:0D:52:4E:76:44:8B:B2:1B
Authority key identifier: 3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
Certificate issuer: /CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Certificate serial: 01967567490861650F2FC7790CA3AD8611CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 04:00:25 +0000
Manifest this update: Sun 27 Apr 2025 04:00:25 +0000
Manifest next update: Mon 28 Apr 2025 04:00:25 +0000
Files and hashes: 1: PKE4ItxLDjEIGkhX_QQHDW2svgw.crl (hash: yWwL0bms32vMKBZ4D7M5EHT638ihrbEJ3cp1J3TEpO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:49:08:61:65:0f:2f:c7:79:0c:a3:ad:86:11:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Validity
Not Before: Apr 27 04:00:25 2025 GMT
Not After : Apr 28 04:00:25 2025 GMT
Subject: CN=115449e567a0edd206ea1c7d0d524e76448bb21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:9b:6a:90:43:fc:29:63:82:45:99:72:d0:
bb:cc:c0:66:cd:61:06:93:6e:3f:0e:94:06:e7:6f:
85:95:d3:15:60:ad:30:fd:94:2d:9c:94:df:80:60:
de:73:be:56:a6:d4:a7:07:70:05:9d:7e:91:66:1c:
f4:05:61:f0:a6:e0:71:24:7c:83:b6:e3:7b:30:23:
5d:38:c9:b2:f5:a0:cd:32:55:bd:ee:a7:5a:fc:91:
46:12:04:1a:c2:7f:66:6a:9c:92:3d:09:02:b8:af:
aa:58:89:6f:4b:b9:1c:7f:1a:b9:2a:48:68:a7:33:
ae:b8:6c:84:98:f0:5e:39:13:b7:c9:f3:aa:24:8a:
6f:43:33:3d:03:2c:9d:cd:08:e8:e8:7a:dd:59:c4:
80:45:68:ed:b5:d1:27:4f:dc:6c:3c:3e:40:d3:88:
e0:85:ed:4d:4e:a3:74:25:15:14:e9:cf:6e:1a:88:
9a:b7:cf:b5:28:b0:c1:0c:29:37:b7:8c:d9:8d:19:
a8:a5:5c:8b:f6:9a:c2:38:99:7e:d9:b0:7a:b0:77:
a7:07:5b:1d:04:c2:2c:e0:a5:0c:c9:1a:df:d6:ad:
50:1d:88:c4:fd:60:c4:51:79:04:5b:2d:73:d3:a3:
50:65:a1:7f:70:2d:c7:08:ed:a9:dc:4a:77:44:8e:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:49:E5:67:A0:ED:D2:06:EA:1C:7D:0D:52:4E:76:44:8B:B2:1B
X509v3 Authority Key Identifier:
keyid:3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ba:06:47:5c:56:83:9f:86:98:de:c7:31:9f:33:e2:9e:8a:
7f:73:26:61:3b:bc:d9:bf:63:a4:dd:9c:a1:7f:0e:9a:12:8f:
a1:e6:85:0c:1f:b5:7d:f3:2b:bc:f6:94:6a:53:4b:eb:cd:94:
d4:27:c8:87:09:e1:4f:49:7b:8a:38:b7:14:70:3a:3e:ed:1e:
4d:bc:43:e1:ae:f9:53:dd:33:99:f7:e6:63:a0:e1:c5:c8:d3:
f8:ae:2e:44:f8:b8:d8:b4:57:47:25:bf:fd:ed:7c:9f:a6:5c:
4b:a5:db:7f:01:cc:4d:eb:26:1d:bd:17:fd:1d:03:00:69:9d:
38:c6:b5:c5:df:98:7e:65:ce:75:ee:cd:5b:be:00:1c:fb:cb:
9c:41:d6:0c:46:8b:a6:29:63:a2:56:d0:32:47:c4:74:0f:5f:
6d:b5:bf:6e:2f:a1:a5:76:f6:4c:bf:c2:52:15:00:15:85:82:
03:96:1c:21:3c:ab:a8:8e:48:c9:58:80:f1:2e:3f:d5:06:5e:
ea:9e:7a:c2:4a:c7:3e:a4:23:2c:37:52:d9:66:05:45:73:aa:
97:a0:1e:80:ab:23:9b:6c:af:a6:e3:72:93:7c:f6:6d:96:77:
e1:15:02:a1:2f:6f:dd:7b:e1:92:dd:3a:5b:a4:79:7d:90:5f:
23:5a:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:38 2025 by rpki-client