Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
File: PbZurh7_N8XOflhyiwFuSR2sJqo.mft (raw, json)
Hash identifier: mwEVvX2xQEeNUKcl3Vynn34VjbZAiiVR2s39ET4XbTo=
Subject key identifier: F5:3B:B0:AD:A7:CD:83:CB:F8:F6:C7:F8:83:CC:37:C6:7A:B9:62:7A
Authority key identifier: 3D:B6:6E:AE:1E:FF:37:C5:CE:7E:58:72:8B:01:6E:49:1D:AC:26:AA
Certificate issuer: /CN=3db66eae1eff37c5ce7e58728b016e491dac26aa
Certificate serial: 019657262A82B337A54CBB9D91EDC41CCBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbZurh7_N8XOflhyiwFuSR2sJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
Manifest number: 0942
Signing time: Mon 21 Apr 2025 07:00:40 +0000
Manifest this update: Mon 21 Apr 2025 07:00:40 +0000
Manifest next update: Tue 22 Apr 2025 07:00:40 +0000
Files and hashes: 1: PbZurh7_N8XOflhyiwFuSR2sJqo.crl (hash: 3DtieK498CQtUqMLCBgiL4NP1dkpnE6FySKzXsvcQ+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbZurh7_N8XOflhyiwFuSR2sJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:2a:82:b3:37:a5:4c:bb:9d:91:ed:c4:1c:cb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db66eae1eff37c5ce7e58728b016e491dac26aa
Validity
Not Before: Apr 21 07:00:40 2025 GMT
Not After : Apr 22 07:00:40 2025 GMT
Subject: CN=f53bb0ada7cd83cbf8f6c7f883cc37c67ab9627a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:f2:06:72:4c:c5:1d:41:ec:de:fd:26:ad:
ba:75:50:58:f5:11:36:ad:ce:a7:86:cc:32:66:7d:
17:42:d4:c5:3f:04:42:35:ec:e4:37:5f:fd:09:ea:
2b:cc:4f:fd:5a:94:a1:6f:be:0e:e8:cb:9c:d0:71:
52:97:00:eb:5c:9d:07:3f:c3:2c:ff:27:d4:15:7a:
b5:71:7d:15:ab:40:52:17:ce:f8:44:2b:41:ea:d6:
ce:96:12:36:5a:39:fd:a5:8f:bb:25:91:7c:2a:53:
dc:34:33:0d:48:d3:31:1e:91:a6:33:05:6e:46:ec:
8c:07:4e:1f:71:e2:12:c0:f8:a3:e6:43:5e:0d:c4:
8a:f1:4a:85:f8:6e:f3:16:8c:f7:76:8b:58:73:df:
f9:27:ac:0c:08:c3:da:9b:a6:18:c2:86:03:ca:e2:
f9:cb:f4:23:5e:ce:78:e1:26:dc:44:b6:78:34:31:
e3:cb:24:1e:7e:25:9b:ec:b3:02:2c:49:6b:2b:dd:
b0:27:21:0f:3e:06:5c:62:bc:50:3d:14:7c:e4:7e:
95:1a:9f:65:a7:34:a9:8e:85:7f:e6:f1:d0:39:28:
5b:ef:a0:ad:09:1d:3b:db:e3:a1:36:9b:69:26:de:
ad:a5:07:06:a4:c9:13:f8:80:d4:72:f6:70:44:94:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3B:B0:AD:A7:CD:83:CB:F8:F6:C7:F8:83:CC:37:C6:7A:B9:62:7A
X509v3 Authority Key Identifier:
keyid:3D:B6:6E:AE:1E:FF:37:C5:CE:7E:58:72:8B:01:6E:49:1D:AC:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbZurh7_N8XOflhyiwFuSR2sJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6e:87:3e:b4:f6:82:08:7f:3a:ac:4d:0b:e5:c5:6c:31:0f:
0f:d7:0f:06:e5:21:a6:1e:96:cb:5e:57:04:41:92:81:1a:e4:
c8:79:30:80:4a:2e:b0:20:70:ac:b1:f9:27:47:b3:9a:4f:0b:
4e:41:83:7e:fb:5d:5a:e4:b1:e8:86:3a:d7:2c:bb:09:10:29:
8f:73:44:6b:31:3e:2b:f2:4b:3a:3d:44:ed:6b:8f:d5:5f:b1:
58:47:c1:9c:11:a4:81:ee:e9:dc:e0:f9:a9:50:f2:5c:a5:07:
9b:39:f4:ba:c4:b3:eb:84:78:14:6f:ad:1e:68:84:8c:8f:0b:
cf:86:07:9e:d0:54:5c:00:96:e8:72:f8:c1:71:74:96:1b:51:
d7:0e:65:f6:55:4d:2b:dc:3d:33:96:4a:f7:0f:31:44:7d:34:
02:bd:87:7b:ae:6a:80:10:26:7f:62:65:48:f1:32:62:4e:bf:
b2:10:74:5a:88:0e:03:4b:9f:c3:27:46:74:6e:29:44:45:51:
40:de:18:80:50:b4:5a:34:e9:4a:fe:fa:32:27:6d:08:5d:c4:
3a:93:ff:1b:8b:e2:da:1b:46:47:d2:eb:a5:a6:08:aa:d8:36:
cf:ba:57:0d:4b:97:1b:29:3f:0e:51:d6:4b:d3:e6:63:9d:cc:
33:44:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:59 2025 by rpki-client