Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
File: pnQBXVCbXU85bqNjNp6ddP-tdZM.mft (raw, json)
Hash identifier: jJzkydqOWFQbJNnVfkZDMABlusxrmfapJAAoIigCQ3w=
Subject key identifier: FC:59:38:15:28:61:95:14:74:02:F2:95:F7:2D:12:27:13:97:86:9A
Authority key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Certificate issuer: /CN=a674015d509b5d4f396ea363369e9d74ffad7593
Certificate serial: 01967A569DE54F254F09E90BCD99E1434153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
Manifest number: 13AA
Signing time: Mon 28 Apr 2025 03:00:18 +0000
Manifest this update: Mon 28 Apr 2025 03:00:18 +0000
Manifest next update: Tue 29 Apr 2025 03:00:18 +0000
Files and hashes: 1: pnQBXVCbXU85bqNjNp6ddP-tdZM.crl (hash: lEr+bWKALiuj/20mgy26bnZaHNSGLOX7eu3z1zGP3JY=)
2: ytlPgasGVjygeToAnL_7qGL6niY.roa (hash: 4pWkNfB/a5sc8sNCH66lYgOc8aQwiUY9Cf8vuGjBpFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:9d:e5:4f:25:4f:09:e9:0b:cd:99:e1:43:41:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a674015d509b5d4f396ea363369e9d74ffad7593
Validity
Not Before: Apr 28 03:00:18 2025 GMT
Not After : Apr 29 03:00:18 2025 GMT
Subject: CN=fc593815286195147402f295f72d12271397869a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:41:e2:0c:c6:d9:0d:49:49:22:33:e1:30:
c4:5d:cd:01:30:5d:66:4c:1f:d4:d4:5a:79:e5:58:
c4:d9:13:a5:4d:7c:a5:30:fb:46:71:f4:b2:e2:be:
8e:92:cb:5f:17:61:b1:0e:26:45:51:fb:89:7c:87:
50:b0:6b:07:03:a9:f8:ff:62:88:84:bf:5e:6d:74:
a2:1c:27:42:5c:c6:30:b0:b7:58:3d:03:92:97:61:
c0:57:1c:d3:46:aa:93:be:a5:bf:7d:c6:42:4a:4a:
b9:ed:fb:9a:07:66:f8:0d:99:f1:91:a8:71:3f:98:
0a:74:20:ac:54:ff:47:77:80:9a:66:74:99:b4:82:
89:cc:2d:26:6b:8b:4f:c7:84:cd:20:12:06:bb:7a:
1b:af:ac:54:e9:d6:b2:d8:17:46:78:1c:24:0e:a5:
bc:41:2e:c6:96:11:df:3d:d9:ed:52:96:c4:a0:a3:
67:12:04:79:0f:2e:52:2d:75:ec:aa:fd:2d:93:18:
f3:1e:04:46:83:c0:e3:c7:e6:f3:ee:19:d1:cb:16:
42:b6:c3:33:35:76:5a:fa:88:55:1d:2c:a5:5a:48:
ce:7e:24:a4:12:8f:32:a0:3a:80:2d:d9:09:db:f6:
02:90:8f:5b:7a:fc:1b:15:54:95:36:90:c5:d9:35:
52:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:59:38:15:28:61:95:14:74:02:F2:95:F7:2D:12:27:13:97:86:9A
X509v3 Authority Key Identifier:
keyid:A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:eb:9b:b4:52:a9:cf:84:53:21:22:94:af:ad:60:b0:86:05:
ba:ef:0d:86:ac:79:2e:7c:a6:6d:26:36:d4:1b:fe:8a:d6:72:
a6:f6:28:f9:08:42:b0:fe:d5:81:e2:90:1f:19:b3:27:81:66:
8e:93:7e:9a:23:23:02:ac:6a:20:50:6a:b5:2e:14:bc:dd:07:
53:f4:c7:ab:23:9d:fe:8e:cb:34:e5:ff:e8:1a:a0:8f:25:4e:
e1:e8:82:16:68:eb:d6:89:bf:18:02:46:c8:6b:fc:9c:c6:fb:
e5:16:38:0e:dc:bd:4c:ae:d7:8d:1a:1b:75:57:fa:a1:c8:ea:
f6:80:3f:82:68:b6:a7:20:b1:b8:2b:10:c4:69:49:85:e0:c6:
3c:b1:c8:ea:4b:82:b1:b5:23:da:4e:45:3d:75:2b:2a:ad:9a:
58:3a:b1:e6:4d:3b:e8:19:91:c7:1e:12:52:11:b6:ec:67:b2:
4c:6e:f3:78:58:96:0c:cf:3e:2f:6b:25:cc:47:94:e4:ce:85:
ee:c3:76:d7:81:42:02:68:5e:4b:e5:4a:ef:6a:c8:db:e9:8f:
be:58:9b:83:53:5b:65:98:3b:52:8c:42:52:60:20:a6:2c:21:
8b:98:f9:64:57:1b:a7:13:76:65:ab:38:a3:e7:ff:5b:68:66:
6f:13:31:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:31:01 2025 by rpki-client