Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
File: PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft (raw, json)
Hash identifier: DDpx3yZnzS00gEwO+G4wciDCpxtDQrlWU63qQBICQTs=
Subject key identifier: C5:4A:33:E9:1E:B0:9B:54:50:B5:BC:4D:0F:9A:CC:E7:A6:4C:34:2D
Authority key identifier: 3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78
Certificate issuer: /CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
Certificate serial: 01969416650132F219DB00CE9534AA8DB763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
Manifest number: 040A
Signing time: Sat 03 May 2025 03:00:17 +0000
Manifest this update: Sat 03 May 2025 03:00:17 +0000
Manifest next update: Sun 04 May 2025 03:00:17 +0000
Files and hashes: 1: PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl (hash: XJO6CdiD3leGrJIASBlVKC0cu662ue0QDnuh9q4P0hY=)
2: eSMweySQayVjw4TxrRct4yupfzc.roa (hash: vIdUHA4BTNYVBukw2W8J/Pb08xt6VrAwfBVQVhqYWeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:16:65:01:32:f2:19:db:00:ce:95:34:aa:8d:b7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
Validity
Not Before: May 3 03:00:17 2025 GMT
Not After : May 4 03:00:17 2025 GMT
Subject: CN=c54a33e91eb09b5450b5bc4d0f9acce7a64c342d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8d:de:7e:24:0e:50:d1:7b:c0:4f:ea:4a:a0:
87:32:c0:ee:4f:cc:d9:7a:7e:d8:51:b8:34:51:e1:
3e:2c:38:cf:79:1b:c6:83:bd:f7:fc:af:4d:b9:53:
7c:8e:e7:1f:3c:62:77:e8:ee:a3:dc:7f:88:ae:5e:
c2:5f:f4:2e:ba:67:d4:f6:77:8a:6c:55:2c:33:e9:
d0:8d:ec:be:f7:55:ae:05:03:34:06:e1:22:80:86:
b2:5d:a9:cf:1b:fa:f1:a5:ef:bc:a3:d8:ce:5b:ce:
9e:bd:54:8c:80:7a:b7:90:af:e6:ae:76:7a:af:47:
52:c9:38:b7:f4:3e:eb:c5:ca:aa:61:7b:26:5d:d8:
1f:59:37:7c:be:0b:14:3c:16:67:e9:a4:19:9d:80:
c9:89:1e:ef:c8:21:45:2d:a9:33:5e:14:81:26:6c:
98:2b:e8:4f:16:18:05:b5:39:59:64:f4:d2:99:25:
5e:6a:20:e0:d7:25:d9:0d:63:d4:9a:79:a8:0a:4d:
2c:0c:0d:96:7b:19:cc:88:28:2e:42:99:97:ef:01:
83:73:91:79:6f:47:60:c0:6c:4f:e5:76:9a:02:3c:
bf:f6:3e:88:24:a3:b4:97:0d:3d:21:49:34:18:fb:
2b:9b:52:a8:c5:df:0b:f9:97:90:5e:9d:aa:2e:ee:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4A:33:E9:1E:B0:9B:54:50:B5:BC:4D:0F:9A:CC:E7:A6:4C:34:2D
X509v3 Authority Key Identifier:
keyid:3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6f:25:73:0b:d6:ef:ec:9b:4b:9d:5b:ea:fb:2d:b5:f0:bf:
80:31:5a:b6:ac:56:93:d7:8b:a7:fa:0b:bc:1e:4f:5f:f4:d9:
ad:40:af:73:c0:2e:ce:f3:cd:7c:8b:f0:cc:75:64:6f:9a:22:
5e:6c:11:60:4d:5d:16:84:f6:b0:97:ad:44:0f:e2:8a:a4:31:
56:bd:69:bc:65:cb:64:80:78:f4:5f:b3:f3:98:6b:89:45:6c:
e9:7a:e1:0f:5d:a7:a9:24:b6:7b:df:01:22:76:d3:08:7a:fd:
38:9c:7f:3a:cf:d6:69:8d:90:5f:95:a5:33:13:3a:46:13:2b:
9d:d3:cd:e8:ad:ea:4e:ea:98:27:84:f4:49:c3:04:74:32:9b:
38:56:f0:1c:a5:5a:3a:69:d9:4b:a3:78:dd:29:36:d4:aa:87:
13:84:c9:ad:61:90:96:c7:a8:ae:57:3f:c7:9b:a0:8e:e9:cc:
6a:4d:4f:ec:47:d4:4a:17:3b:0d:b6:86:cc:1b:6b:04:00:72:
7e:91:a6:03:7c:64:ef:b9:36:f0:a6:f5:ab:10:a1:e3:47:44:
2d:1a:e9:72:5d:c5:26:65:49:23:f4:23:ea:20:38:89:f9:0d:
7b:49:12:c7:60:c7:f0:8e:09:16:de:29:a8:ac:9c:0f:13:28:
7b:3d:1f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:39:19 2025 by rpki-client