Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier: 1b9Zg8WykSeJFvpn5R6EkEWy7D/QNh6XKswznnFlxV4=
Subject key identifier: 09:D4:37:BC:3F:EB:33:16:FB:7A:AA:09:81:DB:1C:38:09:1B:E6:C8
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial: 01968134DA8B26CBD01255B002AAA82DC995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number: 03A4
Signing time: Tue 29 Apr 2025 11:00:46 +0000
Manifest this update: Tue 29 Apr 2025 11:00:46 +0000
Manifest next update: Wed 30 Apr 2025 11:00:46 +0000
Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: eI14h470K+ZBd5wnS5g30amLkVO9IfwaieI8q29HTp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:da:8b:26:cb:d0:12:55:b0:02:aa:a8:2d:c9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Validity
Not Before: Apr 29 11:00:46 2025 GMT
Not After : Apr 30 11:00:46 2025 GMT
Subject: CN=09d437bc3feb3316fb7aaa0981db1c38091be6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:00:ff:fa:98:84:94:3b:ae:6e:57:c9:5c:
e3:68:00:de:24:e9:a1:d6:fa:28:0b:5e:99:8c:44:
66:a9:6e:6d:f4:df:06:a7:d1:87:92:99:59:5e:2f:
6b:44:57:fb:ac:15:df:fd:96:66:c8:44:a0:23:aa:
9a:93:6f:ad:56:5a:73:0d:ea:be:36:ea:e2:2f:cd:
46:70:9e:ad:d9:c8:61:5d:ca:5c:5d:b5:ad:8f:04:
ce:47:aa:20:38:14:28:54:55:6d:c1:8b:df:c8:a7:
fe:7a:4b:93:49:02:52:cf:3d:63:76:e8:6e:44:e4:
6b:26:ea:0e:2e:14:15:8d:d8:b9:92:b3:2a:5b:20:
ef:18:bd:0e:a5:33:39:69:e7:f4:0e:e7:d7:fa:1e:
74:3f:e4:31:5c:51:57:1c:89:33:7f:d3:05:64:c9:
9f:53:42:a3:89:0d:10:3e:25:80:36:c2:11:37:4c:
77:63:73:da:2b:66:22:69:15:41:d5:6c:5b:20:b0:
85:4a:77:e6:1b:7b:25:9d:ab:b5:30:89:98:f4:d2:
56:18:e2:51:b5:6d:a8:a2:85:d9:2e:d4:85:38:dc:
08:84:bc:85:bd:84:76:58:08:f1:63:a6:92:16:b3:
0b:bb:9f:b1:6a:ad:26:31:fd:e4:8a:ec:a6:6e:ae:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D4:37:BC:3F:EB:33:16:FB:7A:AA:09:81:DB:1C:38:09:1B:E6:C8
X509v3 Authority Key Identifier:
keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8c:6c:3f:f4:c7:80:45:ca:82:d1:b8:30:ca:0c:cc:ba:d3:
0c:5e:27:87:be:6a:c5:77:35:27:63:b2:4e:20:f1:2e:b0:fb:
7f:f3:57:c6:2a:ea:92:f4:fc:ea:9e:73:25:08:71:ce:13:9f:
e1:bc:1c:9a:94:f4:6a:d1:8c:99:73:7b:60:6b:5a:c2:9d:87:
df:92:c9:fb:5e:f8:1c:6d:4e:87:7c:bb:03:81:04:38:17:79:
04:66:8d:0d:c8:69:37:cf:13:97:28:ff:f0:59:55:08:ed:8d:
1d:7f:66:a4:9c:89:da:81:9f:39:17:b0:62:d9:c4:98:8f:ab:
73:dc:58:5d:ad:ae:2f:fc:41:3f:83:66:79:f4:75:1b:39:70:
bb:89:e5:4d:2e:19:7d:cb:c5:96:84:d3:8f:e6:ab:8d:ea:81:
79:dd:be:c7:db:fe:75:c5:c1:63:0d:f5:db:d1:bb:e1:f5:4f:
7e:79:43:e3:d4:55:fc:3f:44:a9:82:06:64:c5:03:5e:b0:77:
e7:66:e5:fa:96:f5:0d:9c:9e:3a:9b:57:fe:00:83:e6:ff:82:
08:1a:cb:01:f6:e3:e1:f9:4f:c2:1e:3d:dc:bd:6e:fc:ad:cf:
49:70:7f:34:9e:c1:39:d3:ab:f4:76:b5:45:b5:ff:46:91:97:
22:3f:91:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:18:43 2025 by rpki-client