Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: yexFXaXPCfgYDbRCkX3fWfQbN0eP5TVbFU5pZh3XVqY=
Subject key identifier: 81:7B:07:B5:B5:DF:86:53:81:D3:92:12:CA:5B:A5:B7:DA:80:AF:2B
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 019679445FA69D98DFC1751AB587C663AF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 1449
Signing time: Sun 27 Apr 2025 22:00:46 +0000
Manifest this update: Sun 27 Apr 2025 22:00:46 +0000
Manifest next update: Mon 28 Apr 2025 22:00:46 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: OgAXDkHloXWI0o0FlcNzeDcRYVm9lp2K1PloGzk1/00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:5f:a6:9d:98:df:c1:75:1a:b5:87:c6:63:af:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Apr 27 22:00:46 2025 GMT
Not After : Apr 28 22:00:46 2025 GMT
Subject: CN=817b07b5b5df865381d39212ca5ba5b7da80af2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:03:bd:2f:0a:9a:8c:45:4c:7b:b6:db:74:
dc:73:26:ea:60:1a:56:f0:d9:48:d9:62:16:d6:0a:
2c:b8:d6:53:38:7f:89:b6:f0:3a:de:9c:9c:e6:ff:
ed:e1:82:bc:0b:2b:43:3f:22:3c:89:ba:16:fd:ca:
85:94:41:0b:59:1a:56:c0:92:c9:9a:45:61:da:41:
92:0a:4a:6d:c6:55:46:fd:4a:23:87:53:ac:be:89:
ef:15:4c:8f:5d:2d:4f:e1:1f:44:c7:45:db:32:81:
93:de:bd:c5:87:03:a1:9c:68:2f:4f:58:86:d6:63:
b1:3b:8b:e0:81:cd:61:f8:c5:f3:92:8b:c3:79:4d:
cb:ee:47:72:e9:03:11:cb:6b:2a:59:e6:44:68:5a:
71:09:bd:89:4b:c3:6e:d0:82:b7:96:a1:f9:7b:66:
3c:f5:21:06:f3:ea:70:1d:50:40:32:b5:ab:f2:d1:
16:cf:cb:a8:96:62:2a:dc:db:75:3b:f0:0c:08:df:
e9:d2:4c:8f:19:81:5e:37:fa:e2:e2:c3:5b:68:48:
1e:69:3e:ce:43:d0:2b:fe:e5:4a:b6:10:ae:0b:c9:
02:fc:11:05:09:c8:52:5c:d5:0c:ed:04:dd:c8:fb:
2c:9d:df:57:7a:53:e8:a3:44:b8:8f:dd:88:95:86:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7B:07:B5:B5:DF:86:53:81:D3:92:12:CA:5B:A5:B7:DA:80:AF:2B
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:db:9b:91:0a:c0:0a:c1:dd:e4:ae:4c:7f:70:62:90:90:47:
d2:fe:79:39:11:55:c3:91:8a:98:7b:d2:4d:90:c2:9b:e9:49:
00:12:b0:1b:6b:29:c5:d5:6b:b9:fd:8f:08:33:24:3f:b3:ed:
f9:68:1c:0b:4b:32:7e:1e:1f:a0:9e:a2:2e:1e:a7:79:7b:27:
12:16:44:94:7a:01:53:a3:e6:61:3d:fe:0b:6e:99:a6:49:a5:
eb:d9:f4:74:08:e9:28:8a:1a:50:80:90:6a:69:0c:30:20:db:
6c:e5:d2:1c:a7:18:d9:3c:6d:b9:a3:7b:78:64:ef:6c:71:95:
8f:23:4b:58:e0:2a:16:56:9a:27:bb:04:e6:b9:fd:e2:ac:3c:
02:27:31:fe:10:ef:06:8d:ae:05:3a:8d:ee:dd:a4:40:93:53:
dc:34:b0:b7:39:87:9d:41:0c:dc:c1:56:6d:67:ef:f2:05:33:
1d:0b:9b:01:a6:98:d2:45:eb:28:d9:9c:a9:0f:68:65:0b:95:
f4:d9:3b:4e:03:dd:fc:b0:2b:0c:ae:54:12:40:46:04:82:6b:
a7:50:89:f1:10:a0:7a:9c:9f:3e:15:fd:cc:15:ca:ab:d7:e8:
97:c0:fb:a3:6e:5a:fc:02:e7:49:54:97:a8:c3:60:22:50:81:
5e:40:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:46:03 2025 by rpki-client