Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
File: pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft (raw, json)
Hash identifier: t0QgrRDoECYmX5LN5AqwVgECYVxk/8BIdKX70UTRNHY=
Subject key identifier: EB:73:7D:1F:30:F4:2B:FA:BC:CA:D9:63:67:33:DB:A6:B7:47:47:A4
Authority key identifier: A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
Certificate issuer: /CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Certificate serial: 01967B32B5FAA56804FCF8F95E78864AFACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
Manifest number: 1341
Signing time: Mon 28 Apr 2025 07:00:42 +0000
Manifest this update: Mon 28 Apr 2025 07:00:42 +0000
Manifest next update: Tue 29 Apr 2025 07:00:42 +0000
Files and hashes: 1: pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl (hash: TS2iDjmAUbbklDdS12l6AheJaRQvlkcAaIHxgaJ6atU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:b5:fa:a5:68:04:fc:f8:f9:5e:78:86:4a:fa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Validity
Not Before: Apr 28 07:00:42 2025 GMT
Not After : Apr 29 07:00:42 2025 GMT
Subject: CN=eb737d1f30f42bfabccad9636733dba6b74747a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:be:bb:99:04:3b:9f:7d:62:e3:8e:30:d2:
00:af:0f:47:b6:3f:44:a0:67:c4:75:bc:29:bd:54:
b0:eb:07:9a:c1:d4:5d:27:1e:c4:de:4a:92:c3:3a:
df:2c:b7:a9:94:46:60:be:20:24:19:8c:55:bd:62:
72:e9:8e:2f:ae:b3:75:0f:6b:5f:2c:99:97:76:81:
af:26:fb:01:17:de:1e:4a:21:92:a8:ed:98:61:2d:
17:68:f9:cf:6f:fd:ba:52:56:77:56:8d:d5:61:3e:
86:af:dc:7c:0c:05:f9:43:f7:84:b0:bc:87:fd:09:
ef:e0:cc:16:fa:f0:8a:5a:8b:57:68:1a:e6:c5:4d:
2b:d8:e9:9b:2a:82:b5:65:54:c4:28:8b:f3:85:c5:
2c:db:be:4c:07:90:70:e6:28:66:92:5b:1d:65:93:
1b:33:c7:b2:a2:b5:86:31:1b:26:c2:59:5f:0d:e6:
6b:d2:d4:96:f7:a7:4c:69:a7:b9:d8:86:e8:d9:c3:
0e:49:f9:eb:cb:07:4f:f4:c5:da:c5:5e:69:22:a6:
76:00:0f:67:9f:02:b8:80:96:0c:3e:22:dd:24:fd:
73:3b:6f:b8:1f:b2:1f:fa:78:ed:00:ef:42:f1:e8:
63:2a:22:ca:14:fa:3c:22:dd:0c:ee:2d:42:c9:ca:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:73:7D:1F:30:F4:2B:FA:BC:CA:D9:63:67:33:DB:A6:B7:47:47:A4
X509v3 Authority Key Identifier:
keyid:A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:28:74:c0:7d:af:6d:e7:f3:45:7f:33:a0:07:67:c1:e7:92:
35:75:70:10:00:47:21:6c:5a:28:03:19:a1:af:e7:36:9c:af:
20:6c:ca:c4:b2:59:e4:03:65:36:c1:a7:51:33:ef:75:45:9b:
e4:fa:ae:c6:e4:c5:01:96:24:80:36:3b:5c:28:6a:36:e1:61:
0b:d2:87:a9:5d:cc:0b:b2:74:dd:cc:50:45:6c:7e:90:d4:1f:
71:c0:19:c7:f8:b7:25:07:03:21:a3:b5:5a:1a:45:c6:f4:42:
25:04:63:b7:de:b8:1f:48:50:b7:cc:fd:f3:ea:07:b9:e0:1b:
3e:1d:6c:99:40:e0:c8:35:2e:1b:15:09:88:3a:06:5b:81:97:
9b:23:50:00:a6:e2:13:49:de:87:3a:ce:57:58:ae:7c:b1:39:
9a:13:4a:0e:82:e7:83:d3:7b:ef:bc:6d:a3:f5:82:9d:5a:62:
d5:f9:d0:0d:d7:9c:b6:28:c0:e5:18:05:c9:49:03:3f:d9:7e:
85:85:c6:2c:19:34:3b:2d:68:97:e8:8b:c5:69:1d:85:14:4e:
fb:14:d5:85:ab:04:bc:6c:fa:a3:c7:0c:e4:01:ad:02:1f:aa:
d6:89:1b:97:28:a8:b1:91:6c:47:80:6d:a0:c4:e1:54:22:52:
31:3b:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:45:11 2025 by rpki-client