Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier: Awpc262mHNchP6Zeq8GDC6VkMvXZ4V0Z110tw3y/5f4=
Subject key identifier: A4:6C:0A:64:CC:E2:23:94:E1:DB:F6:07:43:C0:C4:9A:43:3F:B8:95
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial: 01964B90A00F00D4D90EEE1225BC4C88A797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number: 14F4
Signing time: Sat 19 Apr 2025 01:01:31 +0000
Manifest this update: Sat 19 Apr 2025 01:01:31 +0000
Manifest next update: Sun 20 Apr 2025 01:01:31 +0000
Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: B5f8YHTkvfwMciuae/qgP42YqjPURKb2laHifN/y4F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:a0:0f:00:d4:d9:0e:ee:12:25:bc:4c:88:a7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Validity
Not Before: Apr 19 01:01:31 2025 GMT
Not After : Apr 20 01:01:31 2025 GMT
Subject: CN=a46c0a64cce22394e1dbf60743c0c49a433fb895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cc:2e:be:9d:13:8c:50:5a:b5:a9:e3:27:e1:
dd:c6:6c:1c:7d:85:de:e7:9f:3f:ed:40:e0:1d:0d:
50:1e:ab:74:b7:80:58:fc:b9:f0:0d:21:55:aa:38:
7a:f9:88:68:3a:6a:1e:e5:e3:0f:a6:59:72:aa:d0:
0d:59:88:21:8b:d8:15:03:2b:38:35:bf:51:01:02:
be:c7:e2:51:f9:fc:59:72:59:8e:2e:5d:fd:75:eb:
65:fe:98:11:fa:5b:86:1f:9d:b8:b1:1f:c1:29:b5:
d5:98:ba:f8:e5:0d:d5:c5:81:46:96:3c:50:4b:a5:
dd:72:8e:87:74:be:b8:6e:6a:e4:87:c8:f7:6f:49:
b1:8a:74:21:76:d6:0d:3e:97:88:75:9a:cb:5f:6f:
cf:76:b4:e2:a4:a9:c6:cc:21:96:2b:3a:36:ed:9d:
90:17:e5:cf:0f:47:71:35:41:67:b9:10:f8:5b:af:
51:48:4e:d7:02:f7:c6:4f:e8:58:d4:d6:12:3e:f7:
78:63:e5:76:d3:09:49:56:22:62:3e:58:a3:88:5a:
27:af:dd:0e:cc:a0:00:9c:d9:64:db:6f:f1:f3:81:
5f:21:59:96:17:0b:32:13:d6:54:67:dd:20:a2:5a:
38:dc:82:fa:bf:47:99:16:f8:a5:2d:6b:7c:b4:bf:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6C:0A:64:CC:E2:23:94:E1:DB:F6:07:43:C0:C4:9A:43:3F:B8:95
X509v3 Authority Key Identifier:
keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ff:b5:f1:85:e0:40:13:dc:22:0c:bf:8b:d1:4f:ad:6b:8d:
d6:78:c7:80:7d:0e:79:55:1d:41:96:1d:95:eb:52:29:41:43:
e1:7f:03:c1:18:5e:23:9c:d2:4d:22:ba:11:bd:71:41:01:07:
35:7f:d4:41:9b:0d:91:16:1d:c5:9f:6e:e0:0d:25:1d:89:5e:
09:a5:c9:5a:c5:5d:ee:b6:c3:4f:6a:78:75:21:69:7e:e8:ac:
86:c1:38:00:92:d3:54:52:ca:98:2e:cd:b8:8a:9c:49:bb:26:
95:83:32:e9:06:8d:16:50:73:1b:0e:94:8d:9f:fc:c0:e9:2f:
27:02:5e:35:f3:cf:65:09:f9:c7:b7:71:e0:d6:ea:86:b2:27:
ee:d2:f5:15:2f:f2:f8:2d:94:07:c2:43:12:52:eb:16:86:8d:
2c:64:15:af:eb:5e:bc:31:4f:cd:c7:ae:15:86:49:00:a1:86:
bc:49:f6:6b:c6:34:a2:95:20:96:92:7d:61:49:d0:83:61:ab:
12:83:75:4b:38:dc:15:83:04:0a:cb:27:c4:d1:bc:61:81:54:
eb:39:a7:b2:a1:22:e9:49:ed:7a:7f:2c:91:9b:fa:da:b4:61:
4f:0c:91:8b:fc:42:10:14:49:c7:3d:9b:27:14:68:1f:e8:84:
14:22:74:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLkKAPANTZDu4SJbxMiKeXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTZlZDMxZjk3ZjM3YzVlNWM1NTA3MzJmODVkMjQ2OTA5
NjJjZWYwHhcNMjUwNDE5MDEwMTMxWhcNMjUwNDIwMDEwMTMxWjAzMTEwLwYDVQQD
EyhhNDZjMGE2NGNjZTIyMzk0ZTFkYmY2MDc0M2MwYzQ5YTQzM2ZiODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8wuvp0TjFBatanjJ+HdxmwcfYXe
558/7UDgHQ1QHqt0t4BY/LnwDSFVqjh6+YhoOmoe5eMPpllyqtANWYghi9gVAys4
Nb9RAQK+x+JR+fxZclmOLl39detl/pgR+luGH524sR/BKbXVmLr45Q3VxYFGljxQ
S6Xdco6HdL64bmrkh8j3b0mxinQhdtYNPpeIdZrLX2/PdrTipKnGzCGWKzo27Z2Q
F+XPD0dxNUFnuRD4W69RSE7XAvfGT+hY1NYSPvd4Y+V20wlJViJiPlijiFonr90O
zKAAnNlk22/x84FfIVmWFwsyE9ZUZ90golo43IL6v0eZFvilLWt8tL+FlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRsCmTM4iOU4dv2B0PAxJpDP7iVMB8GA1UdIwQY
MBaAFD6m7TH5fzfF5cVQcy+F0kaQlizvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODkt
MmU2NzkxNjk0YWViLzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zNWFkYjEtNjdlZC00OTJkLWJhODktMmU2NzkxNjk0YWVi
LzEvUHFidE1mbF9OOFhseFZCekw0WFNScENXTE84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/+18YXg
QBPcIgy/i9FPrWuN1njHgH0OeVUdQZYdletSKUFD4X8DwRheI5zSTSK6Eb1xQQEH
NX/UQZsNkRYdxZ9u4A0lHYleCaXJWsVd7rbDT2p4dSFpfuishsE4AJLTVFLKmC7N
uIqcSbsmlYMy6QaNFlBzGw6UjZ/8wOkvJwJeNfPPZQn5x7dx4NbqhrIn7tL1FS/y
+C2UB8JDElLrFoaNLGQVr+tevDFPzceuFYZJAKGGvEn2a8Y0opUglpJ9YUnQg2Gr
EoN1SzjcFYMECssnxNG8YYFU6zmnsqEi6Unten8skZv62rRhTwyRi/xCEBRJxz2b
JxRoH+iEFCJ09w==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:11:16 2025 by rpki-client