Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
File: PQJjyVdcvQESY66Ig5p4iLdPoHY.mft (raw, json)
Hash identifier: JKW9L6j3wSC8Akk8fA7nJdLAvDaawb25PRLaVCtCCWk=
Subject key identifier: B3:C3:5A:28:8D:FF:A0:ED:F2:D4:8A:1A:8A:47:6F:D2:85:75:8E:43
Authority key identifier: 3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
Certificate issuer: /CN=3d0263c9575cbd011263ae88839a7888b74fa076
Certificate serial: 01968390DE9FF422BE0CA6BCC5D0C4884CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
Manifest number: 1041
Signing time: Tue 29 Apr 2025 22:00:31 +0000
Manifest this update: Tue 29 Apr 2025 22:00:31 +0000
Manifest next update: Wed 30 Apr 2025 22:00:31 +0000
Files and hashes: 1: PQJjyVdcvQESY66Ig5p4iLdPoHY.crl (hash: D2ppoTskg5qLdkQIyZjaapvolNoqae5z0+ljv6QTSpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:de:9f:f4:22:be:0c:a6:bc:c5:d0:c4:88:4c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0263c9575cbd011263ae88839a7888b74fa076
Validity
Not Before: Apr 29 22:00:31 2025 GMT
Not After : Apr 30 22:00:31 2025 GMT
Subject: CN=b3c35a288dffa0edf2d48a1a8a476fd285758e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:bc:9a:26:2e:67:ae:92:22:60:65:ff:b6:
dd:c3:57:0d:90:91:f9:3d:c1:ce:a1:c8:4a:f3:32:
e2:d2:e9:36:04:77:2c:9d:38:34:4e:d2:4a:a6:f0:
64:bb:e5:04:ff:be:13:31:ef:3e:45:f4:cb:ca:d1:
de:66:24:ca:e0:af:a3:e9:b1:53:7e:a5:b9:51:0b:
23:b6:9d:1f:58:94:0c:97:bc:cb:68:d4:1d:1d:36:
70:4a:37:b0:10:b8:2e:2f:90:0c:61:dc:8c:73:6f:
22:a4:0a:bc:b7:44:d9:9b:f9:9c:cf:f1:45:3b:01:
76:44:47:c4:d5:f4:b7:26:c8:59:7b:dc:66:15:b9:
c6:30:25:b0:97:a5:75:f6:68:7b:fb:53:19:6d:65:
f7:14:6c:38:cf:ac:86:e8:40:a9:0e:7c:bd:d3:54:
e5:ab:4b:45:31:8f:01:4b:a8:c9:24:64:07:8a:76:
94:fa:da:46:e0:db:43:cb:83:65:c5:23:da:92:9e:
e2:66:e4:02:db:ca:8f:f0:44:c1:ba:eb:4a:31:bd:
7c:cb:aa:cf:ab:54:f2:ae:45:42:4b:30:d5:ec:3e:
b7:e6:d2:e6:fe:96:64:31:d2:83:30:62:b5:28:8d:
b5:3d:a8:63:33:1d:46:47:78:bc:f7:88:f3:ab:9a:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C3:5A:28:8D:FF:A0:ED:F2:D4:8A:1A:8A:47:6F:D2:85:75:8E:43
X509v3 Authority Key Identifier:
keyid:3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:41:c5:96:f6:45:ef:16:b3:b2:ec:87:d9:c3:bb:87:25:0f:
cd:ae:0d:fe:08:2a:26:ff:20:b4:97:fd:0c:87:ed:e9:58:ca:
60:d2:9c:89:a0:aa:74:89:08:bd:51:5b:47:8a:fe:9f:74:90:
f4:fa:58:03:19:a6:c3:e0:7b:b8:4b:dc:94:c7:6b:8f:9b:37:
66:8f:d9:7a:55:8a:24:c2:79:43:3b:f0:5c:4c:92:fc:40:76:
6c:0b:c4:0f:b7:a6:8b:a0:62:5d:d3:09:c4:e7:3f:9f:d4:d6:
92:28:31:86:6f:61:e0:fa:84:7a:d7:19:89:f4:52:e4:17:09:
d9:d4:c4:62:f6:5b:2c:f1:34:90:0f:e9:aa:3e:30:d5:0a:62:
52:80:2a:f2:52:06:50:a4:40:a8:19:bc:83:f1:ca:fa:af:1f:
99:96:45:d9:d5:55:95:95:e9:09:2a:d1:a5:4b:48:89:fe:5f:
72:7d:6b:1d:35:65:da:2b:4f:e1:1b:a4:90:37:b0:61:1f:b9:
00:1e:e2:d6:30:36:f0:86:47:ef:33:c3:3e:d0:ff:a9:6a:bf:
3f:6f:95:93:44:de:e3:89:34:5b:a4:b1:27:d9:d4:91:46:87:
3b:51:01:41:28:a8:08:a2:91:fa:0c:a9:8a:ea:35:b1:e2:30:
57:a8:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:24:42 2025 by rpki-client