Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File: PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier: v+60APZNksuD1+ErvySXOC1Pcoaf3ACrrM86Q1CCuqQ=
Subject key identifier: 28:D7:76:8E:B6:28:0B:73:8B:AD:B4:81:8D:EB:AE:AC:03:6A:DE:2A
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial: 019654C98B0A99A412F45CF0FEE969DF0660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 20:00:16 +0000
Manifest this update: Sun 20 Apr 2025 20:00:16 +0000
Manifest next update: Mon 21 Apr 2025 20:00:16 +0000
Files and hashes: 1: 1-6KFFu76PFsOuJn8gJBndgCFOdU.roa (hash: 6vvOH7Ca5iY7AgmvELf2eSvGZtIS2tf6NCvrsrbSjcE=)
2: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: 2opSVa/pfqmojrANIvtC5QlmI6qmHUq+3uFqwD/0AwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:8b:0a:99:a4:12:f4:5c:f0:fe:e9:69:df:06:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Validity
Not Before: Apr 20 20:00:16 2025 GMT
Not After : Apr 21 20:00:16 2025 GMT
Subject: CN=28d7768eb6280b738badb4818debaeac036ade2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:0c:2b:9d:4b:df:dc:47:7b:5c:ad:29:23:
60:7a:4b:de:ce:e5:31:bc:cb:9c:74:73:f6:03:d2:
4e:84:14:a5:af:30:e4:fd:f9:c5:fa:3f:97:da:a5:
5d:42:67:74:67:47:d8:73:0c:84:e3:2e:0c:3d:3d:
3b:31:20:9c:b9:6d:a6:71:c0:9f:78:84:a8:46:d4:
41:a1:5c:6a:69:f0:81:75:16:15:15:aa:30:c3:d8:
5b:2a:fd:7e:48:bb:f2:46:1f:c7:92:79:62:95:0d:
ba:f7:c8:e2:18:10:68:ca:0d:cf:a8:bb:57:bd:e3:
d1:db:00:38:34:c8:52:ee:d2:a0:f1:a1:22:4e:ca:
88:a4:51:df:71:2a:18:a4:92:06:95:f7:cb:a9:4e:
49:8d:92:d0:90:4c:64:1b:77:4f:a4:f2:95:17:6c:
58:ed:1d:52:5a:23:6c:f5:7e:c0:37:35:03:ad:7f:
44:df:d3:bf:ab:4d:92:40:34:13:de:9b:48:eb:09:
2c:8f:4b:8b:98:ca:fb:58:2c:05:c3:36:c8:7a:81:
13:9a:5c:89:c9:09:4e:50:d0:9f:68:11:36:af:08:
6f:4f:0c:61:5a:91:c9:32:2b:a6:07:83:2d:89:07:
9a:91:e6:c1:d4:2d:a6:bf:41:80:67:64:31:65:45:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D7:76:8E:B6:28:0B:73:8B:AD:B4:81:8D:EB:AE:AC:03:6A:DE:2A
X509v3 Authority Key Identifier:
keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:11:f4:71:63:81:0b:98:55:b6:7d:ad:a7:26:17:fa:38:18:
87:bb:49:1f:72:df:73:bd:04:e0:7f:96:80:c5:a6:5d:a5:cd:
94:bc:3b:78:cb:56:4e:70:2f:d6:3e:b0:4b:1e:13:69:f1:89:
08:ef:16:1a:b0:68:2d:0f:be:31:3f:e7:ba:85:d1:09:9d:ba:
b5:04:be:79:65:93:2e:a7:bf:d7:b0:8e:a8:cc:45:2c:37:11:
1a:76:7d:30:d0:35:10:ee:b6:c7:f6:fb:57:b7:ae:d7:e5:17:
a8:5f:8d:5f:4e:4a:c7:70:d7:8e:cb:d3:61:4b:3f:65:5f:39:
93:21:c0:61:42:3a:bd:25:16:67:98:a6:dc:d2:f4:1f:eb:e3:
e1:df:37:c9:3d:f6:75:cf:90:ad:8a:a5:c9:b0:f1:9b:0d:80:
76:7d:97:a9:e2:7f:cc:32:39:91:93:7b:a1:30:85:8d:36:31:
f5:06:e1:d0:83:65:72:ec:c8:1a:07:49:22:c5:2f:ff:49:2f:
26:53:b7:3d:7d:e6:57:2d:76:c3:a1:c6:77:b2:14:e4:34:57:
be:ac:da:a4:30:61:f4:a2:95:1f:04:0f:02:c9:28:94:48:6c:
aa:8f:a3:ad:2b:c5:39:a7:2a:81:25:96:35:31:7f:4b:4e:9e:
ee:72:60:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:11:42 2025 by rpki-client