Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier: DZwHbUrVvJBPNZ7k9u0tizI9ZEDOj8NE/YE4Fy+c8Nw=
Subject key identifier: 0F:66:30:77:C4:D6:C5:F3:D0:29:62:6F:63:12:CB:02:DB:40:83:8A
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial: 01965A94A7144A594DAC9DC4E27F7C14E33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number: 0390
Signing time: Mon 21 Apr 2025 23:00:13 +0000
Manifest this update: Mon 21 Apr 2025 23:00:13 +0000
Manifest next update: Tue 22 Apr 2025 23:00:13 +0000
Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: giHDSqQIJ0ScqeX9JK3W2xHtU81KBivGG54gqO3ZtxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:a7:14:4a:59:4d:ac:9d:c4:e2:7f:7c:14:e3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Validity
Not Before: Apr 21 23:00:13 2025 GMT
Not After : Apr 22 23:00:13 2025 GMT
Subject: CN=0f663077c4d6c5f3d029626f6312cb02db40838a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3b:a3:b6:42:57:79:05:2d:30:91:59:ac:8c:
47:0e:43:87:f2:08:eb:d3:2d:48:42:06:49:ae:ae:
80:33:5a:6d:75:c2:fd:10:2b:0a:4b:95:73:33:a4:
f3:9b:89:d5:53:9a:b4:0a:be:48:cd:2e:1c:a1:32:
e4:3c:24:b9:95:58:ca:aa:23:9b:12:db:2d:16:bb:
d7:92:0b:7c:97:e9:71:bd:e8:56:3c:ef:a4:3d:41:
11:1f:f5:84:40:5d:97:e3:4c:67:f4:c8:b0:69:f0:
a2:dd:af:35:a7:43:e7:fd:fb:85:3c:dd:34:93:d4:
d3:bc:73:db:97:b6:e9:b6:04:78:24:de:d6:4b:e2:
64:38:a3:06:79:84:b3:6d:9b:35:e1:fb:7a:40:8a:
74:1c:df:73:a5:66:55:ab:57:aa:1b:58:4a:68:30:
5c:56:b9:50:64:e4:ad:57:b7:25:9d:ec:6a:c3:17:
d7:dd:50:93:73:af:c1:0f:15:fa:41:77:04:aa:44:
0e:57:3e:fc:3d:3a:67:4c:6a:63:f3:24:ce:42:0e:
94:5f:fa:d7:92:08:b7:7b:88:5c:05:9a:fe:28:c8:
61:33:f5:ca:26:d0:4f:ce:be:3f:5d:92:5b:93:76:
a4:60:f8:2a:e9:7e:8e:3e:4e:c4:a4:a8:61:95:d4:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:66:30:77:C4:D6:C5:F3:D0:29:62:6F:63:12:CB:02:DB:40:83:8A
X509v3 Authority Key Identifier:
keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:da:7a:ac:7e:f7:8d:cb:84:33:5e:cb:5b:c9:9c:a7:a3:04:
06:a6:d1:31:f9:6d:49:c7:0f:55:a2:ea:30:7d:5b:52:db:47:
c9:d8:15:c7:0f:92:fb:8a:8e:d9:62:9c:21:2a:ab:34:f3:68:
c8:3d:c4:b8:32:b9:25:5a:7f:1c:f0:22:7b:8e:7c:65:fa:6b:
c5:7c:b1:42:f3:0e:ea:f8:9e:34:97:4a:a0:cf:a4:49:99:ea:
35:3c:2c:1b:a9:c3:db:74:ec:2f:42:d1:de:68:78:db:7b:ed:
1e:03:93:1c:fd:18:ee:66:40:8e:26:23:18:52:60:7f:f5:ec:
c0:68:61:24:8b:13:f8:6b:b0:a8:28:8a:56:4f:7f:04:3d:8e:
62:53:0d:d2:6c:41:43:18:18:ac:0a:0e:c0:05:bc:bf:a0:b2:
1b:80:05:52:31:e2:38:c7:3c:13:ee:b5:56:ad:4e:21:77:7d:
a5:4e:79:b3:6f:5d:95:a3:37:ce:41:4f:bc:3b:4f:a3:0e:be:
80:ce:12:11:72:af:3f:08:7c:28:8c:0e:b1:eb:58:25:9a:75:
ad:9c:92:ea:a0:9a:3e:bb:22:52:5a:af:9d:04:ac:e5:20:f4:
be:7b:2f:44:a7:d7:8f:45:d7:99:a1:02:6e:36:45:e5:81:25:
44:5f:da:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:05:00 2025 by rpki-client