Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
File: PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json)
Hash identifier: HkqyIwRrcdSLcf/CMPbkAEL1vjp4s9kKXXB0SBVHCiU=
Subject key identifier: ED:77:3C:0A:98:13:A6:52:26:D3:13:55:64:20:4D:12:F4:D8:C3:37
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Certificate issuer: /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial: 019680FE245B182958D4CC7B669B2F84D051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
Manifest number: 0957
Signing time: Tue 29 Apr 2025 10:01:01 +0000
Manifest this update: Tue 29 Apr 2025 10:01:01 +0000
Manifest next update: Wed 30 Apr 2025 10:01:01 +0000
Files and hashes: 1: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: lXOkyd3uizKVq81xy8EDk4o4DVDLwAAPBpAzFF3fsh0=)
2: flDyEgY09JcTncHiiRnZ44dc3Jg.roa (hash: U/d1Btmo0ndLftNS6W3aEjJNMxknGgzWNSoSOFVtfm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fe:24:5b:18:29:58:d4:cc:7b:66:9b:2f:84:d0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
Validity
Not Before: Apr 29 10:01:01 2025 GMT
Not After : Apr 30 10:01:01 2025 GMT
Subject: CN=ed773c0a9813a65226d3135564204d12f4d8c337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:83:96:c0:b4:39:03:75:df:32:cd:c9:11:
02:bc:d0:a5:41:7c:8e:cf:4a:1d:8a:ea:7f:bb:88:
b7:22:67:b6:07:83:b6:4e:86:09:d9:17:5d:f1:f9:
c5:54:40:4f:fe:4c:1a:32:83:05:9b:d6:49:68:a1:
5f:11:52:e4:92:6e:46:c8:ed:1f:ac:c7:c9:1f:4e:
b1:05:14:21:2e:36:b8:27:4e:31:a5:d2:59:ee:b8:
ae:5a:ec:9e:b6:48:aa:38:cd:51:23:80:87:cc:bd:
5e:d5:a6:33:fc:b0:17:42:b0:fe:f9:ae:ae:80:12:
a0:35:68:7c:9b:5c:a7:47:fa:c5:5c:42:92:a5:bb:
2f:43:a7:d9:05:24:4c:02:aa:94:31:0a:80:92:2e:
b2:05:e4:0f:35:9d:da:f6:cc:2a:5c:91:3a:ee:a6:
a5:26:cc:82:0d:7e:9b:78:90:94:3b:d0:d8:87:69:
c4:62:ba:2c:d8:66:16:3d:59:d4:0a:0e:cf:0f:ac:
8f:97:ec:d0:c1:3d:84:c3:f6:f2:64:96:97:0f:fc:
aa:44:4f:97:ac:6a:9a:12:96:fa:b4:0e:35:af:be:
1e:7d:79:de:4e:51:f6:47:60:c3:1e:ed:f7:7d:7c:
3b:46:48:eb:7d:c7:a6:6f:cc:bb:ed:5c:3c:b5:5f:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:77:3C:0A:98:13:A6:52:26:D3:13:55:64:20:4D:12:F4:D8:C3:37
X509v3 Authority Key Identifier:
keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6c:cd:30:a8:c2:da:c5:e7:e0:0b:93:7a:07:f1:f1:24:6e:
1b:2b:74:ee:54:4e:ec:0c:b4:15:bd:52:7d:68:98:26:ab:25:
41:87:e4:ae:fb:ca:a3:52:21:c6:5d:fc:c3:05:10:9d:e9:49:
34:39:1d:d8:11:c2:6f:9c:5f:2c:e9:b4:f2:74:45:8a:04:5c:
fb:9d:6f:22:d8:67:b7:12:77:fd:47:67:45:43:08:d2:c3:2f:
f2:24:3f:ad:eb:cd:2c:4f:a6:bc:45:6f:18:46:08:5b:c1:6f:
f8:e8:2b:15:9a:b5:b2:c2:f1:78:d6:d0:5e:cf:71:26:49:f2:
87:5b:b4:9e:82:b7:90:e9:0c:7a:75:91:e9:57:b3:f0:64:6b:
c1:4a:5b:c0:c5:3f:b5:8d:ed:15:71:5a:f0:f8:8b:db:e0:78:
c5:eb:fd:a5:71:f7:1d:34:15:bc:72:41:24:51:52:75:88:d9:
93:e7:7c:12:7d:eb:c8:e2:38:f1:27:43:76:59:1a:cf:9a:f1:
6b:89:47:02:92:81:c0:ab:02:ad:e1:2f:1a:9a:29:2d:94:f3:
25:d3:41:ed:82:8b:a8:ce:7d:b9:59:7d:5a:43:67:4a:8b:bb:
e2:ea:37:bb:29:ac:bb:96:9c:60:6c:2d:ca:4a:48:f8:d7:14:
38:0c:2e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:07:14 2025 by rpki-client