Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
File: PrEhzwYygZ7s6r64qVVpxnUpiCE.mft (raw, json)
Hash identifier: 5GtoorfxME6ikm1FJ/Ntv+rlLFWrXTgwf1F1zhytyPg=
Subject key identifier: AD:05:5A:71:87:C8:53:E5:A9:01:49:20:1F:E3:C5:C2:CB:BA:59:26
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 01965B710ECD149EB9C1449CABA489226ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
Manifest number: 1085
Signing time: Tue 22 Apr 2025 03:00:57 +0000
Manifest this update: Tue 22 Apr 2025 03:00:57 +0000
Manifest next update: Wed 23 Apr 2025 03:00:57 +0000
Files and hashes: 1: PrEhzwYygZ7s6r64qVVpxnUpiCE.crl (hash: x/ibVEgwBGWZJ9bCUtIMrn0ji2gnaIoV+fKM279tEf4=)
2: _k-LVkRidjyVBxM5JDfBSAF4xXQ.roa (hash: sWdlQ6il1efqRiBOryvgVXuddGRGIEg9GvemLG8GNq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:0e:cd:14:9e:b9:c1:44:9c:ab:a4:89:22:6e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: Apr 22 03:00:57 2025 GMT
Not After : Apr 23 03:00:57 2025 GMT
Subject: CN=ad055a7187c853e5a90149201fe3c5c2cbba5926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:5c:9c:92:6a:26:68:86:02:aa:87:cb:38:
e7:0b:74:9a:df:ea:42:24:d7:d4:a6:5f:a7:f9:95:
66:45:cb:e4:b2:09:d1:92:47:9d:92:f1:e4:8a:b3:
3a:df:5d:8a:f1:ef:77:c2:67:84:95:ff:dd:e3:bf:
a4:37:5e:40:49:c4:c8:2c:29:9b:9b:e3:b5:d9:a5:
ae:c9:2a:fd:ca:80:1f:29:1c:81:fe:03:4f:b8:e3:
e9:5e:ad:3e:8a:3b:95:9e:b8:8f:e9:d1:6e:74:43:
9c:68:27:91:bc:64:be:fa:1d:c0:1c:9f:2c:36:e9:
c7:9f:90:f7:5c:af:88:10:98:0d:fa:12:3e:f8:03:
6f:24:1d:3d:3c:ce:1e:99:2a:5b:cb:a2:4f:5d:a7:
c5:e6:9e:5e:df:8c:ff:57:0a:5c:49:41:c6:b0:db:
ab:b3:dd:4f:16:28:a2:06:7d:0f:88:63:ef:71:64:
e6:08:87:99:92:9d:13:8a:27:99:bf:e3:73:fe:ab:
ca:fe:8c:41:65:91:78:b2:2a:20:4f:82:52:b7:ca:
1e:5f:b3:8c:e8:28:2c:59:12:d3:6c:db:6a:23:f1:
35:c1:98:86:67:02:e2:3c:de:d8:48:5d:2d:ac:af:
b6:2d:78:a4:33:f8:1a:6c:db:a7:85:f6:50:03:2f:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:05:5A:71:87:C8:53:E5:A9:01:49:20:1F:E3:C5:C2:CB:BA:59:26
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8e:31:88:7d:48:d3:60:b2:89:0b:75:51:cb:3b:fc:ca:c1:
30:ad:03:cb:9c:44:88:d8:f4:ee:32:26:e1:6b:34:64:c4:ea:
66:67:87:21:59:ed:65:eb:06:6a:a1:af:a9:16:7c:dc:f7:ab:
d5:a9:a0:25:bb:56:cd:5c:1a:98:d7:1e:26:b5:fb:2a:d6:34:
1c:a4:dc:8e:b7:d8:f0:32:7d:47:5c:0f:da:dd:7c:17:b4:6b:
2d:e3:78:71:4a:5c:ab:2b:47:da:65:56:28:62:13:ad:40:e7:
d4:5b:a9:be:78:91:89:31:3f:7b:13:2f:70:14:a2:34:59:77:
dd:ce:d9:87:08:ba:af:a1:63:06:c5:83:e8:be:df:e0:6c:4d:
f6:db:b4:f0:3d:b6:6a:87:e4:0f:fc:8e:2e:44:73:5f:d0:78:
df:45:9e:c4:84:24:86:94:2d:7e:3b:0c:b3:3f:a3:51:3f:cc:
ff:89:3f:20:57:4c:da:4b:b9:e5:14:73:df:e5:75:1b:03:e0:
16:83:ec:98:41:8d:c9:4e:d8:7c:06:12:a5:e0:dd:3a:25:e7:
10:08:dd:69:da:17:01:70:8e:c9:1f:f9:75:fb:65:dc:e0:09:
11:4c:14:f7:46:a0:db:19:e9:fb:7c:51:01:46:b6:5c:c5:b7:
fe:ac:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:04 2025 by rpki-client