Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
File: PJMfJlqEcdMs6ESdnhhvDccRSno.mft (raw, json)
Hash identifier: zxZmnXgyIpogLlG7xFRZN04XdzQio1JMR+usirVVe1U=
Subject key identifier: 94:2B:46:3B:96:B0:CD:D7:1A:66:C2:7E:88:46:6C:66:29:AC:B2:31
Authority key identifier: 3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
Certificate issuer: /CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Certificate serial: 01968623DD9BC4F88BBFE4492F876F88C9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
Manifest number: 1215
Signing time: Wed 30 Apr 2025 10:00:19 +0000
Manifest this update: Wed 30 Apr 2025 10:00:19 +0000
Manifest next update: Thu 01 May 2025 10:00:19 +0000
Files and hashes: 1: PJMfJlqEcdMs6ESdnhhvDccRSno.crl (hash: 7eUf2ouFDn9u1l1kqnkylhKDdooGT2Fv5Ue8S3jNdJU=)
2: PkJhyt9pT1uGvNEkXULDRnIoKM8.roa (hash: GnXTwsBZIxIhJPycvbpoXf49+cV9ppIdazG5Z3GlNBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:dd:9b:c4:f8:8b:bf:e4:49:2f:87:6f:88:c9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c931f265a8471d32ce8449d9e186f0dc7114a7a
Validity
Not Before: Apr 30 10:00:19 2025 GMT
Not After : May 1 10:00:19 2025 GMT
Subject: CN=942b463b96b0cdd71a66c27e88466c6629acb231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:8c:c4:09:5f:ef:b4:05:25:1a:a8:6e:8b:
c7:15:ce:0b:87:19:d8:ec:9a:ee:1f:38:dc:3e:7c:
9b:c9:44:82:1a:64:77:6b:aa:a4:b7:2b:25:16:11:
cc:26:57:fd:3b:3d:3c:a1:0a:50:c8:f5:5e:4f:14:
2a:9c:ba:72:21:05:b5:0f:2c:74:ab:8c:71:cd:0b:
c6:24:28:9c:11:1b:a8:3c:17:97:26:63:2f:fa:9b:
d6:b5:14:33:5c:82:f5:b9:8a:60:c2:f9:fe:65:97:
b5:d7:6d:0a:73:2f:a5:a4:a6:c5:b1:bf:d7:1c:97:
b3:c1:14:ae:40:27:65:93:4e:79:61:7d:ac:9b:2d:
39:8e:ce:dd:c6:bd:52:af:94:94:7c:d8:f4:8f:8d:
53:c5:0c:52:3c:35:c2:5e:23:9f:e8:0b:45:32:6e:
e8:97:7a:16:fb:84:ea:14:36:c8:46:4b:fb:ec:cd:
45:2a:b1:9e:1a:05:56:1a:d4:e6:c7:de:31:86:3d:
7d:93:52:58:a8:33:f3:7f:b9:8c:c6:7c:15:3c:b0:
f7:38:45:8e:92:73:9d:30:1e:32:66:2d:51:a7:b8:
96:f0:ac:a6:8f:a2:fe:53:f5:d1:33:43:73:79:1d:
3e:46:b8:9c:c7:6d:8d:79:03:75:90:8a:94:2c:ba:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2B:46:3B:96:B0:CD:D7:1A:66:C2:7E:88:46:6C:66:29:AC:B2:31
X509v3 Authority Key Identifier:
keyid:3C:93:1F:26:5A:84:71:D3:2C:E8:44:9D:9E:18:6F:0D:C7:11:4A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJMfJlqEcdMs6ESdnhhvDccRSno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b50bda-6899-4eef-a231-5e0026303629/1/PJMfJlqEcdMs6ESdnhhvDccRSno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2c:98:8a:a2:ac:e0:7c:89:87:ec:87:2b:33:a9:44:8e:24:
ba:51:91:ea:d9:5b:14:ba:f1:24:40:a0:71:a4:73:5e:f5:20:
93:06:c3:ed:9c:5b:ed:83:ff:71:e8:c5:a4:31:45:19:1f:2b:
46:f8:82:81:aa:d1:80:4c:18:a2:41:d7:d1:47:46:85:66:e2:
4b:35:e7:dd:43:da:0d:99:b8:3f:36:15:69:e2:dc:b2:52:b8:
f9:24:b9:a8:dd:06:14:17:08:0a:9b:c2:90:a2:98:e0:c6:93:
0d:4d:50:c2:e7:07:29:07:9c:f8:4a:c7:3f:37:36:9f:12:fe:
64:3c:a9:de:e0:c1:6d:d5:e9:0d:e1:60:e4:b8:af:da:64:c8:
8b:5e:e6:5e:d2:f6:9c:87:78:2e:0d:ea:60:98:e5:13:0c:58:
f2:b3:ab:33:7f:d5:76:7a:74:86:4f:9c:32:be:c5:83:ff:a5:
b7:59:a6:23:d2:26:e4:cc:64:65:84:79:d3:c3:a2:b1:cd:3d:
b1:56:42:bb:04:0e:47:14:5e:91:39:21:5e:2c:1b:ad:51:56:
88:e0:cb:39:3c:0e:8b:91:71:d1:c6:b3:17:fd:b3:5f:dd:6e:
62:ac:c0:e1:45:8a:7a:31:3e:2a:43:aa:4a:2e:98:be:b8:cf:
ae:35:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:31:05 2025 by rpki-client