Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
File: PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft (raw, json)
Hash identifier: ZK6YstOHxBrVQVdUqDxHuaiiXMvGaAHnBTuJhTrwyoo=
Subject key identifier: 09:16:B3:EE:AA:50:D0:FD:45:12:C2:3F:38:18:E1:69:EA:7A:B6:50
Authority key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Certificate issuer: /CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Certificate serial: 019691164681FEC77662F7B8BB1430FA1D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 13:01:18 +0000
Manifest this update: Fri 02 May 2025 13:01:18 +0000
Manifest next update: Sat 03 May 2025 13:01:18 +0000
Files and hashes: 1: PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl (hash: Rh537x6jxmqNh/fhPQp4K9b1wLmeo1tA/yQ+78Jo4yc=)
2: baHbcRR9kf1ghjeGFAS82cVbM5E.roa (hash: ryV49aEsL3mdbzWN2VnZ4BiiOTM51N9BlYGHQV8L9fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:16:46:81:fe:c7:76:62:f7:b8:bb:14:30:fa:1d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Validity
Not Before: May 2 13:01:18 2025 GMT
Not After : May 3 13:01:18 2025 GMT
Subject: CN=0916b3eeaa50d0fd4512c23f3818e169ea7ab650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:f7:f5:87:aa:46:52:2a:41:29:c6:91:c3:
3f:9b:02:3d:ab:7b:48:47:a0:3f:2c:1f:67:c2:d9:
78:38:aa:e9:3c:a3:9a:11:bb:12:d1:73:f5:bc:f1:
49:fc:13:62:17:35:90:63:4a:bf:50:b2:02:d7:4d:
ba:3b:06:95:59:21:f8:85:d1:f3:fc:d6:ef:46:0e:
7b:f9:38:58:b4:f2:1b:43:c2:60:f7:31:6b:59:11:
aa:26:e5:18:f5:12:46:41:d1:2b:26:dc:f0:35:dc:
d6:64:43:98:27:d1:01:43:5c:0c:39:e6:e6:a4:e2:
ae:82:9e:18:fb:ec:7e:20:5c:6f:fa:e8:12:f6:05:
41:2a:9d:37:da:96:30:47:61:89:36:62:cf:ec:7c:
ff:e0:ac:1a:f4:8a:20:e0:af:f1:e0:dd:63:7c:86:
75:8e:1f:c3:86:8b:22:4e:d3:99:a3:66:a1:56:fb:
98:76:0a:b9:24:70:b8:33:42:21:bf:17:54:4b:db:
52:30:5c:ba:67:c3:fa:57:0b:38:da:cf:89:ee:1b:
6f:6b:4e:f1:f1:18:a9:46:fd:6c:78:8c:9e:02:78:
e3:e6:fd:3b:52:46:28:1a:38:89:f5:0a:47:76:25:
08:ec:5b:d8:43:f9:0c:90:13:0e:b5:89:7d:9b:11:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:16:B3:EE:AA:50:D0:FD:45:12:C2:3F:38:18:E1:69:EA:7A:B6:50
X509v3 Authority Key Identifier:
keyid:3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8d:30:14:10:16:06:13:1a:40:76:5d:ac:df:64:b2:e5:ba:
5a:9e:2d:13:2f:10:7b:b7:ce:ee:35:9e:c4:63:5c:a2:fd:0d:
6d:95:be:2a:32:c0:10:ce:36:cc:b3:81:fd:5f:6c:73:cc:b6:
49:ff:9d:f5:8e:87:62:5f:5d:3a:a4:d4:f9:55:39:5d:cc:0d:
43:a8:ab:81:3a:b1:dd:81:d4:e6:0f:8b:ce:fc:88:40:45:55:
86:2f:47:78:47:28:89:ee:8c:05:2b:22:2b:b7:f8:97:84:09:
ef:68:f6:17:87:56:8d:d8:27:10:cd:7e:5e:6d:c8:9c:39:e4:
ff:5e:32:05:89:a0:a1:e7:e5:31:fb:84:05:f2:09:ad:d1:ef:
e9:b2:5c:a4:6e:7b:a4:49:22:0d:2d:22:18:7b:a7:3e:91:67:
83:60:c4:ef:e2:ff:a2:61:13:e1:b5:35:20:e6:7a:4e:46:54:
51:11:54:60:3f:d8:24:a5:1e:6f:6e:da:6e:bd:69:03:eb:0b:
32:c3:5f:b5:ea:cf:66:8c:63:ef:b4:e9:98:e9:15:0c:ec:0e:
fc:5e:61:24:08:a7:1e:e7:c5:41:71:a9:f1:d4:76:04:7e:1e:
bb:14:0d:50:49:04:11:0f:f3:80:56:95:54:18:fb:8c:13:b0:
25:de:fc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:21:47 2025 by rpki-client