Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: rcXaT2/UMQmq1BJsift+9DJUrXmT1JD5CJb4TLY/q8Y=
Subject key identifier: BE:01:94:E2:1B:6E:E0:AD:90:F3:65:52:71:5C:A1:B0:1C:47:FD:35
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 01967642D16454AC7FE01FCE5827C78B839C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 0DD5
Signing time: Sun 27 Apr 2025 08:00:12 +0000
Manifest this update: Sun 27 Apr 2025 08:00:12 +0000
Manifest next update: Mon 28 Apr 2025 08:00:12 +0000
Files and hashes: 1: 8e7eehP1l-DLf5STdKJWnoHYbKQ.roa (hash: K8SacJP+Z6piM83BegnBqW6J1m/glPf8EgTcnUYrotM=)
2: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: JAzaetkqiz/qUKvH67tlkudYvKbpJtl/EluTNjALpQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:d1:64:54:ac:7f:e0:1f:ce:58:27:c7:8b:83:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Apr 27 08:00:12 2025 GMT
Not After : Apr 28 08:00:12 2025 GMT
Subject: CN=be0194e21b6ee0ad90f36552715ca1b01c47fd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:1a:7f:ad:cd:1d:d0:c8:10:1d:f8:27:a5:
7e:a1:eb:5d:48:4a:16:ed:27:2f:9e:51:c6:83:26:
11:d5:e3:c6:e4:46:fd:95:8f:a6:af:dc:88:b2:bb:
14:69:dd:44:92:af:a1:c9:6a:79:06:a1:80:90:68:
2e:08:4b:6a:2e:9f:bb:50:0e:38:5a:f6:86:06:d5:
4b:e0:07:f4:00:96:05:60:e2:05:cb:91:9f:22:57:
fb:80:e5:f1:93:55:a5:59:6a:e6:af:69:8d:65:bd:
1c:67:4b:fa:9a:eb:5f:1a:57:1e:41:e3:ca:69:cc:
f8:dd:6e:42:eb:48:0e:e7:7e:b9:ef:f2:f4:fc:a0:
ef:c3:42:33:75:3a:33:f7:97:21:2e:45:42:e7:b6:
ca:4b:ea:9a:d3:08:f9:ca:dc:39:1f:46:f7:ab:3e:
a9:fd:8a:b9:34:65:83:ff:1e:f9:2a:c6:22:48:1a:
55:a8:28:52:4f:29:c6:25:ee:a7:af:fc:c8:4e:24:
34:4b:87:92:ca:e4:fe:5c:ca:80:c2:f7:55:06:b2:
60:20:35:0e:14:3b:59:55:c0:4c:ab:f7:be:c4:1b:
a1:df:f2:63:84:c3:61:47:2c:d8:ec:7a:db:68:bf:
75:49:5e:47:c6:08:15:cf:e9:1a:72:c1:e5:09:6e:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:94:E2:1B:6E:E0:AD:90:F3:65:52:71:5C:A1:B0:1C:47:FD:35
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d4:f4:a7:35:1c:63:1f:f9:63:8e:12:e0:15:11:5c:bb:8c:
73:40:c1:83:91:8d:7d:5b:da:0f:52:a6:f0:7e:a2:dd:69:46:
bb:ab:5f:b8:00:e4:06:0f:6d:ef:62:19:cb:14:03:aa:d4:24:
4b:44:cd:97:c8:4c:87:13:c8:9c:62:36:a9:98:09:d1:ec:8e:
fd:a8:7c:fe:e6:13:37:1e:a0:08:b4:c9:b8:af:f0:6a:74:19:
c8:3f:dc:fc:45:eb:36:4a:86:ca:62:48:0d:bc:3a:2a:f7:ae:
0b:2f:03:73:24:75:ef:0b:0f:44:91:d5:65:da:d9:36:5a:4e:
5c:36:96:90:d6:56:c8:d9:70:b9:65:92:21:c8:86:02:e3:96:
e6:02:e2:b8:40:e4:68:1a:5b:49:8b:f6:7a:77:80:bb:16:22:
bf:a0:c0:7e:34:ca:3a:00:a0:15:ae:6f:9c:68:58:38:2e:f7:
26:c9:b3:f6:88:b5:ba:08:6d:61:69:d6:e8:10:6d:67:1d:08:
81:48:1f:38:ba:a9:46:35:f0:0c:f9:49:68:6a:7a:e7:5d:f5:
2c:18:61:c5:65:3f:34:77:3a:7e:8e:19:a1:08:ad:e8:f8:d6:
60:af:94:4c:99:99:f0:92:10:01:53:51:6e:21:50:97:ee:9b:
7f:f0:30:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:42:57 2025 by rpki-client