Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
File: PRgTEVbDK1enN4cYxgiq46mWXCs.mft (raw, json)
Hash identifier: cbieTFFWz7lI0gERsdI3+oMMSpMhaglFLeEJLvwZSdM=
Subject key identifier: D5:E1:C9:F4:B3:FA:11:4A:B4:91:83:7C:FC:50:29:CC:D4:C3:08:0A
Authority key identifier: 3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
Certificate issuer: /CN=3d18131156c32b57a7378718c608aae3a9965c2b
Certificate serial: 01965349F4FA7A0448B7A5E8D014A0B09586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
Manifest number: 14F8
Signing time: Sun 20 Apr 2025 13:01:17 +0000
Manifest this update: Sun 20 Apr 2025 13:01:17 +0000
Manifest next update: Mon 21 Apr 2025 13:01:17 +0000
Files and hashes: 1: PRgTEVbDK1enN4cYxgiq46mWXCs.crl (hash: rSRGEd7O96dHcz56Usa2U+1PIEJPXZiJBDV4gYGIs3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:f4:fa:7a:04:48:b7:a5:e8:d0:14:a0:b0:95:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d18131156c32b57a7378718c608aae3a9965c2b
Validity
Not Before: Apr 20 13:01:17 2025 GMT
Not After : Apr 21 13:01:17 2025 GMT
Subject: CN=d5e1c9f4b3fa114ab491837cfc5029ccd4c3080a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:3d:24:1a:c8:b6:71:e1:ea:a4:fd:08:67:
94:28:c6:1c:34:1f:3b:01:3f:90:f9:d9:70:f4:d5:
07:6f:ed:49:1c:82:17:49:25:84:41:31:6a:10:fa:
d5:8e:fb:a2:2b:a0:ec:6d:0d:22:28:12:1a:68:1b:
56:51:d9:90:54:4d:1c:89:0b:98:15:a6:7e:00:d4:
69:7e:c4:01:d3:84:91:97:91:97:a6:0a:67:80:ae:
21:40:42:af:5e:51:5c:59:9c:a8:77:56:c3:4e:dc:
cc:f5:c5:11:fc:89:7a:7a:3e:c4:a9:a3:f8:ac:36:
54:69:f9:a5:0b:b7:5a:2e:7f:e7:b1:48:47:68:5f:
e0:31:b4:67:78:71:ae:a9:35:7b:6b:ac:3c:86:bd:
3b:d9:3b:b8:14:ca:e5:fa:68:56:22:33:85:65:3f:
d5:45:0a:59:bb:cf:92:7e:5a:12:04:81:5a:1c:c7:
1f:2a:1e:0c:97:90:54:a1:c4:00:8a:42:19:4a:83:
f7:07:ec:65:86:b6:5d:9d:92:3e:30:9d:eb:63:02:
66:d4:29:ac:6e:c6:8d:00:7c:a4:1c:bf:fa:07:74:
f9:bf:f3:fa:6b:f8:ed:a7:c7:cf:0c:d2:7a:c6:7a:
9f:47:fb:2d:de:5b:88:2d:57:a4:e0:30:0e:8b:1e:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E1:C9:F4:B3:FA:11:4A:B4:91:83:7C:FC:50:29:CC:D4:C3:08:0A
X509v3 Authority Key Identifier:
keyid:3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:de:cc:40:7a:c3:bf:3a:28:6e:39:68:90:c4:5d:8e:ed:2d:
3a:91:cb:c0:92:79:d5:6e:c3:d9:bd:8f:7c:75:74:a7:ad:d1:
0e:8d:38:b3:b5:ac:11:08:c9:c9:75:90:ef:d5:07:fa:eb:f2:
c1:3c:59:3d:ca:3f:be:bd:c2:a2:25:80:a5:8b:0e:f5:ac:9e:
82:f1:10:49:31:00:34:36:ab:bf:11:fa:88:a1:d5:d5:a9:7e:
e1:9c:ef:ce:45:53:a4:64:99:95:a9:4e:cf:b6:20:08:5d:3c:
bd:f2:37:d9:d4:08:95:45:99:63:fc:72:6e:53:f4:84:dd:1d:
5b:a1:32:6d:8b:0b:b3:e3:7b:f5:4a:96:a6:05:ca:af:37:fe:
f3:99:7f:74:a5:74:70:39:89:9e:58:20:a2:d9:bc:d5:e6:6e:
88:3a:87:b7:12:71:37:f6:53:ea:2e:d8:a4:5e:82:5b:64:24:
54:9d:90:90:da:de:7d:b2:c3:52:54:99:2a:07:79:b7:66:b1:
c4:e9:85:fa:44:b1:2c:f2:c0:4f:74:a6:e7:c2:74:69:09:89:
02:7d:60:75:8a:ad:33:35:76:63:ce:75:8d:7a:92:ab:48:99:
d8:74:28:c5:60:22:bc:b3:a8:6f:4c:35:dc:bc:c2:e7:b6:52:
25:a3:c2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:43:29 2025 by rpki-client