Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File: pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier: z7/83pxwDffpGvD/8UiRWD8fUr3ulqYyM1m0wAvPGuY=
Subject key identifier: 3C:B4:79:ED:92:AE:D8:08:36:D4:A9:D7:8B:1F:16:91:3E:21:9A:F8
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer: /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial: 019655389367DE29FE4614DB70BF346EC959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 22:01:33 +0000
Manifest this update: Sun 20 Apr 2025 22:01:33 +0000
Manifest next update: Mon 21 Apr 2025 22:01:33 +0000
Files and hashes: 1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: 2rwr7wqLiJCdY32RnsbtP40sf9ax9kXrJjyabmAM8Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:93:67:de:29:fe:46:14:db:70:bf:34:6e:c9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Validity
Not Before: Apr 20 22:01:33 2025 GMT
Not After : Apr 21 22:01:33 2025 GMT
Subject: CN=3cb479ed92aed80836d4a9d78b1f16913e219af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:02:77:32:6e:44:a0:cd:67:f3:60:fa:4b:
b8:83:e4:42:37:ef:17:3c:cc:d9:b1:3a:1e:73:eb:
92:93:73:cf:af:9c:f2:03:28:5b:87:b5:1d:1b:78:
65:aa:89:c3:c5:6f:38:60:88:95:68:bb:58:9a:68:
0c:fa:9a:0e:4e:ea:8a:aa:1c:2c:30:ec:82:8d:45:
26:38:81:ab:89:ae:b2:01:c1:a3:57:47:2e:43:1a:
27:04:71:43:7e:fb:4c:4c:27:2a:95:d9:cb:b2:18:
d7:ee:3e:70:a3:b8:cc:e1:1b:10:a4:36:9e:e9:64:
e7:2f:15:4c:d5:70:fa:88:8b:70:48:ce:2c:31:d6:
38:2c:59:33:df:40:54:92:ad:78:f7:fe:70:a4:4e:
b5:78:6e:71:55:1e:36:ca:df:59:37:91:e3:a0:2f:
24:70:4f:75:1a:e3:f6:89:c8:5f:a5:42:a4:88:55:
63:53:c5:cd:f4:89:5e:16:54:50:f9:77:d2:cc:ed:
ae:aa:d2:30:ca:c9:90:ec:6a:c8:80:39:fd:9e:37:
3c:a6:fd:d0:c4:a2:01:b4:46:8c:8a:38:a9:2f:da:
c8:e2:6a:20:16:ac:a4:9b:a1:72:c7:7e:37:3d:ea:
54:f7:d0:9d:08:2b:ef:ca:5a:9a:65:3e:4e:d4:1a:
9a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:79:ED:92:AE:D8:08:36:D4:A9:D7:8B:1F:16:91:3E:21:9A:F8
X509v3 Authority Key Identifier:
keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ea:97:b1:0e:79:fd:2f:14:50:b1:b9:14:a7:79:62:6d:11:
13:e0:9f:07:0a:ad:f5:be:ac:9c:98:6d:80:21:b3:2b:2d:f4:
31:b5:77:bd:dc:3a:de:68:a9:c6:4d:43:4a:96:f2:bb:be:21:
36:65:95:4d:2b:02:3e:ec:57:1b:47:90:86:aa:36:18:4e:7e:
94:0b:e7:5b:e2:3b:04:ee:af:cf:02:90:a3:65:be:9d:a9:d1:
f9:65:fb:57:d6:26:b3:4a:9f:bd:f8:09:d1:da:39:a2:b3:d2:
59:c5:61:59:c4:49:82:b3:d7:d3:9a:3e:13:79:03:4a:5d:2d:
66:f5:90:ac:ef:5d:ea:ac:20:a3:18:76:09:78:4e:35:b0:cd:
2d:48:a8:74:61:d1:65:34:e4:e8:1c:6c:4e:f1:b1:80:db:70:
2c:9f:ea:3d:95:02:d4:82:9c:03:77:d2:fb:66:88:f0:aa:91:
a9:5d:93:3c:64:40:c8:90:9b:fe:ae:ab:ed:16:04:da:9e:f7:
eb:46:17:bd:93:b3:1b:0a:81:8e:ec:1a:df:1e:da:16:72:bd:
df:f3:ea:34:a3:be:cf:75:60:41:8d:d4:8a:d5:5a:14:93:97:
fc:dd:3e:f2:b2:78:30:d5:c9:34:e8:87:50:9e:1f:5f:26:85:
a1:48:47:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:51:25 2025 by rpki-client