Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
File: PEHqRBeKcCxQcAACPRSp-cRyYOY.mft (raw, json)
Hash identifier: F9u+2ln0n9B/raXNjX6PPRSDEERN9Ln+V+p1/5t++v0=
Subject key identifier: 8E:75:11:7B:A3:B5:80:9A:41:F7:40:AC:E9:6F:F1:E5:CA:22:81:2D
Authority key identifier: 3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
Certificate issuer: /CN=3c41ea44178a702c507000023d14a9f9c47260e6
Certificate serial: 01965537A96D928AC4D03F988FD9A26269B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
Manifest number: 0F02
Signing time: Sun 20 Apr 2025 22:00:33 +0000
Manifest this update: Sun 20 Apr 2025 22:00:33 +0000
Manifest next update: Mon 21 Apr 2025 22:00:33 +0000
Files and hashes: 1: PEHqRBeKcCxQcAACPRSp-cRyYOY.crl (hash: MfGHpc3hrHdJUM3uoqvvAjMGS0OTqEYOyRDhkdHNSWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:a9:6d:92:8a:c4:d0:3f:98:8f:d9:a2:62:69:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c41ea44178a702c507000023d14a9f9c47260e6
Validity
Not Before: Apr 20 22:00:33 2025 GMT
Not After : Apr 21 22:00:33 2025 GMT
Subject: CN=8e75117ba3b5809a41f740ace96ff1e5ca22812d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:b1:85:ae:09:b8:9b:41:81:b3:db:92:20:
7c:2b:48:2f:09:c0:a1:65:ed:45:6e:86:34:85:14:
9d:a9:b4:ad:a3:56:66:52:79:1b:14:1d:c1:db:37:
e5:4b:24:ec:c0:ec:c9:20:ce:83:47:18:c6:1a:d9:
3d:0a:66:a8:dd:79:83:2e:20:8e:2d:74:c1:86:e8:
82:9a:6f:68:5a:39:2e:ed:c0:39:d1:2b:96:cf:f1:
43:9e:e6:6e:be:b7:8f:22:d0:48:c3:53:6a:f4:94:
40:36:15:1d:3d:19:b3:40:01:ab:87:1c:c4:b3:66:
bf:af:95:5b:26:a5:7a:5e:8c:ab:4d:61:06:56:62:
bf:08:a2:6c:f0:15:f6:1e:e7:7c:eb:bd:73:3d:93:
cc:a3:8d:65:b5:53:2a:b4:83:22:59:c1:25:21:78:
46:19:38:56:9f:62:a6:aa:5f:7a:c7:ec:ee:81:ab:
4a:24:f4:37:7e:41:f9:f2:26:3a:5a:ff:c5:72:23:
d2:4f:0d:ff:e5:63:62:7b:20:ed:53:4f:33:ac:6f:
8c:41:93:43:cd:ab:60:e5:16:54:99:8d:63:32:99:
6a:c0:fe:03:b8:5c:62:e8:4a:ff:5b:a3:0e:03:9f:
9d:78:eb:1b:eb:46:68:6d:6c:c0:12:97:b0:35:34:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:75:11:7B:A3:B5:80:9A:41:F7:40:AC:E9:6F:F1:E5:CA:22:81:2D
X509v3 Authority Key Identifier:
keyid:3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4d:27:99:5a:74:f0:f8:89:42:71:68:b2:55:f5:b0:5e:e9:
7c:33:db:ed:e7:53:e0:01:d4:21:a2:47:c9:b6:4c:04:dd:07:
f9:59:b8:8a:e6:5a:c7:61:ac:2e:14:9f:89:50:40:f5:1b:0c:
b9:a1:39:df:99:ad:f9:9a:74:15:35:97:57:13:c0:31:0e:ce:
28:5f:ea:47:72:e3:fa:97:b8:a4:37:76:8a:39:79:34:f3:0d:
1a:77:ea:e7:13:29:eb:02:8d:aa:72:2b:1a:99:b8:71:84:78:
3b:f3:3b:9e:5c:92:74:cc:34:cd:58:39:1b:c7:fb:93:d3:3d:
7a:17:9d:69:36:ba:4b:71:a1:02:ce:aa:8d:81:47:c4:8f:2a:
34:e5:a2:ad:d5:e2:91:5f:4e:58:20:3c:39:ba:44:5d:20:81:
6a:dc:5d:d7:ca:4b:77:26:10:20:27:95:ff:f6:02:b9:56:de:
ec:ef:78:f8:c3:2a:3c:92:42:ba:ff:11:a7:3a:e6:55:00:22:
4f:55:c8:43:da:b7:69:22:fe:78:98:af:12:ec:55:1a:ae:aa:
21:18:13:95:c1:a2:1b:0c:24:01:f9:a0:f8:53:29:f3:0f:48:
a8:09:a8:7c:4b:c8:78:31:27:23:c7:19:6e:11:a3:01:00:0a:
93:f1:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:39:03 2025 by rpki-client