Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
File: pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json)
Hash identifier: Yw7c7B0zrWumrtZGVTw8ji42oT6igtEKbMgOKa2hlVY=
Subject key identifier: 5E:C6:9D:99:E0:86:BC:36:6B:64:AF:6B:3E:4D:0A:D0:50:21:CD:6C
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Certificate issuer: /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial: 0196857F6CB11F7F945D80B82BC1816B9832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
Manifest number: 0345
Signing time: Wed 30 Apr 2025 07:00:42 +0000
Manifest this update: Wed 30 Apr 2025 07:00:42 +0000
Manifest next update: Thu 01 May 2025 07:00:42 +0000
Files and hashes: 1: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: Mo0kRD+mBWkaOWbK2DJyEUemdKzgE+u6lZd7CQqww6c=)
2: yTZlHlMAE_3YBA7oQmF4fIZqHOM.roa (hash: lfCvg73z+0fvdagtNm9IPM2kVoIfwTGx2gcIBEuq7Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:6c:b1:1f:7f:94:5d:80:b8:2b:c1:81:6b:98:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Validity
Not Before: Apr 30 07:00:42 2025 GMT
Not After : May 1 07:00:42 2025 GMT
Subject: CN=5ec69d99e086bc366b64af6b3e4d0ad05021cd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:d5:39:66:80:93:34:bd:ff:7d:45:a2:49:
15:90:fc:b2:8d:fb:44:04:7a:e5:8b:35:e9:4a:06:
47:df:b6:ca:51:c6:85:bc:b6:5a:87:3b:73:53:9d:
12:2b:af:ad:7d:bf:8c:2c:de:e7:51:78:a4:db:cf:
6e:81:cd:b3:f9:0f:a6:7c:e5:8c:c1:b0:c8:f3:be:
e3:a4:70:be:f9:61:e4:e8:5f:10:d6:dd:7b:6a:d4:
cf:d7:2b:4d:8d:10:0a:65:0a:43:12:cc:ae:94:ab:
2b:8f:9c:4c:38:53:18:e4:4d:e5:a8:04:ac:25:b5:
1b:29:f2:29:25:1b:a5:7f:db:31:a6:42:a6:aa:12:
25:ab:6c:74:bf:ac:1b:68:5f:ce:6d:6e:c6:4e:77:
37:40:6d:b0:80:96:74:13:2f:5a:7d:b6:62:7a:cb:
e5:c2:71:6c:83:56:f5:d7:48:a6:be:60:b6:2e:13:
91:49:fa:e4:3c:b1:bd:e5:26:0a:b4:7f:ec:86:da:
b2:3b:06:8c:07:48:ed:29:44:04:5d:a5:87:3f:be:
c1:c4:b7:c8:08:cb:05:91:10:96:83:d5:99:c1:cc:
cd:c8:66:81:10:6e:ca:16:0c:75:d6:29:72:88:23:
6e:b7:82:22:d3:4e:34:f8:69:0e:67:50:6c:e8:5f:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C6:9D:99:E0:86:BC:36:6B:64:AF:6B:3E:4D:0A:D0:50:21:CD:6C
X509v3 Authority Key Identifier:
keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:77:83:c8:9c:60:d0:ae:8f:e4:26:0e:15:9c:77:33:a2:e7:
af:d8:4a:be:d3:b9:57:1c:4f:d8:91:56:91:02:f2:8e:81:ca:
d7:ce:c1:db:ee:b4:ef:1a:b2:e9:76:7b:4d:e3:ce:56:56:54:
88:ff:9d:8c:18:95:23:e1:e9:8f:41:d0:c7:0a:fc:b6:09:bf:
35:e7:6d:62:11:4d:a0:8d:9a:a6:22:4d:75:cd:ca:ae:87:89:
6a:dc:af:f1:4e:22:f1:ae:47:dc:14:5a:f1:45:3e:e4:12:65:
0c:61:1f:6e:75:2a:da:fc:84:ea:58:98:a2:ff:cc:be:c7:19:
3c:9b:f9:92:6b:a7:02:14:f1:48:89:06:55:8c:e2:f8:ea:7e:
42:4b:b5:6e:ec:b2:f6:72:d5:81:2c:e6:cc:83:ef:9d:69:de:
60:c9:c0:44:fe:96:46:30:a5:d9:13:57:a5:cb:61:91:66:8b:
3f:ec:2d:9b:86:66:40:72:75:c1:b7:f1:80:27:53:a0:02:ce:
5f:b7:b2:f2:d2:79:34:d8:82:26:71:07:48:2d:67:a9:14:d7:
e7:c3:b8:92:00:ae:87:64:d2:45:98:c9:e6:20:69:3e:cd:a9:
df:9f:6c:ba:ab:5c:8f:c2:1e:fa:1b:15:f9:ae:e2:e8:54:62:
79:41:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:39:54 2025 by rpki-client