Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: GMZq05EBo0ndZZJCKPhRQofAFZ+xQeVmr4y7Pyk2MyI=
Subject key identifier: 8C:F0:AB:2D:BA:FE:38:6A:8B:67:A3:AC:94:AB:E2:C3:EA:3D:8D:64
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 01964AB3BD3AE7F7FF8F3E4E4B85A38248C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0C3E
Signing time: Fri 18 Apr 2025 21:00:15 +0000
Manifest this update: Fri 18 Apr 2025 21:00:15 +0000
Manifest next update: Sat 19 Apr 2025 21:00:15 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: 8hB8wLfHUcudIif0bQpVbVPfN80uDRXFMUgCJmhGQxo=)
2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:bd:3a:e7:f7:ff:8f:3e:4e:4b:85:a3:82:48:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Apr 18 21:00:15 2025 GMT
Not After : Apr 19 21:00:15 2025 GMT
Subject: CN=8cf0ab2dbafe386a8b67a3ac94abe2c3ea3d8d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f1:da:de:9b:fc:c4:8f:ab:6f:61:e0:ed:2b:
e2:24:d8:3d:b1:a5:56:68:84:a9:c1:4e:63:f2:cb:
4d:d8:78:b3:17:b7:27:27:8b:4a:80:17:2d:1d:7a:
32:ee:11:2c:01:13:1f:48:6a:bc:da:84:c2:f0:4a:
97:56:22:e7:ec:42:32:42:da:7a:7e:fc:8a:25:94:
b5:97:d3:b2:87:bd:cf:13:ce:89:52:e4:e7:01:b2:
f3:11:c0:40:27:f2:d3:5c:ee:68:7e:a8:6e:1e:5b:
c4:bf:60:70:e0:1d:e5:f6:9d:03:7f:e1:22:1f:15:
6f:40:67:f6:bf:c9:0b:7a:b5:ec:cb:75:83:dd:a3:
e2:e0:80:67:01:3b:2e:c2:6e:2d:0b:be:ee:71:36:
d2:af:df:1a:e7:26:ac:99:6e:51:74:48:1b:4a:05:
8b:93:6e:19:11:a7:c1:23:d6:04:70:f0:c7:b6:26:
30:45:1e:5c:e1:47:f8:95:09:18:d7:b3:30:ef:db:
83:d9:d4:4c:76:f1:a4:f1:83:65:ef:7d:9e:e7:f4:
26:33:f1:88:b2:c2:73:1d:98:ff:29:3b:fa:9a:2a:
60:bf:b5:fb:9a:0f:1a:ed:f8:e0:2d:fe:38:8e:1e:
32:74:f2:01:f5:92:22:c0:0a:69:75:80:c2:44:a5:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F0:AB:2D:BA:FE:38:6A:8B:67:A3:AC:94:AB:E2:C3:EA:3D:8D:64
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:aa:d3:78:4c:02:0f:dc:54:0d:51:70:13:32:36:f0:28:e1:
1a:d5:88:25:70:a7:df:20:4b:10:cc:d7:88:06:a7:e8:11:98:
03:3f:65:a4:11:24:85:ec:e5:1c:dd:18:f8:09:5b:8b:d7:f7:
dd:c3:a1:28:19:18:c1:9b:9b:85:9c:9f:b0:f2:86:88:99:ca:
55:c6:df:b1:ba:c6:9d:98:ce:3f:d0:16:ee:c5:98:ea:6d:0c:
4e:06:47:dd:05:b8:1b:cb:1f:8f:fb:d2:9a:fc:44:16:00:cc:
c5:6b:ae:5e:7f:8a:0c:da:a3:a5:aa:2b:13:df:a4:6d:85:01:
4e:11:6c:d3:b3:00:ef:8e:75:c8:a7:fb:fb:51:e4:92:d3:ce:
c2:96:6f:34:7c:20:70:81:2a:8b:67:13:e1:4e:06:a3:5d:1d:
74:3e:4c:84:16:6c:2e:89:af:0f:68:2a:19:96:8b:12:f4:55:
c8:70:85:72:7d:f0:e7:91:34:ea:d7:61:05:9b:e3:23:c5:b3:
c4:58:c0:fa:df:d8:d3:2f:19:1d:97:d9:d5:c6:88:ea:86:90:
7d:1f:10:64:6c:dd:2c:16:7a:39:7a:e5:3f:49:1d:e5:de:4c:
12:54:af:82:cf:62:93:fb:2b:88:d1:f0:d0:cf:b6:d8:76:39:
f5:ff:36:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:12 2025 by rpki-client