Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
File: PJUbD8U6RlditFJfyY3_AskMHpc.mft (raw, json)
Hash identifier: OCEHDCsjoqqGiP8yaqfNNfMmrnXpxAgKAkuVvu2YV7k=
Subject key identifier: 59:CD:2A:5D:00:11:B1:10:17:34:5E:4C:EF:82:DD:DD:29:DD:D4:AB
Authority key identifier: 3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97
Certificate issuer: /CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
Certificate serial: 019659823D72609D1C705C9C13F16FE491D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
Manifest number: 0B8E
Signing time: Mon 21 Apr 2025 18:00:29 +0000
Manifest this update: Mon 21 Apr 2025 18:00:29 +0000
Manifest next update: Tue 22 Apr 2025 18:00:29 +0000
Files and hashes: 1: PJUbD8U6RlditFJfyY3_AskMHpc.crl (hash: FBdY7gOmxN7I3D7dn6w7MHWfWH3G4rsNHkTtxfObSPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:3d:72:60:9d:1c:70:5c:9c:13:f1:6f:e4:91:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
Validity
Not Before: Apr 21 18:00:29 2025 GMT
Not After : Apr 22 18:00:29 2025 GMT
Subject: CN=59cd2a5d0011b11017345e4cef82dddd29ddd4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:72:b8:6d:e0:df:2b:a9:ea:74:48:1e:68:8f:
8b:fb:cf:f6:f4:84:af:7d:77:c5:f9:ef:0f:5a:88:
ed:23:57:e2:c9:49:09:dd:15:8d:47:51:e5:bb:9b:
1f:86:0a:ab:4c:1c:c4:35:62:89:ad:6b:f3:15:d8:
51:ad:bb:7d:48:f0:d8:75:e8:31:97:b5:57:7c:76:
6c:51:e2:56:b9:37:c2:fc:f4:2f:da:1a:48:37:93:
ca:23:f1:f6:27:62:9b:4a:40:d4:5a:d6:84:16:3e:
d2:59:b6:08:20:d0:b7:ec:94:45:68:01:35:36:43:
8a:2f:3d:8a:11:84:93:14:0c:02:27:70:66:47:5b:
96:39:9a:2a:85:af:64:73:81:98:9c:16:67:75:7d:
7f:85:fd:f6:ac:ab:ec:e6:20:c0:d2:a5:80:2d:89:
74:82:13:83:1b:42:0b:81:9c:98:08:a9:86:78:11:
b4:6f:6e:ea:2a:3f:66:94:3b:69:71:75:c4:c5:16:
24:eb:c4:bc:18:05:e2:44:28:13:31:86:19:c6:20:
d2:0b:85:07:7f:1e:09:ea:3c:53:2f:ad:5b:3c:17:
bb:53:36:66:11:42:e4:21:56:b4:31:5a:63:89:9d:
49:90:5c:fc:a8:30:f2:33:37:3d:b2:ad:6f:c8:c7:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CD:2A:5D:00:11:B1:10:17:34:5E:4C:EF:82:DD:DD:29:DD:D4:AB
X509v3 Authority Key Identifier:
keyid:3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1f:a1:5e:10:b1:77:93:f2:21:e1:47:22:e9:34:37:63:1e:
1b:8c:ed:78:36:7e:65:f6:c1:41:aa:54:e7:a0:1c:3a:51:f3:
3a:1f:85:57:82:de:1e:0b:19:18:16:0c:f3:b5:28:6b:68:99:
ba:10:87:2b:f4:86:86:2f:2c:99:7b:24:df:85:37:dc:87:6f:
b7:f3:eb:dd:95:f7:b6:06:68:18:a7:af:fd:1c:e0:02:34:73:
16:39:25:6c:36:a1:dd:4d:f5:f1:1f:43:01:73:44:3f:8a:b6:
61:dd:a6:ea:73:9a:22:43:89:b5:0e:6d:d8:29:02:e1:4d:b1:
14:f4:4d:a2:f4:38:f7:cf:cb:56:f7:f5:6a:c1:2d:bf:6c:b8:
bc:7c:24:58:03:47:b2:11:2c:3d:cc:f7:11:57:85:8a:7b:c6:
b8:77:39:38:5e:24:c9:36:b2:95:ce:73:fe:e5:9c:f3:37:81:
30:95:c8:12:2a:d9:30:4a:5a:17:f5:0f:20:fc:2e:dd:8f:8b:
ac:f6:fd:6f:fc:24:aa:1f:fc:a8:b9:bd:91:e4:86:f3:a8:d1:
4c:ad:7b:a6:f1:9d:6e:7b:18:ca:c1:a2:63:48:47:0c:e4:67:
f5:73:cc:37:17:66:98:af:89:c5:47:fb:02:53:df:36:24:39:
2b:97:d0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:29:21 2025 by rpki-client