Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier: dPCceUDYRAZqYSkWDrCWMZ5FwEbCU+aFj1kPI5mD/Pw=
Subject key identifier: 8D:19:B1:19:6A:C1:CC:31:A7:B6:5A:4B:32:AD:45:0E:63:5F:4C:75
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 019677FAA7D8DF2235185102606F138EB7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 16:00:37 +0000
Manifest this update: Sun 27 Apr 2025 16:00:37 +0000
Manifest next update: Mon 28 Apr 2025 16:00:37 +0000
Files and hashes: 1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: +6hlIael+lDVjQrYgqDnmwzbJ1HH2zlxEd4Z9BjtfXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:a7:d8:df:22:35:18:51:02:60:6f:13:8e:b7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Apr 27 16:00:37 2025 GMT
Not After : Apr 28 16:00:37 2025 GMT
Subject: CN=8d19b1196ac1cc31a7b65a4b32ad450e635f4c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:71:04:c1:8f:2c:56:30:fc:6f:58:0d:c9:
6e:db:88:81:31:7d:2d:fc:75:cb:74:26:77:52:7d:
86:ed:8d:2d:25:14:e7:d9:cf:66:88:6b:49:4a:b6:
25:b4:9e:82:49:0d:14:4a:a2:3b:39:8a:9c:a5:a2:
b6:3e:52:8d:27:bb:a4:eb:5c:29:61:10:31:66:61:
6b:a0:e9:80:7c:98:6f:b9:fc:ed:7c:a0:52:76:e1:
8b:d6:d1:90:07:5a:43:eb:42:c9:31:cf:11:30:b8:
f3:e8:bd:ae:84:5e:04:86:52:0a:c5:9e:5b:36:c9:
01:10:0c:16:ec:7c:76:6c:00:52:5e:77:c3:93:e8:
66:fe:9e:89:85:30:1a:ed:8f:6f:16:aa:ef:2d:c9:
cc:f7:ca:7f:d1:3d:de:16:4f:6d:2b:82:3b:d3:8b:
7f:75:01:61:46:d2:2d:9a:fe:18:b0:df:3b:ae:bc:
03:58:89:81:2e:97:61:c0:51:d0:a1:84:06:36:0a:
6a:1f:b0:7b:3c:ab:e6:40:f3:95:70:bb:12:57:cb:
9c:4d:25:94:2d:72:6e:df:3c:ee:23:d3:54:90:b9:
08:c7:fb:4b:08:0c:dd:e4:e0:d1:74:9a:18:35:13:
2b:9b:31:73:10:13:14:76:54:5b:1a:5f:f6:6f:2c:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:19:B1:19:6A:C1:CC:31:A7:B6:5A:4B:32:AD:45:0E:63:5F:4C:75
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fa:40:66:97:e0:8b:c5:b7:8f:1e:85:1b:00:bd:5f:91:2d:
f6:7b:3c:33:ed:ad:41:c6:9d:8f:90:cf:ff:72:44:0c:28:12:
df:cf:72:95:07:43:ed:6e:b1:f9:78:46:cc:03:89:69:94:87:
d4:48:ba:c5:07:7a:15:e1:80:10:73:a4:75:56:7e:2b:53:b0:
2c:38:83:fb:de:0d:ec:eb:ce:15:53:ea:0b:c0:62:ed:fc:b5:
1e:69:cc:4e:03:0c:f7:15:d5:8b:fc:3c:de:b2:85:ef:6a:4c:
a7:4f:9f:72:3f:38:19:bd:22:08:45:05:1b:51:a8:65:69:e4:
54:ad:df:7c:15:b1:08:71:f4:71:ad:72:d2:5d:94:e6:77:33:
9e:c7:6e:7b:14:07:8f:f3:48:fd:34:83:2e:1a:e4:6b:8d:b9:
f4:c6:e8:b8:2e:e3:80:f9:5d:84:30:7f:e3:0f:2e:ca:0b:f0:
40:9a:45:8e:80:6b:19:a0:64:d6:e1:3a:2e:e6:e2:17:f8:f5:
03:47:c5:d9:10:21:2c:37:fd:9e:fa:7e:20:c9:6f:2d:e2:4a:
0d:0f:f4:81:c5:4e:8b:f2:e4:c1:ca:ea:2e:84:96:24:c4:67:
58:23:f0:53:57:b0:b6:ad:25:4a:e7:8d:42:6b:4e:3f:89:af:
71:76:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:34:02 2025 by rpki-client