Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
File: pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft (raw, json)
Hash identifier: dSfZ+axIIPiKU/0nJYjAkk8cVcvvdRKxkBqNenIGgmc=
Subject key identifier: B3:02:2B:E4:75:51:EE:7B:88:76:9F:58:F9:2F:8F:49:C0:70:ED:E0
Authority key identifier: A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
Certificate issuer: /CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Certificate serial: 01964EC81C3570F1A10BD2767A94DF6CB292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
Manifest number: 132A
Signing time: Sat 19 Apr 2025 16:00:59 +0000
Manifest this update: Sat 19 Apr 2025 16:00:59 +0000
Manifest next update: Sun 20 Apr 2025 16:00:59 +0000
Files and hashes: 1: pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl (hash: SQWJNF9ebdvUH3LxsBM9R6p5aVWgzyElLPZfnerh3ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c8:1c:35:70:f1:a1:0b:d2:76:7a:94:df:6c:b2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Validity
Not Before: Apr 19 16:00:59 2025 GMT
Not After : Apr 20 16:00:59 2025 GMT
Subject: CN=b3022be47551ee7b88769f58f92f8f49c070ede0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:a9:93:76:84:6e:d4:fc:64:7c:c3:34:fa:
be:6e:58:03:9f:9d:c3:df:c9:62:3f:4f:05:6b:99:
32:2f:3a:fb:0d:dc:8f:d6:69:29:ea:77:06:59:c2:
b2:4c:92:8d:09:23:90:d7:de:67:7d:1a:2d:b9:0f:
8c:52:5f:0c:d7:04:ba:73:6f:df:8d:0c:d3:eb:ba:
95:75:cd:93:35:a8:ca:c7:37:13:60:b8:2d:e5:09:
b5:ca:31:d3:a3:5d:de:a1:85:e2:de:cc:ee:07:9f:
8a:89:15:39:d7:64:30:57:ac:cf:46:54:51:5f:b6:
42:37:e2:1b:ca:0f:2a:cd:bd:5d:6e:c3:c8:52:92:
95:2e:bb:57:61:38:22:41:75:3b:16:fc:1d:11:42:
10:36:c2:d6:79:02:f2:0f:c9:4f:d7:ee:52:73:14:
87:d9:94:62:ee:74:7c:de:85:ea:b7:72:db:0c:61:
84:0b:fc:36:13:7c:9f:94:00:7a:d4:6c:76:2a:85:
ba:32:e0:64:e2:08:bd:02:97:00:f8:ed:37:0f:8e:
35:83:eb:5d:31:11:4f:79:4f:ae:ff:d9:89:2d:f8:
2f:a4:6d:31:99:0d:5f:b8:9e:c9:78:f5:b9:03:eb:
fc:0d:7f:03:cc:9b:63:fe:74:62:79:d1:fd:c4:ba:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:2B:E4:75:51:EE:7B:88:76:9F:58:F9:2F:8F:49:C0:70:ED:E0
X509v3 Authority Key Identifier:
keyid:A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:65:b3:65:f2:80:6f:05:d4:d4:fe:5b:24:d1:a6:e9:fc:bc:
8a:b8:22:f1:ea:66:2d:0b:7b:87:91:30:54:c3:b7:fc:5a:ae:
69:cb:fa:7e:11:73:46:67:db:de:ac:49:24:8b:f5:ef:19:ce:
72:c3:df:f1:9f:6b:ac:f6:41:5b:43:fa:c2:83:db:de:e2:3e:
a1:61:e0:9d:d4:28:4f:73:81:21:0f:e4:86:45:a5:25:e4:51:
a2:08:c1:1a:47:9b:ae:e8:ad:bd:67:2f:30:0f:13:b5:d2:54:
05:58:ed:25:15:92:ad:47:64:5e:58:29:3d:b4:38:a3:4c:0c:
80:70:54:e6:26:1f:cd:80:47:82:66:35:1d:8f:33:6d:85:f7:
2b:17:c7:e4:a2:8d:6a:97:dd:38:9c:18:d3:bb:e4:b4:2b:37:
e1:f6:58:7c:83:04:5b:07:9a:ee:0e:f4:df:ce:1a:3d:eb:86:
bc:09:51:46:cb:13:a2:8a:42:ec:1c:6c:d5:61:85:96:d9:e1:
8f:c2:97:83:40:b3:a0:2c:a0:10:3c:e0:02:ee:c3:30:26:86:
53:88:82:f1:17:e4:83:d1:4e:c9:1a:1c:42:f0:76:65:50:4d:
7e:9a:17:4d:d3:e4:f1:a0:f7:68:50:96:a2:f8:a6:01:6a:2d:
28:a3:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:10 2025 by rpki-client