Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
File: PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json)
Hash identifier: m4qqYoiZx8nGSSqMvDUXlolij/hYXBy1T8ns15Jjcas=
Subject key identifier: 29:33:19:BA:2D:42:93:ED:67:73:23:F2:7D:37:39:B7:82:70:CF:6A
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial: 0196876E4FBD98BB8287898290B5294283B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
Manifest number: 091E
Signing time: Wed 30 Apr 2025 16:01:15 +0000
Manifest this update: Wed 30 Apr 2025 16:01:15 +0000
Manifest next update: Thu 01 May 2025 16:01:15 +0000
Files and hashes: 1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: 7DDqdcRUJgM2sBole0tUDnyhZLuBJbl+KMlFebPmkIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:4f:bd:98:bb:82:87:89:82:90:b5:29:42:83:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Validity
Not Before: Apr 30 16:01:15 2025 GMT
Not After : May 1 16:01:15 2025 GMT
Subject: CN=293319ba2d4293ed677323f27d3739b78270cf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:c1:93:9b:4a:17:8c:6e:3a:2c:b4:22:ff:
37:3f:4b:7d:4e:7f:a2:ff:f7:35:f8:e9:4f:fc:2c:
c7:d7:d7:ed:cd:07:57:9c:be:79:b6:58:4c:4e:26:
1b:d6:b6:e5:17:a2:4e:7b:2b:e2:e7:f4:98:b1:f5:
f6:84:54:e3:84:95:8e:bf:cc:aa:e4:0b:80:74:97:
38:b1:82:6c:f0:f8:5f:de:5e:d8:94:28:47:2d:3a:
c1:74:d9:b7:3a:63:41:c5:2e:a4:42:fb:0b:b8:fd:
35:46:54:0b:bc:c3:32:e3:c1:59:d2:1c:d8:4e:5f:
5c:3a:41:42:be:27:e1:10:55:99:d6:da:3c:ab:b5:
2b:a4:e2:53:7f:8f:df:e8:75:c3:e3:54:35:0d:88:
6b:cd:08:4c:8d:5d:3b:db:c3:38:e6:7e:01:5b:5d:
22:e8:9d:ba:9e:f0:8b:b6:a6:82:21:5d:5b:52:d0:
2b:ae:9c:00:1d:cd:e0:f8:49:9a:79:85:98:03:27:
a8:bb:6f:a4:44:3a:0e:49:80:c8:22:76:62:ed:87:
dd:91:b5:cb:2e:29:2c:8c:f8:7c:86:24:75:94:42:
ef:05:9b:2d:7b:c5:4f:a6:75:2d:07:f1:de:f4:57:
b7:94:4a:4f:4b:0f:9f:c5:96:25:5d:62:9a:06:0c:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:33:19:BA:2D:42:93:ED:67:73:23:F2:7D:37:39:B7:82:70:CF:6A
X509v3 Authority Key Identifier:
keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f1:87:da:1c:52:a9:45:c5:54:84:f2:74:07:e7:12:09:bf:
a3:1e:23:84:1c:8e:a3:a9:6a:fc:47:6d:f8:bd:4c:00:8d:17:
e1:86:bb:92:c7:e8:01:16:15:db:d9:63:34:7a:d5:04:22:f7:
59:33:7d:20:46:5e:4c:54:c7:f3:9f:ea:15:e3:83:d3:a2:a9:
68:10:4d:9c:a0:ff:37:97:9f:75:6f:75:d0:79:b7:72:ab:e0:
52:92:30:17:05:bc:a4:41:ec:fb:e3:ef:54:c4:20:ab:29:76:
7b:01:72:eb:77:69:58:ef:81:86:cb:4e:f5:30:07:63:ce:39:
72:ae:57:0b:32:f3:72:52:0d:24:f3:5a:05:63:be:ff:ad:11:
85:38:be:2f:b8:f7:0c:e2:75:12:28:29:1d:ba:3d:fe:52:59:
ce:16:88:18:04:a1:1a:53:29:83:f0:37:4c:ca:1e:83:0d:bf:
19:30:96:38:18:bf:17:07:55:a4:31:72:5f:8d:4d:5d:9e:01:
c3:f8:a8:17:65:98:7d:e6:b9:06:bd:67:51:59:89:2d:26:e3:
81:45:f6:3c:50:a5:5c:6f:61:a5:dd:a5:1a:f3:6f:f4:98:66:
a3:63:10:51:92:9c:6b:cc:5d:12:0b:87:a4:23:4e:e8:2f:a3:
75:9c:9d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:42:13 2025 by rpki-client