Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: CZg/hXyx6BcMxImTbnNof3+eZ46qCxdIqxMXcvB/XDA=
Subject key identifier: E1:F5:9C:21:4C:95:07:5C:95:0D:DE:54:EA:82:52:25:DD:07:57:98
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 0196907101828C169DCB66593F6885505483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 0FBC
Signing time: Fri 02 May 2025 10:00:47 +0000
Manifest this update: Fri 02 May 2025 10:00:47 +0000
Manifest next update: Sat 03 May 2025 10:00:47 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: WXrneS/HlLXXZWZkOKOBtycCEsVcv3HatFm2jMsmO5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:71:01:82:8c:16:9d:cb:66:59:3f:68:85:50:54:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: May 2 10:00:47 2025 GMT
Not After : May 3 10:00:47 2025 GMT
Subject: CN=e1f59c214c95075c950dde54ea825225dd075798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:aa:ab:04:8d:e9:f9:61:de:0d:91:03:e3:
f0:34:17:0e:78:2a:af:db:bf:bf:09:88:aa:eb:46:
cc:55:6f:4d:9f:9d:bc:13:03:4a:06:d6:c5:97:d4:
bd:1e:f8:64:03:5a:53:ba:ae:d3:db:f6:77:7d:e7:
05:12:f3:01:d4:5b:b6:7e:b9:3e:b5:f0:04:3d:68:
bb:f4:55:93:03:66:53:f4:78:b4:58:9c:af:80:06:
cd:02:76:a4:06:b6:8e:74:e2:a6:69:c8:6b:7b:6d:
1a:55:ec:86:80:83:55:ba:d0:49:49:13:f7:71:df:
0c:e3:c0:99:7d:a3:ec:6e:e3:c6:3e:1e:f1:6c:8e:
6e:9e:1a:3b:60:50:71:e2:c1:5e:b5:c9:44:6c:7a:
7b:85:fa:9a:7d:e2:b1:58:05:c8:68:3f:f3:82:b8:
e2:56:5d:db:bb:78:21:84:9c:11:c2:f1:27:9e:d6:
9c:37:40:22:48:17:95:27:c7:25:4d:39:d8:a7:29:
95:5c:bc:d0:38:ee:57:ad:8d:1b:55:32:90:c7:66:
40:cd:4b:23:0e:5f:d8:ea:4e:09:98:e0:22:0f:c9:
eb:a0:4c:4a:80:78:0e:27:e8:2d:2b:27:4c:e2:fd:
2f:f0:41:73:14:fb:79:b6:dc:c4:c7:e8:f9:44:1d:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F5:9C:21:4C:95:07:5C:95:0D:DE:54:EA:82:52:25:DD:07:57:98
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:92:89:bd:f6:0e:64:d3:eb:41:c0:cf:a2:0c:e9:92:ac:cc:
45:9f:50:f2:5b:79:4f:0e:e1:bb:83:2c:93:97:85:bc:a7:d9:
86:da:14:f5:4f:69:f3:8b:d1:89:ab:09:3f:ee:c0:f4:70:e6:
2e:e2:9e:bc:96:78:8a:15:25:64:39:c9:18:73:67:30:f3:cb:
92:85:1c:ca:de:8f:cb:6a:0b:8a:51:8a:b2:4d:de:74:fc:6a:
1d:74:d2:04:77:64:8d:a7:a1:df:be:1c:3a:7b:aa:70:b4:18:
7c:a3:3a:b7:fb:77:b6:d7:87:e8:cb:fc:a0:09:6c:d9:74:63:
c2:2b:f4:71:ee:eb:5d:88:71:a1:e5:3e:8a:14:0e:59:f2:63:
b8:fd:a4:49:88:81:f0:c5:6b:6b:4e:db:15:59:1c:e8:8d:76:
90:cd:86:95:5f:a6:7f:8e:1b:45:05:05:1d:65:78:b8:3d:af:
25:46:78:73:9b:5a:73:de:30:d9:7a:b7:e9:6c:f0:44:b3:fa:
96:dd:1e:76:18:4e:dc:cb:43:a8:85:23:5d:55:3e:d0:99:e5:
51:3c:85:78:cd:2c:1f:3a:b5:10:86:09:13:2c:a0:94:94:c7:
07:2a:7c:c2:94:0d:36:06:ff:95:b1:01:08:07:d7:cc:03:a8:
2d:c4:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:36:57 2025 by rpki-client