Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
File: pffZAsirU0AJh6GIKrJ_fPoBt0A.mft (raw, json)
Hash identifier: xbBfl3I30XnMWt/SQD2q9IvX1qoqZtsqYRLcc2RxxX4=
Subject key identifier: E6:EC:25:D4:D5:2D:4D:0B:9C:8C:17:1F:DE:49:FC:B7:64:03:FA:45
Authority key identifier: A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
Certificate issuer: /CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Certificate serial: 01965D963E6C895ECC536F1317985295E91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
Manifest number: 015B
Signing time: Tue 22 Apr 2025 13:00:49 +0000
Manifest this update: Tue 22 Apr 2025 13:00:49 +0000
Manifest next update: Wed 23 Apr 2025 13:00:49 +0000
Files and hashes: 1: pffZAsirU0AJh6GIKrJ_fPoBt0A.crl (hash: iV18zAVCDwKYDkfew/wdCpuPg0SttmI7/1Pq0bLkFBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:3e:6c:89:5e:cc:53:6f:13:17:98:52:95:e9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Validity
Not Before: Apr 22 13:00:49 2025 GMT
Not After : Apr 23 13:00:49 2025 GMT
Subject: CN=e6ec25d4d52d4d0b9c8c171fde49fcb76403fa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:a9:67:74:37:f9:76:98:9e:a5:26:d7:40:
a3:76:5b:55:57:0c:23:9a:0c:04:c8:24:f3:30:ee:
a7:25:11:52:fa:b6:f2:93:db:40:3c:9f:e7:b6:66:
88:62:de:29:07:08:66:3f:ed:63:6f:96:38:8a:37:
87:eb:b8:1a:f1:85:f4:a8:d3:57:95:66:53:e6:18:
af:ed:55:f7:94:2f:d8:7f:81:13:d9:4e:8e:45:3b:
b5:91:72:56:a1:bc:ea:20:53:26:f9:08:70:d2:55:
ef:25:0e:c8:00:49:de:bd:45:27:53:53:ee:ef:f9:
82:31:d7:df:6b:71:d9:7f:a2:89:61:b0:df:54:22:
e9:e9:e8:19:40:20:47:6d:60:c2:e7:78:e7:5f:0d:
aa:b0:a5:a6:24:4b:43:af:08:83:ea:13:d1:cb:9e:
32:8f:5c:20:d8:17:19:6d:b6:9d:a3:a0:c8:21:62:
fe:e5:e4:0f:d6:72:00:7a:9a:ac:fa:df:e7:62:29:
8f:7e:ac:55:31:48:9f:15:5f:33:cc:0a:7e:27:95:
f2:44:8f:30:82:af:91:f5:58:5b:1e:dc:54:40:6c:
58:97:ec:eb:d9:e7:a2:66:e7:8f:74:bf:49:7a:33:
fa:d3:8c:a0:a4:fa:88:e7:8d:4a:a1:29:4b:5d:2c:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EC:25:D4:D5:2D:4D:0B:9C:8C:17:1F:DE:49:FC:B7:64:03:FA:45
X509v3 Authority Key Identifier:
keyid:A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:95:a2:5c:2e:4c:aa:a0:e3:c1:3f:7e:39:91:df:a5:00:3e:
c6:4b:08:6e:12:07:bd:55:5c:4e:81:35:04:85:d0:3e:1c:a1:
89:fd:05:26:e0:6a:a5:63:45:15:d7:d1:8d:1d:49:e6:bc:01:
f5:3b:c2:d7:db:d4:e7:20:40:a4:76:6a:25:0e:69:4a:27:4a:
9c:ee:46:57:af:91:11:ed:97:db:e7:ea:83:0d:96:f5:dd:a5:
67:92:3a:bd:56:91:6a:0a:7f:cc:95:98:ee:ac:03:00:b1:db:
02:1b:84:56:cd:cb:24:0b:09:a8:3e:1c:f7:11:f4:87:51:a0:
95:4b:63:03:3b:37:80:18:a4:2c:52:39:b0:c9:cf:f5:ee:c5:
8f:2f:08:98:35:e8:51:a7:da:42:8f:f3:2e:e2:ca:dc:e4:fa:
f7:9a:a4:e9:a9:72:18:72:19:fc:aa:cc:a5:7a:f7:7c:f2:f4:
b8:00:54:01:59:53:42:c6:95:92:8c:62:ca:6c:c5:f9:e9:99:
a9:65:d3:38:a6:cb:82:84:03:0d:68:0e:42:66:e1:54:ea:a0:
24:6d:1c:27:08:87:2f:08:ca:16:f3:d7:5f:77:85:f2:b8:03:
d5:7d:a3:d2:5e:c7:9b:7e:a9:da:81:18:4c:3e:1f:ad:02:29:
19:53:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:57:01 2025 by rpki-client