Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
File: pTW_JFBXN0H5Q16UghAWoi5rwUc.mft (raw, json)
Hash identifier: w0rvcE3TOpgWRZ7104o3EAjypaKUn7/qWAZetO8Otgs=
Subject key identifier: D5:48:5B:9C:F5:93:E8:1E:87:E2:31:EF:49:74:CA:9F:49:33:9C:0C
Authority key identifier: A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
Certificate issuer: /CN=a535bf2450573741f9435e94821016a22e6bc147
Certificate serial: 01967AFB98BAC1E8BCA4E614B654EFBF45CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
Manifest number: 150E
Signing time: Mon 28 Apr 2025 06:00:31 +0000
Manifest this update: Mon 28 Apr 2025 06:00:31 +0000
Manifest next update: Tue 29 Apr 2025 06:00:31 +0000
Files and hashes: 1: pTW_JFBXN0H5Q16UghAWoi5rwUc.crl (hash: 4MvjL72C4GWXuEYxxsiUVqJW29seGcOK7krMcOrdGYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:98:ba:c1:e8:bc:a4:e6:14:b6:54:ef:bf:45:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a535bf2450573741f9435e94821016a22e6bc147
Validity
Not Before: Apr 28 06:00:31 2025 GMT
Not After : Apr 29 06:00:31 2025 GMT
Subject: CN=d5485b9cf593e81e87e231ef4974ca9f49339c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:77:e4:6a:33:2b:3f:c5:f3:3c:45:75:5c:
35:69:49:63:c6:a2:7c:01:51:ec:09:15:8b:fe:e1:
41:ea:04:1c:19:1b:2d:d5:df:6b:16:c1:27:6f:f7:
2d:ef:dd:8f:65:2a:d0:08:0e:e0:62:6f:8d:ce:bf:
70:e7:61:5d:13:f4:09:cf:8d:3f:ed:4b:ec:22:96:
0b:b4:44:19:d5:02:56:c7:ab:90:ff:7c:dd:87:73:
5a:75:a4:d3:d5:69:73:53:66:4a:b5:d8:9b:a7:19:
52:55:02:d8:1d:bb:53:b2:7c:b8:8f:dd:bc:8f:7c:
0c:e2:88:6d:cc:8a:e9:cc:d8:6f:2a:9f:8c:2a:81:
cd:53:a0:87:f4:d9:14:57:c4:da:14:4d:a8:23:52:
0a:69:f6:de:50:5a:1c:4d:92:58:86:4b:1e:c8:32:
5b:cd:cc:d1:0c:70:1d:90:e1:18:c3:d6:45:f1:0b:
fe:ad:bd:d7:c2:cf:1e:3e:60:45:83:48:5e:1d:ec:
4c:80:f2:a7:7a:3c:5d:8d:52:f1:2c:84:08:df:03:
50:bb:7c:7c:88:30:80:29:c1:6e:c9:0f:9c:3b:c8:
5c:72:16:d7:4f:be:0f:3e:1d:a1:e7:f1:75:aa:f2:
21:32:bf:da:b1:b2:49:49:75:fc:37:69:55:95:7c:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:48:5B:9C:F5:93:E8:1E:87:E2:31:EF:49:74:CA:9F:49:33:9C:0C
X509v3 Authority Key Identifier:
keyid:A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ab:45:f0:f0:be:99:4e:47:d4:11:51:be:1f:1f:54:6d:5a:
3b:ce:4e:19:2e:81:e8:a9:ef:d1:d6:b8:bf:bf:6b:d9:57:4f:
55:f3:cc:42:a7:4c:76:de:e4:a9:dc:28:fa:bb:33:67:68:8a:
15:8c:d3:fc:59:ae:4d:c0:8d:41:28:9e:39:cb:9b:5a:46:60:
ee:e6:8c:eb:69:45:9e:f3:ae:e8:3e:f9:d1:92:c5:e6:fd:62:
bc:23:14:4d:61:bb:91:20:96:23:d6:40:3c:82:27:08:78:18:
2a:99:32:2a:06:fe:ba:24:88:74:2f:c0:46:a4:fd:2a:35:d4:
74:2f:c4:72:71:ab:3f:8f:2d:83:ed:79:dd:27:a2:c8:03:cf:
b9:d2:83:f8:fc:b1:1e:4d:70:1c:0e:66:da:94:e2:2b:2e:10:
ab:99:c7:fd:59:dd:51:1c:67:d0:67:2c:06:56:74:e1:dc:ef:
87:a9:70:7f:be:69:aa:37:b6:18:a9:cc:96:58:56:73:a9:c6:
28:03:fe:9e:4f:b7:d1:e4:72:f1:9d:5e:71:46:dd:2e:fa:1c:
1f:3e:fb:fe:31:03:05:a1:82:fc:01:82:c3:a8:34:c0:5d:bf:
33:bb:fb:18:d3:a4:a1:73:72:42:5f:d2:db:0f:d9:f1:58:1f:
8d:1f:0d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:27:20 2025 by rpki-client