Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
File: PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json)
Hash identifier: k8zpNAOMWFhj5fGfZT/EWOU1KEXkXJhV1YvMkD2AUqI=
Subject key identifier: 1A:B0:9D:12:A3:C2:1E:E3:D6:08:A0:02:2D:3A:29:FC:9F:88:43:4A
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial: 0196553881F53AD895DC79C0FAF3B86C82F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
Manifest number: 0904
Signing time: Sun 20 Apr 2025 22:01:28 +0000
Manifest this update: Sun 20 Apr 2025 22:01:28 +0000
Manifest next update: Mon 21 Apr 2025 22:01:28 +0000
Files and hashes: 1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: xWmnyAcf+RbQ+hj7o1wwDKuOtOXuriSB4UjLLvqQ4Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:81:f5:3a:d8:95:dc:79:c0:fa:f3:b8:6c:82:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Validity
Not Before: Apr 20 22:01:28 2025 GMT
Not After : Apr 21 22:01:28 2025 GMT
Subject: CN=1ab09d12a3c21ee3d608a0022d3a29fc9f88434a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:e8:86:2a:b7:b6:7d:c3:0b:25:5d:2c:69:
35:20:ee:60:db:68:12:da:f0:37:cc:c4:d9:be:9c:
ed:bd:3d:bb:be:8e:01:42:9a:92:98:8d:39:78:a3:
d6:d6:f8:16:ea:5f:0b:b5:1b:33:fd:06:19:04:79:
41:62:a0:76:1d:4d:16:91:12:7f:e8:51:78:e9:b2:
0c:cd:9f:22:4a:aa:20:2c:33:e4:60:8f:c3:c9:00:
29:97:1e:11:7a:2a:b6:3c:ea:ce:88:86:2a:af:48:
dc:ad:6b:ce:b2:5f:b3:86:e9:5d:e3:bf:b9:4a:bf:
d0:bd:61:d4:ce:29:45:a0:79:8c:4e:3e:56:8d:4a:
48:dc:18:3b:0d:08:c5:ab:e1:95:84:ec:03:39:9b:
97:f5:cd:0b:90:8f:d8:fd:31:d1:ca:62:12:a0:3e:
84:42:96:f5:b4:29:3a:fb:27:96:d2:e5:14:21:f7:
95:0f:08:30:37:58:0f:8b:db:3e:d8:4b:ad:36:9e:
25:c4:bf:98:49:37:28:01:5c:f8:d7:db:ef:ab:17:
ca:11:dd:e7:e4:58:f4:51:68:f9:13:51:b2:30:d8:
b7:ca:07:17:9b:88:ce:11:93:41:d5:6c:eb:fa:48:
b1:9c:16:e5:75:ca:29:20:74:65:b8:27:87:ef:cb:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B0:9D:12:A3:C2:1E:E3:D6:08:A0:02:2D:3A:29:FC:9F:88:43:4A
X509v3 Authority Key Identifier:
keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e5:7c:6b:80:45:95:7a:3b:d7:37:57:03:49:1e:96:59:83:
a4:08:02:7a:9e:37:81:d9:a7:fc:88:0b:a5:fc:dc:b0:5e:05:
96:95:af:63:7e:d5:64:01:73:ee:18:3d:14:51:19:8c:e9:c8:
f5:7e:70:bf:60:fd:7d:13:6b:f5:1b:60:be:0c:ff:b5:e1:ad:
62:f9:c7:94:f0:3f:85:45:63:b5:4d:33:74:70:40:e1:ef:d0:
e3:ed:19:b6:48:68:dd:9a:b0:01:3f:c2:32:e9:a9:3e:b9:a1:
90:82:fb:37:69:a1:1d:13:85:14:ab:ff:b0:8f:4f:a1:35:2e:
b0:06:96:ff:c0:f1:38:7f:75:26:86:dd:32:f0:78:83:b7:e0:
02:87:58:75:56:45:7d:ef:c0:78:9b:ae:94:a9:90:bc:f2:90:
03:85:aa:7b:d2:86:3b:db:b6:f7:f8:36:af:cc:24:c9:0e:1d:
3e:27:ec:03:48:09:20:e7:19:98:1b:81:b2:64:1f:d1:3b:63:
3f:2a:a6:53:af:ac:67:d9:56:d1:c1:e6:cc:aa:9f:51:da:8d:
b6:fa:6e:7c:26:79:74:12:23:4a:d4:47:69:28:e1:d8:c9:6d:
25:c3:bf:43:da:87:f1:96:06:80:6b:3a:c3:a9:76:04:e0:13:
ca:b2:5f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:48:56 2025 by rpki-client