Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: LZvw9lj2qRoNWatoeAynD3RndxMUScOw5Um+Zr8Mg9M=
Subject key identifier: B5:D5:BB:EA:EB:80:C3:D4:2A:D4:8B:37:95:5B:3C:E9:12:09:2A:E3
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 0196507F34B9084F99AD15730DCA79637F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 03DA
Signing time: Sun 20 Apr 2025 00:00:35 +0000
Manifest this update: Sun 20 Apr 2025 00:00:35 +0000
Manifest next update: Mon 21 Apr 2025 00:00:35 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: JlFuAwb/K2pkE0fNjkT4HYbRmn0iLxZJQyVds/+DdhM=)
2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:34:b9:08:4f:99:ad:15:73:0d:ca:79:63:7f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Apr 20 00:00:35 2025 GMT
Not After : Apr 21 00:00:35 2025 GMT
Subject: CN=b5d5bbeaeb80c3d42ad48b37955b3ce912092ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:64:5c:2c:12:2d:d1:1b:a0:bc:96:02:ae:
16:1b:46:c0:98:c3:1b:03:de:d5:4f:2e:0a:bb:c8:
30:14:ce:6f:46:5a:61:f2:96:8d:e2:fa:0b:6e:e8:
97:e8:62:7c:6a:88:44:30:82:75:91:bc:62:62:47:
d7:5b:ac:9a:93:81:68:4b:9a:e2:f8:34:65:54:8b:
c5:b1:ec:79:21:27:98:ab:26:dc:18:96:0a:fc:80:
0e:31:81:36:dc:b8:f1:da:9a:7d:c9:ad:36:e8:39:
f8:4c:4d:f3:ee:9e:88:ad:62:fa:0e:dd:48:2b:17:
f7:81:c6:b2:4a:fe:a9:e8:15:70:aa:7c:34:ea:e9:
94:62:fa:8c:e2:9a:bc:73:a7:3e:94:d8:d9:50:cb:
79:60:4c:b8:a1:24:63:4f:d0:fc:6a:f2:a0:ed:e9:
8c:ae:28:77:aa:02:b9:0a:74:bc:c6:ea:ea:94:9a:
67:22:48:35:0b:37:70:7a:b9:d1:f0:d7:fc:27:79:
99:73:9e:53:a1:c6:9c:c0:80:8f:95:f0:ad:be:c9:
19:6a:6d:ee:11:11:7b:c4:9a:ba:ed:e8:6c:a8:be:
66:0c:12:bc:b9:f5:48:db:47:d1:21:7e:e5:b9:89:
8c:6b:d3:1c:5f:4d:d5:f4:aa:8d:83:3b:92:f7:48:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D5:BB:EA:EB:80:C3:D4:2A:D4:8B:37:95:5B:3C:E9:12:09:2A:E3
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:82:b2:c5:45:b5:da:74:13:62:9b:d6:f8:7a:ab:bb:46:
cd:cf:ec:58:5c:1a:2f:f4:b0:a3:2b:68:67:6f:59:a5:20:ae:
43:65:d5:cf:df:7d:a8:3a:fd:cc:c1:38:ed:48:7b:5c:07:ed:
c9:ea:89:dc:cc:0d:bf:65:db:3c:f1:b0:ea:a6:1f:55:c6:c7:
a5:ca:ca:3c:1d:5a:1e:29:d6:ac:5c:db:41:56:70:63:b4:56:
5d:10:73:be:f7:5d:8d:d4:8f:9f:ee:c8:4a:f1:be:39:fc:5f:
e0:27:ad:95:33:44:8b:74:cf:6c:f9:52:72:5f:2e:1b:00:6b:
1a:e8:ca:6b:47:a9:c4:89:9c:c4:ed:13:9c:df:32:64:31:43:
c8:1c:eb:73:40:01:9d:8e:96:81:30:1b:8b:e5:df:af:2d:37:
ba:c1:0f:18:5a:7e:53:53:18:28:4d:13:02:bc:f3:84:12:90:
6d:71:7f:d9:4d:8c:d6:3f:db:f2:0a:86:37:e5:59:44:95:d4:
68:ed:e3:4b:cc:ae:28:c0:4e:22:9b:30:9b:69:17:ad:f2:7d:
fe:82:c1:01:81:49:2c:2f:8c:0e:85:65:b1:7b:c4:49:37:87:
2b:98:b7:bb:46:c5:94:31:f4:66:95:af:93:e5:7c:42:f9:d4:
82:76:37:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:01:53 2025 by rpki-client