Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft
File: PuzUyqmjpXcV49XWa8zXGFr-QNo.mft (raw, json)
Hash identifier: QVuFr55x7hqY5Q2dLICT8jz66EX/ZeUrSpZAlF62ucs=
Subject key identifier: 20:67:61:8B:BB:EB:AC:F8:17:D6:28:38:11:A0:DE:7D:11:FD:B5:C8
Authority key identifier: 3E:EC:D4:CA:A9:A3:A5:77:15:E3:D5:D6:6B:CC:D7:18:5A:FE:40:DA
Certificate issuer: /CN=3eecd4caa9a3a57715e3d5d66bccd7185afe40da
Certificate serial: 01968B4A72B26DF6EF9534777793047A07DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuzUyqmjpXcV49XWa8zXGFr-QNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft
Manifest number: 1523
Signing time: Thu 01 May 2025 10:00:34 +0000
Manifest this update: Thu 01 May 2025 10:00:34 +0000
Manifest next update: Fri 02 May 2025 10:00:34 +0000
Files and hashes: 1: GTSqn8ohuN-MHhN18mr9Itlt7ao.roa (hash: lFLyLMK3dWhD600oT7fgmI5ccuGsQ2tgFOCCKMH2dCM=)
2: PuzUyqmjpXcV49XWa8zXGFr-QNo.crl (hash: HMQSujoKFGFoKXLgcFCDIrAUz+cSAEZ2FmKjnzAW6Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuzUyqmjpXcV49XWa8zXGFr-QNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:72:b2:6d:f6:ef:95:34:77:77:93:04:7a:07:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eecd4caa9a3a57715e3d5d66bccd7185afe40da
Validity
Not Before: May 1 10:00:34 2025 GMT
Not After : May 2 10:00:34 2025 GMT
Subject: CN=2067618bbbebacf817d6283811a0de7d11fdb5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:bd:29:ac:a3:fa:bf:d8:59:b9:d3:5a:e7:
23:a3:7e:07:8f:b1:6d:76:bd:9a:18:47:ef:61:84:
42:42:3d:c3:cf:9b:61:3e:9b:94:f1:bf:ce:1a:c1:
63:6e:fc:28:a8:b7:e0:48:5f:d4:ca:83:e7:86:0c:
2d:e7:d5:9f:f4:37:ce:b6:2f:b9:1d:39:f3:a8:af:
5d:10:32:f7:2f:24:16:8a:da:f1:eb:f3:dc:00:b2:
d4:7a:e3:08:15:ae:22:74:df:2a:42:5d:d2:97:53:
a9:6a:d3:fb:2c:d1:72:36:78:8e:f3:8e:7a:39:2b:
b2:a4:7c:19:e5:7a:70:3f:99:60:66:b3:14:8a:c3:
56:60:ac:bf:18:ac:83:49:60:55:9f:9f:cf:46:a8:
64:97:cb:8b:bc:d6:0c:c7:df:a7:00:09:fc:93:1d:
e8:52:9f:24:39:c9:58:c8:8c:ea:1c:97:ce:cf:72:
80:3c:10:34:79:7b:9c:b8:b5:e4:f5:e4:6b:2d:83:
87:3f:d7:6e:bb:a5:ed:3e:06:7d:80:11:03:db:c5:
27:34:6c:0a:3a:2a:0a:d3:56:4a:79:15:a3:b3:d8:
7d:d7:1d:87:b6:da:77:6f:ea:0e:b8:43:78:e2:dc:
a8:16:2c:69:6c:1b:26:0e:c7:f1:9f:99:14:44:43:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:67:61:8B:BB:EB:AC:F8:17:D6:28:38:11:A0:DE:7D:11:FD:B5:C8
X509v3 Authority Key Identifier:
keyid:3E:EC:D4:CA:A9:A3:A5:77:15:E3:D5:D6:6B:CC:D7:18:5A:FE:40:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuzUyqmjpXcV49XWa8zXGFr-QNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3645b2-af2e-4c0d-9812-69eec5b4b505/1/PuzUyqmjpXcV49XWa8zXGFr-QNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a1:0b:15:44:b8:dd:03:6a:31:69:a9:d3:cc:be:d6:0f:69:
ac:cc:fe:1b:c8:96:b6:2c:f0:84:5e:89:38:1c:71:91:97:b6:
c5:e1:d4:ad:47:fc:3f:7a:02:4f:2c:fc:d1:27:8a:85:b9:0e:
d0:a4:e7:8d:fc:24:2c:e1:11:20:34:c6:a5:ae:b0:51:0f:89:
51:02:74:c6:c0:88:8f:e2:ac:9f:e0:4b:ae:26:f2:86:7c:09:
db:57:8a:84:58:e9:b2:23:34:c6:29:7a:fa:d7:57:d2:93:81:
86:00:53:78:ab:b2:34:32:39:dc:ed:06:eb:5b:b4:39:ca:d0:
39:cb:fc:93:05:ec:70:54:85:c7:b4:61:ba:04:e9:97:c1:45:
e3:91:1a:69:10:8c:68:70:8f:6f:88:51:1f:ab:e6:9e:8c:60:
eb:e8:85:fb:82:18:03:ec:c0:d5:d4:2d:35:68:46:f1:01:01:
9a:36:45:8c:4e:06:09:d7:52:f6:34:b2:3a:ed:b0:aa:b1:02:
3e:f4:e6:56:69:d8:a3:1f:36:e7:1c:7f:10:ba:d6:38:44:97:
81:94:e7:9e:ae:2a:33:1e:2d:5a:62:c9:67:a0:07:12:47:77:
7e:78:07:82:e0:0a:0d:69:b3:dc:ea:34:2f:57:92:c9:74:56:
d2:05:77:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:15:06 2025 by rpki-client