Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
File: PqFIQth34nvEBouYH-dK64vufnM.mft (raw, json)
Hash identifier: 0as9qtvQwLcYbJBx00Su2TqFzRR8/So856wqFMmIhRI=
Subject key identifier: 93:A8:65:27:2E:89:1D:CD:F1:73:05:0D:C9:E3:C8:97:03:6F:F5:4E
Authority key identifier: 3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
Certificate issuer: /CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Certificate serial: 01967F7CEBE57BC0E7538729EF76DAC34867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 03:00:15 +0000
Manifest this update: Tue 29 Apr 2025 03:00:15 +0000
Manifest next update: Wed 30 Apr 2025 03:00:15 +0000
Files and hashes: 1: PqFIQth34nvEBouYH-dK64vufnM.crl (hash: SS0Zo1JBxEG60XR0fnETe3luUck6wBYZR6T5uV0kdbM=)
2: h5AoEy-X54Db83-jTlFH2Y1fCVw.roa (hash: HOh3C7TWeQ0O5hO+1P91yiEiZozSeSnp7F1/q290vZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7c:eb:e5:7b:c0:e7:53:87:29:ef:76:da:c3:48:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Validity
Not Before: Apr 29 03:00:15 2025 GMT
Not After : Apr 30 03:00:15 2025 GMT
Subject: CN=93a865272e891dcdf173050dc9e3c897036ff54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:43:a8:b4:29:78:5f:7a:fc:64:47:75:d8:
51:bd:86:a1:3b:4c:c0:b6:f2:98:8a:50:ba:50:e7:
0a:36:1c:c5:35:bf:c4:65:1a:32:0f:4a:65:b5:29:
c3:b4:2d:c4:2e:ae:5d:6d:34:a1:35:07:3a:6f:a5:
cb:22:b8:63:63:10:b5:5d:b0:60:9b:87:42:bf:c5:
32:b8:20:27:33:b8:6c:5a:04:0a:5d:ea:e3:4c:b0:
3d:fa:d5:c2:50:b5:d5:56:8b:e7:56:d4:19:b5:13:
c9:0b:a6:4c:6c:99:20:fd:b7:cb:ad:b0:33:83:d6:
69:72:dd:95:82:20:62:a6:d9:d1:e3:ea:17:41:9c:
d8:ad:1e:35:5c:dc:da:ab:cd:ac:33:84:17:ab:16:
75:34:2d:a7:cc:35:67:25:cd:ef:f4:95:47:4c:40:
85:ea:cf:7a:70:a9:b8:33:4b:21:ce:86:b6:fb:b6:
b7:5f:54:e9:34:5b:37:e4:c3:4a:c2:e6:e8:7a:e6:
b5:c1:6e:2f:ac:19:51:e8:52:dc:31:dc:8d:f8:a1:
3b:2a:2e:69:04:19:f7:4f:86:eb:3c:9b:62:21:69:
a0:73:77:a2:ed:ec:46:48:2f:53:14:2f:db:32:a3:
b1:7a:87:83:ed:7c:a9:37:f0:98:6b:8c:e3:61:35:
10:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:65:27:2E:89:1D:CD:F1:73:05:0D:C9:E3:C8:97:03:6F:F5:4E
X509v3 Authority Key Identifier:
keyid:3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6a:c9:ac:3c:eb:27:a5:d4:ab:9b:0c:7c:ad:dc:bb:95:c2:
66:71:4d:63:8a:e8:28:00:96:62:fd:f3:0a:02:eb:c9:5a:07:
c6:e6:cc:d8:ec:32:33:ea:87:52:61:37:43:46:59:b7:52:cd:
a2:64:24:a1:be:f6:a2:9e:47:32:47:e2:30:32:c2:21:43:ce:
33:41:5f:c2:53:74:58:a3:ee:b5:40:65:d2:ad:58:2a:80:1e:
05:38:bf:1d:ad:5a:0a:ff:19:f7:0d:73:87:b7:10:9f:3a:da:
23:ec:4f:74:0a:8b:60:a2:eb:45:8c:1e:f4:32:1a:96:56:1e:
2b:cd:76:64:76:c3:9b:80:60:20:17:f2:f3:73:e0:58:8c:02:
f0:09:cb:22:44:89:11:2a:11:86:b6:de:b4:ef:22:94:3b:d8:
f5:3a:11:65:0a:da:11:fc:d9:d0:81:0c:7c:25:21:a2:79:2a:
fb:b6:7e:22:54:76:29:aa:f3:fe:c2:b2:1f:e8:bd:ed:fe:a0:
4c:d3:53:d2:51:bd:ce:5d:47:d3:73:d1:f5:9f:f9:47:9d:04:
36:b6:3c:09:bc:d9:9f:89:2f:ef:54:72:ab:db:25:ad:4d:e6:
af:57:5d:6b:6e:8f:98:92:84:4c:69:e9:ce:54:46:27:fb:0c:
f2:6e:8f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:18:37 2025 by rpki-client