Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json)
Hash identifier: j7bLjrstOYBr9NO2htH8jO+H9sMf7H/dzhdyKCl500c=
Subject key identifier: F9:06:06:3C:0B:91:97:E1:8B:5F:83:E8:64:5A:16:7F:4A:6C:F2:A0
Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Certificate issuer: /CN=a4c9f067007684facca9be8ce02da4676c09972a
Certificate serial: 01964A0FE756D1726597F0807AA0E43E5FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
Manifest number: 052F
Signing time: Fri 18 Apr 2025 18:01:18 +0000
Manifest this update: Fri 18 Apr 2025 18:01:18 +0000
Manifest next update: Sat 19 Apr 2025 18:01:18 +0000
Files and hashes: 1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: VAR8i1DGA3mC6ex/TW8+w+R5DT16V+igBtHQnksTuqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:e7:56:d1:72:65:97:f0:80:7a:a0:e4:3e:5f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a
Validity
Not Before: Apr 18 18:01:18 2025 GMT
Not After : Apr 19 18:01:18 2025 GMT
Subject: CN=f906063c0b9197e18b5f83e8645a167f4a6cf2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:42:2d:aa:0f:fd:71:4d:4f:18:9d:d0:d6:
70:6d:b0:e6:7e:6f:90:9b:24:af:6b:19:3b:2f:60:
73:b6:c8:03:1c:07:ce:35:1c:b7:9a:2b:93:32:db:
29:29:12:8d:1a:70:9f:1a:6f:65:d3:eb:99:64:77:
6c:c0:f6:a0:7a:9b:c2:60:98:ec:26:12:63:c0:cd:
b6:3b:1b:59:5c:91:e5:25:b0:d7:db:0c:56:e0:33:
5b:9b:93:45:62:3b:69:53:81:a8:53:d7:4f:fe:09:
3e:3b:50:82:bf:5b:ea:95:6f:c7:d5:22:80:c3:14:
39:51:a0:4b:47:99:87:33:74:5e:63:ee:ce:f3:95:
81:60:ee:5d:f3:9e:a7:e4:75:57:f0:4d:fb:be:de:
36:f5:df:93:68:83:bb:24:12:e1:1c:cd:3b:85:8e:
bf:da:40:ef:ae:23:ef:7c:26:85:33:55:f6:d7:4c:
f2:71:43:66:01:83:62:c1:f7:d7:1e:a0:e6:5d:9d:
bb:e3:57:87:af:be:19:ff:97:12:27:c9:d5:b3:eb:
de:ce:f9:06:21:e4:3b:14:17:81:46:b1:b8:63:39:
24:d9:06:4a:8e:56:11:89:2b:2b:8e:2f:c8:31:be:
0b:ef:fa:ef:3c:11:87:30:29:85:fe:88:d1:51:a0:
7d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:06:06:3C:0B:91:97:E1:8B:5F:83:E8:64:5A:16:7F:4A:6C:F2:A0
X509v3 Authority Key Identifier:
keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:76:7e:81:9d:5a:0f:82:d7:b6:48:5d:6e:14:ab:82:e3:39:
4e:fa:56:06:a7:1a:9b:a1:c7:f3:cb:c9:d5:07:41:60:00:2a:
a5:15:d1:9f:65:87:93:72:f8:1c:ef:0d:da:83:15:2f:8c:cf:
52:77:b8:b3:ef:5e:64:c8:cf:4e:c1:2a:83:a5:e4:fb:9e:33:
3a:e9:92:8d:e4:ee:f9:d3:d7:16:a3:d2:ca:50:87:3a:f2:1a:
ba:4e:b8:f4:65:67:a9:1d:d4:38:29:4b:fe:b5:e7:c9:8a:ec:
5f:0f:41:fd:1b:93:b4:26:71:e7:55:0c:1d:13:bf:fc:86:da:
98:5d:aa:0a:80:77:1e:a7:c8:e9:07:18:33:d7:c6:b7:f2:87:
36:e8:4e:07:15:63:83:4a:83:29:c3:21:f4:75:e4:0f:1b:6e:
f2:a2:ab:2c:34:5e:8d:cf:49:ad:8c:40:ed:5f:0d:c6:c5:11:
d8:4b:5f:1f:10:09:79:df:36:c6:3f:de:de:f0:0e:8a:eb:21:
05:bb:e9:af:27:d3:53:9c:13:f4:40:ca:d2:2d:37:46:4d:0f:
04:1c:12:88:98:03:e2:08:2a:ae:3c:2d:04:84:d7:54:aa:1e:
81:42:03:b4:49:4b:12:80:6c:e0:8b:57:a6:24:11:5f:79:f4:
e4:1a:0b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:34:53 2025 by rpki-client