Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: IRXDi7hqGfT0SJskC9tOMD7uvkx760zTf8qIrYi9+i8=
Subject key identifier: FA:C3:C7:65:BF:5A:B4:DB:2E:B2:DC:3F:FA:4C:A7:4B:3F:D5:44:64
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 019674C292ED5AD5FF289FC73376E03648A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 075D
Signing time: Sun 27 Apr 2025 01:00:30 +0000
Manifest this update: Sun 27 Apr 2025 01:00:30 +0000
Manifest next update: Mon 28 Apr 2025 01:00:30 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: RGoCMmNeZbs49WeIhkxlxKrw/elEsVpLwnmrfECEAxo=)
2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:92:ed:5a:d5:ff:28:9f:c7:33:76:e0:36:48:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Apr 27 01:00:30 2025 GMT
Not After : Apr 28 01:00:30 2025 GMT
Subject: CN=fac3c765bf5ab4db2eb2dc3ffa4ca74b3fd54464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:21:89:be:ca:66:dc:a3:fd:e1:99:22:08:
cd:a2:da:f4:8c:3c:c0:66:14:77:cf:05:39:df:12:
1f:6a:34:96:ea:d7:ce:22:80:22:c9:7c:9a:da:9d:
59:ff:b5:02:42:ce:71:28:ff:77:e3:fa:c9:2c:9a:
a8:96:3a:20:11:7e:cf:31:f9:97:19:0d:b3:9c:23:
26:3f:a7:d7:63:89:a1:35:c5:b4:62:ea:a8:f7:a6:
88:61:fc:17:10:8f:de:27:51:56:04:b7:76:9c:15:
a2:38:d7:52:09:7d:00:b4:46:f5:50:e5:2d:31:c4:
72:da:4b:c1:14:c0:63:2e:40:6d:30:f2:a8:f9:87:
07:d4:06:2b:b6:78:13:4f:77:0b:55:0c:85:62:2c:
e1:3e:bb:d0:4c:02:1c:72:1c:36:4d:3e:3a:0d:fc:
98:6a:d1:1b:3a:27:5e:36:1e:49:cb:5e:d1:96:c8:
c6:0a:c9:1c:49:45:5b:7a:84:21:0c:dd:32:90:67:
87:5c:7c:64:bb:90:8c:fd:8c:ce:ec:8d:c7:df:b9:
15:1b:8a:90:a8:fc:81:90:c4:84:f4:ad:e3:44:20:
c9:17:cd:bb:00:37:f4:9f:61:7b:1f:2a:b1:28:d9:
de:ea:f8:74:92:4e:d0:1d:fd:cb:e5:26:fa:eb:40:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:C7:65:BF:5A:B4:DB:2E:B2:DC:3F:FA:4C:A7:4B:3F:D5:44:64
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cd:b5:ce:34:67:07:43:1a:da:a4:4f:ab:dd:11:78:6d:ee:
e5:cb:db:94:f0:10:93:90:41:de:05:11:fb:97:84:af:c9:43:
7c:21:3a:9f:e2:64:ba:bb:0f:ed:b0:2a:59:84:e6:52:9f:c1:
4c:7c:d9:55:2e:5e:62:a8:ed:ef:e9:32:7a:56:79:a9:87:44:
6c:f1:65:1e:16:fa:61:19:ae:f9:c2:37:b6:46:01:a7:ce:71:
c3:e9:d0:d8:e1:ab:2c:de:d4:73:1a:d4:b1:e2:05:f4:5f:32:
03:b7:cb:d7:b0:4f:ab:02:af:f6:ce:43:d8:72:c3:01:3c:72:
46:b0:d2:72:b4:ca:92:f6:82:76:95:18:00:48:59:2b:48:f9:
0b:a1:67:76:26:30:ee:21:19:5f:50:ac:d8:c7:9f:e4:8e:5b:
b5:98:7e:4e:ea:d4:a6:85:f2:3e:d6:d9:50:64:0b:35:5e:3c:
28:fb:3a:f8:08:cc:03:f6:e6:49:92:ee:4e:b5:38:02:f5:1f:
f2:9d:c2:76:dc:dd:0a:d5:8d:5f:41:b6:dc:f4:44:c3:81:64:
0a:78:0c:9b:97:31:c8:7c:87:1e:2f:7f:04:af:28:3d:f6:03:
ba:a0:37:53:cd:8d:0f:a9:9c:f5:4d:a5:54:05:d4:14:b2:85:
60:bf:74:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wpLtWtX/KJ/HM3bgNkikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTFkMDVjZDI5YWI3MTkyYWYwMzljZjVmM2QwMGJlOTIx
NTc5MzkwHhcNMjUwNDI3MDEwMDMwWhcNMjUwNDI4MDEwMDMwWjAzMTEwLwYDVQQD
EyhmYWMzYzc2NWJmNWFiNGRiMmViMmRjM2ZmYTRjYTc0YjNmZDU0NDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUohib7KZtyj/eGZIgjNotr0jDzA
ZhR3zwU53xIfajSW6tfOIoAiyXya2p1Z/7UCQs5xKP934/rJLJqoljogEX7PMfmX
GQ2znCMmP6fXY4mhNcW0Yuqo96aIYfwXEI/eJ1FWBLd2nBWiONdSCX0AtEb1UOUt
McRy2kvBFMBjLkBtMPKo+YcH1AYrtngTT3cLVQyFYizhPrvQTAIcchw2TT46DfyY
atEbOideNh5Jy17RlsjGCskcSUVbeoQhDN0ykGeHXHxku5CM/YzO7I3H37kVG4qQ
qPyBkMSE9K3jRCDJF827ADf0n2F7HyqxKNne6vh0kk7QHf3L5Sb660Ce3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrDx2W/WrTbLrLcP/pMp0s/1URkMB8GA1UdIwQY
MBaAFDwR0FzSmrcZKvA5z189AL6SFXk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUt
NzA4ZGMwOTdmZmZlLzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUtNzA4ZGMwOTdmZmZl
LzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVs21zjRn
B0Ma2qRPq90ReG3u5cvblPAQk5BB3gUR+5eEr8lDfCE6n+JkursP7bAqWYTmUp/B
THzZVS5eYqjt7+kyelZ5qYdEbPFlHhb6YRmu+cI3tkYBp85xw+nQ2OGrLN7UcxrU
seIF9F8yA7fL17BPqwKv9s5D2HLDATxyRrDScrTKkvaCdpUYAEhZK0j5C6FndiYw
7iEZX1Cs2Mef5I5btZh+TurUpoXyPtbZUGQLNV48KPs6+AjMA/bmSZLuTrU4AvUf
8p3CdtzdCtWNX0G23PREw4FkCngMm5cxyHyHHi9/BK8oPfYDuqA3U82ND6mc9U2l
VAXUFLKFYL90AQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:04 2025 by rpki-client