Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
File: PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft (raw, json)
Hash identifier: Jwq2FPioNR+5+ETCq/oAUdAGom5QLLTcs0tkvmLivGM=
Subject key identifier: E5:83:94:C4:26:06:1F:B8:EE:35:7C:93:85:69:12:78:9B:3E:5E:20
Authority key identifier: 3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
Certificate issuer: /CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Certificate serial: 0196A278011B1D7349FC404D3532C997DB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
Manifest number: 1314
Signing time: Mon 05 May 2025 22:01:35 +0000
Manifest this update: Mon 05 May 2025 22:01:35 +0000
Manifest next update: Tue 06 May 2025 22:01:35 +0000
Files and hashes: 1: PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl (hash: nAGoqfI8oDA3YwsHgoz+d7o0mhuxSajZnSb9dSheLgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:78:01:1b:1d:73:49:fc:40:4d:35:32:c9:97:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Validity
Not Before: May 5 22:01:35 2025 GMT
Not After : May 6 22:01:35 2025 GMT
Subject: CN=e58394c426061fb8ee357c93856912789b3e5e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:9c:81:9f:ea:1f:21:69:d4:16:26:4f:08:
57:76:b0:05:7f:c5:5d:bb:d7:e1:14:86:e6:a0:de:
44:ef:09:da:e1:c3:c6:f6:c5:02:22:b5:82:77:8f:
da:09:27:2c:4b:7b:92:7d:09:b1:5a:cd:82:b2:8e:
1a:92:94:af:f7:6c:dc:a6:0a:0d:50:43:d6:37:d8:
d4:7a:41:57:41:bf:00:99:a3:4b:d1:ad:4e:12:23:
8d:bf:75:c5:37:0a:8c:8a:9d:97:5c:2a:9f:86:96:
be:f3:47:9f:7e:c8:76:7e:6a:cb:23:da:18:2d:c9:
b4:a3:c4:56:07:7d:29:84:67:3e:ef:6c:be:a6:ad:
89:43:77:bf:5d:fc:f2:9e:4f:fa:c2:2f:fe:53:19:
7f:ba:d3:ec:cf:93:07:97:62:e8:e2:58:f0:ac:01:
b7:d5:47:b3:cd:8a:ca:59:3f:82:2c:d5:38:40:01:
82:35:38:5b:0f:99:d5:1c:f0:5a:20:55:90:ea:1a:
2c:4b:e0:1f:dd:ac:87:a9:3e:a3:30:20:df:5f:f5:
25:9c:13:be:38:a6:a3:a4:6e:2f:4e:b0:ef:fb:32:
05:7c:75:c6:ae:ac:a5:8d:97:2a:a8:ba:56:9e:30:
7e:45:4b:ae:d0:92:7e:1c:0c:0b:02:7b:c9:fd:0e:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:83:94:C4:26:06:1F:B8:EE:35:7C:93:85:69:12:78:9B:3E:5E:20
X509v3 Authority Key Identifier:
keyid:3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:58:84:a4:1b:dd:1e:9f:ce:3d:f8:74:52:a6:ea:35:af:3c:
f8:09:aa:a5:d3:1f:71:94:76:60:f1:66:84:4e:4e:ff:93:73:
55:b6:3c:37:25:6b:53:f3:ba:20:ad:13:10:3e:22:9d:37:c6:
3d:63:5d:64:8b:7d:8a:4c:85:5c:2f:68:a2:68:4c:2c:c4:9a:
c6:b8:88:28:49:18:d9:7a:c5:f4:c2:27:39:28:59:de:23:a9:
c3:d0:b5:30:f4:5c:0a:05:ee:fa:5e:de:99:be:65:50:5f:de:
ef:07:5d:e9:50:f8:b4:e4:10:7f:07:7b:ab:c6:f3:34:47:92:
6e:fc:76:91:6c:69:55:64:2f:e6:1e:6b:28:e0:69:05:fd:9b:
e0:b5:36:03:bb:88:30:32:3e:c2:78:d5:99:ed:19:98:83:31:
5e:2c:ba:74:17:61:86:d5:00:f8:56:3d:3f:73:8b:6a:3c:4c:
66:50:99:21:e4:67:81:43:40:75:59:d2:4a:73:25:4f:84:cb:
58:15:92:88:20:ca:a7:4d:95:25:e5:ea:3a:e1:c9:90:cb:c8:
2c:11:59:5e:17:8c:33:54:d8:34:05:76:aa:a8:db:a2:63:28:
10:29:7d:a0:82:3d:e3:09:c9:9f:8f:1f:e7:77:05:10:8c:0c:
82:31:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:55:50 2025 by rpki-client