Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
File: PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft (raw, json)
Hash identifier: Vb0tCHhkoDmsB28bir7DGCGnnvF6yq+MVjlDx000Cp0=
Subject key identifier: 50:7A:EA:10:A9:FB:02:04:E8:99:95:0E:BD:15:59:32:11:47:58:8B
Authority key identifier: 3D:1B:67:CC:DA:49:C8:DE:48:92:93:41:F6:DE:8A:2B:60:25:B3:A6
Certificate issuer: /CN=3d1b67ccda49c8de48929341f6de8a2b6025b3a6
Certificate serial: 019659144024D513BF8C2847F02857B18F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRtnzNpJyN5IkpNB9t6KK2Als6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
Manifest number: 0284
Signing time: Mon 21 Apr 2025 16:00:21 +0000
Manifest this update: Mon 21 Apr 2025 16:00:21 +0000
Manifest next update: Tue 22 Apr 2025 16:00:21 +0000
Files and hashes: 1: PRtnzNpJyN5IkpNB9t6KK2Als6Y.crl (hash: VWVJF2tmC1Njyy83iGNQFbcr0mWFh4Vc0MdDq03raI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRtnzNpJyN5IkpNB9t6KK2Als6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:40:24:d5:13:bf:8c:28:47:f0:28:57:b1:8f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1b67ccda49c8de48929341f6de8a2b6025b3a6
Validity
Not Before: Apr 21 16:00:21 2025 GMT
Not After : Apr 22 16:00:21 2025 GMT
Subject: CN=507aea10a9fb0204e899950ebd1559321147588b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:71:6a:80:4a:1b:49:97:eb:38:ab:ca:f4:
55:48:5d:48:f8:71:ba:80:02:1d:f1:22:f5:42:be:
d4:88:13:e4:05:58:a9:17:e0:36:2c:22:96:0a:26:
63:59:8d:56:37:dd:f0:87:d4:cd:74:05:af:dc:2b:
ae:01:1d:d4:43:00:40:08:2e:99:83:67:35:66:23:
40:33:93:f5:e4:8f:24:31:81:38:a7:39:28:aa:62:
06:c4:fd:a9:c7:b8:04:86:27:9e:53:47:e7:0f:c0:
56:af:42:fe:12:5a:e7:29:f7:d7:99:98:40:4f:f4:
b0:5a:0b:23:d7:41:d9:28:fc:79:34:1a:aa:94:13:
c8:e1:4e:e8:4a:97:5d:08:55:1a:d2:1f:46:94:63:
a2:e2:88:e3:8d:ad:35:d2:13:49:04:64:eb:f1:d4:
a9:4e:84:f8:33:d8:74:85:0d:97:9e:ca:de:94:4d:
c7:74:e3:eb:30:48:b3:1e:bc:66:a8:ca:65:0b:6d:
16:8d:46:7c:f1:6c:35:2c:f9:27:3f:68:2c:b7:42:
af:74:9a:8c:74:4b:80:7e:70:f4:15:01:6e:7b:61:
3e:21:71:bd:12:ff:3a:3b:80:c7:e4:02:00:fd:e2:
2b:d3:7f:73:bd:7f:3b:9f:a6:55:7d:b1:67:32:4a:
39:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:EA:10:A9:FB:02:04:E8:99:95:0E:BD:15:59:32:11:47:58:8B
X509v3 Authority Key Identifier:
keyid:3D:1B:67:CC:DA:49:C8:DE:48:92:93:41:F6:DE:8A:2B:60:25:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRtnzNpJyN5IkpNB9t6KK2Als6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:ec:ac:c6:37:f9:de:4e:a5:78:09:dd:f4:2d:33:66:66:e1:
a6:8f:82:95:da:3b:83:5b:b2:96:73:b3:81:74:e8:39:98:1e:
0c:02:f3:c5:97:e5:aa:15:b4:4f:e2:a8:ce:4a:18:76:86:a4:
1b:3d:86:64:f2:d7:83:6a:4b:37:34:18:5c:71:15:f5:d6:c2:
17:5a:9e:ae:3a:68:f7:02:bf:ee:cd:59:1f:39:12:2a:f4:c5:
08:db:97:93:0b:0e:ed:6b:91:72:8f:42:44:46:0f:93:a0:29:
03:1c:e2:d9:b1:11:b2:39:c5:cb:c9:c5:e2:e1:0c:e5:1a:95:
1f:df:ae:1f:fd:45:42:1c:37:6c:d6:27:0c:fc:fa:ca:68:91:
08:e3:cf:56:3a:41:14:15:ae:f3:0c:3c:a9:61:5d:58:3c:e2:
bd:97:eb:42:f2:98:29:de:b4:83:20:fa:63:6b:53:f9:27:59:
a4:ee:17:68:6f:f9:e0:3b:1e:04:40:a3:36:e3:bb:1c:67:ee:
f2:80:56:93:d5:36:5a:d5:8f:0c:24:03:d5:e7:6e:76:9c:d7:
ec:94:08:a2:50:d7:c3:98:f8:2e:81:0a:c9:4f:91:f4:5d:ad:
4e:c1:ef:c4:e3:bc:bc:cc:7e:ec:08:ca:50:11:45:4f:15:9e:
47:d4:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:29 2025 by rpki-client