Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: AtfKmrUb439Tk+KULprHTW+QYLhHowZ+ZUS/6TjQEs0=
Subject key identifier: 07:DF:1C:3E:B4:4A:31:99:E7:10:19:59:6F:0C:75:81:D7:BD:F7:20
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 019674F9C3525F982387C39FF1C9C6B13E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 077F
Signing time: Sun 27 Apr 2025 02:00:47 +0000
Manifest this update: Sun 27 Apr 2025 02:00:47 +0000
Manifest next update: Mon 28 Apr 2025 02:00:47 +0000
Files and hashes: 1: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: KYVEvAZEXAfmKSFRJ8R0KxNEUVRjMuENjvoAtSeT9xU=)
2: vDazkPOiPtoCYetZfRX-qpQ69j8.roa (hash: B0GK+5WaWwtXf0DhRaPxfP/Ak+Di2Wr89zC0Jym0UK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:c3:52:5f:98:23:87:c3:9f:f1:c9:c6:b1:3e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Apr 27 02:00:47 2025 GMT
Not After : Apr 28 02:00:47 2025 GMT
Subject: CN=07df1c3eb44a3199e71019596f0c7581d7bdf720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:04:21:a8:58:53:a2:05:79:a8:72:e6:9d:
98:98:25:5d:c1:fc:90:0b:82:b5:8f:e8:ff:01:5f:
f7:c1:b5:58:41:05:ee:97:1a:ec:20:47:7c:82:32:
59:d6:f2:12:11:78:b6:13:64:30:7b:57:2e:61:55:
12:89:89:cc:fa:0c:8f:3c:d2:ed:5e:16:0d:ba:a0:
bc:e5:6b:2f:40:c7:ae:c3:11:37:17:bc:cf:fd:1c:
e1:8a:9a:55:09:d8:e1:7a:64:aa:a8:ef:25:d8:c3:
88:1c:1c:65:8c:db:00:52:99:0d:46:ef:4a:83:ef:
c2:0e:c0:06:37:93:9d:a0:cd:c4:d7:cb:33:fb:e1:
4f:4b:01:48:1e:9b:6d:87:c3:bf:3d:a8:75:71:7b:
d7:1a:66:e9:68:09:1f:ca:ac:13:0e:3a:97:9d:a7:
ff:f4:1e:ff:05:e8:71:60:b9:c8:30:94:51:f6:ce:
fa:fb:ef:cb:cf:5c:d5:65:ae:2d:d0:21:0a:2b:7f:
63:7f:62:fc:b6:ec:0d:ae:e2:f2:28:d2:e0:5c:0b:
e4:b7:d6:df:92:66:42:98:67:a3:da:df:29:5b:9e:
9b:25:68:b7:40:5c:f3:2a:be:da:10:31:16:e1:50:
b3:8f:8f:c4:59:b5:cb:be:cd:59:a1:9e:1f:b5:7a:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DF:1C:3E:B4:4A:31:99:E7:10:19:59:6F:0C:75:81:D7:BD:F7:20
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:35:47:e6:b2:42:6b:8c:58:84:b9:e2:38:9e:d4:ec:c6:6c:
77:09:ec:7d:09:b7:5c:20:1c:78:11:af:58:e8:c5:f6:7a:4d:
9c:81:0a:28:3d:20:b9:40:48:5d:2b:90:58:af:7f:ab:f0:8e:
22:9e:df:fb:d0:30:d1:d3:8b:34:12:95:b9:1d:2d:48:e0:d6:
31:53:2a:4d:cc:e0:2b:ee:87:63:c4:37:36:1a:cb:f1:0e:33:
e8:f0:2c:5f:17:7c:c7:6b:ed:ad:6f:2a:08:56:12:ca:d7:b1:
f9:4b:d1:97:02:a7:01:65:db:90:14:fe:8e:3a:a2:02:38:f8:
0e:01:95:ee:b0:6f:96:fe:7e:8f:51:a7:b8:a2:3c:63:d2:5a:
05:c6:3a:29:60:6d:d5:21:c7:f6:f5:fd:31:0b:90:c2:e9:ba:
18:df:0d:12:58:cb:79:12:51:d7:53:fd:06:71:5a:f4:a3:f6:
a8:d1:45:93:28:18:2b:ee:cc:80:8e:d0:bf:e3:c0:0d:62:2b:
c8:17:c6:d8:0a:77:4d:16:b2:a1:23:56:82:16:94:18:6d:ec:
04:39:36:9e:aa:21:a8:fc:46:76:1b:ca:5e:0f:6b:76:cc:64:
e3:ae:3d:ef:c6:f0:07:56:a9:c2:64:7d:c2:77:0f:27:a2:15:
30:6d:b9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:46:58 2025 by rpki-client