Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File: pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier: ZX9DU2bD8zt6Oyz01accJlizx+uyw8CAdvegopfuDHs=
Subject key identifier: 80:14:F4:88:D0:CF:7E:A9:E4:47:A9:6B:07:3B:F5:2B:D7:51:59:CA
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial: 0196760D0E12D63D9A746564DD8F5DFC47B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 07:01:29 +0000
Manifest this update: Sun 27 Apr 2025 07:01:29 +0000
Manifest next update: Mon 28 Apr 2025 07:01:29 +0000
Files and hashes: 1: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: GPTsuuuQ1ZQLmgTKJ5FwOlYuKPuaH7qyICk2fR2rmx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:0e:12:d6:3d:9a:74:65:64:dd:8f:5d:fc:47:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Validity
Not Before: Apr 27 07:01:29 2025 GMT
Not After : Apr 28 07:01:29 2025 GMT
Subject: CN=8014f488d0cf7ea9e447a96b073bf52bd75159ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:89:36:dc:58:15:e1:0f:b3:11:62:41:2f:
33:66:b1:3a:ad:84:cc:1a:85:c8:6b:89:fe:27:7b:
31:8f:18:dd:cb:5d:30:c4:3a:5e:33:9a:92:ab:80:
dd:b1:ff:44:63:19:f6:6c:ad:1f:e0:f0:f2:9c:3d:
a5:31:a2:da:11:4a:25:9c:f2:1a:51:cc:a4:7a:92:
30:b9:4a:30:00:51:0e:24:12:cc:2f:50:a8:36:bd:
e4:3b:25:40:53:c8:dc:20:92:98:2e:f8:8e:17:77:
ab:0d:b4:b4:e5:c1:10:0f:d8:2e:45:09:1e:69:a4:
3c:c5:f0:e0:c6:b0:46:a9:fa:9a:1d:bf:a4:18:f3:
dc:d5:48:e5:59:8d:8d:87:bf:20:12:4f:9e:11:21:
26:34:2a:ba:0a:2d:9b:c1:ee:4f:48:94:c6:bb:51:
f5:a4:c1:f5:ba:4c:cc:37:fa:d2:b2:7d:bf:ea:92:
e7:d7:cc:b8:87:cf:32:f8:2e:d2:0a:f2:c6:ed:b5:
08:27:62:58:3a:ac:fe:b7:8f:3d:93:76:ff:09:4e:
33:a7:c3:f4:12:e2:a6:3a:a9:53:f2:13:a4:c7:e8:
1b:0c:14:94:f9:d1:ea:79:17:b8:6c:a1:cd:83:97:
ab:ce:77:f6:6f:b6:c5:ca:79:5a:90:d2:b1:ec:2b:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:14:F4:88:D0:CF:7E:A9:E4:47:A9:6B:07:3B:F5:2B:D7:51:59:CA
X509v3 Authority Key Identifier:
keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:db:c3:d4:24:5e:60:a3:38:bf:c7:13:8a:99:46:32:ec:7e:
e8:2b:73:e0:ab:fb:58:b9:2b:a4:be:15:61:16:c6:31:2d:60:
66:bd:a5:11:f7:bb:c8:4d:bd:44:3c:1d:06:aa:20:23:7d:bc:
60:f0:ce:85:a4:06:e7:d1:29:f0:d5:d0:79:27:0a:c3:bf:d9:
da:d0:e7:d1:6a:2a:81:01:8c:60:17:60:bf:a8:9e:0f:33:1a:
d6:11:c3:ff:14:10:ae:93:d7:c4:d8:1b:ba:c9:48:e6:b2:13:
3f:64:9d:11:7e:f9:ac:85:41:a1:58:f3:10:5c:02:cb:b9:ef:
21:5e:02:13:c5:98:01:b6:45:42:2a:aa:c1:e0:da:64:cf:d7:
76:41:44:fd:58:7a:34:0b:55:68:7c:8a:18:fd:f8:62:9f:3d:
d3:60:ad:d4:a1:e0:d6:56:b8:e6:98:6d:43:ca:e3:be:39:07:
0e:d9:f6:58:d5:ad:4e:65:af:3b:6a:f6:ed:fa:07:71:9d:c0:
7f:24:fc:87:84:be:76:8c:46:a3:4b:e3:2d:63:59:f1:9d:3a:
55:bc:6b:42:9a:f4:3c:d9:9b:2f:64:df:8d:17:d2:c4:bb:66:
9b:b0:45:f3:f8:64:38:cc:11:ae:c0:d8:a3:0c:30:20:95:4d:
a2:b3:f2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:36:25 2025 by rpki-client