Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: 6qB4g8rWly/8Z45u2u/YbMukavVnAk6KIkkrYZvIUBg=
Subject key identifier: 6C:8E:5D:E5:25:05:F8:28:AA:1F:BF:62:1B:08:4E:D4:08:19:2C:51
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019625277E82B840205E3DDD7E0934496D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 0DAB
Signing time: Fri 11 Apr 2025 14:01:07 +0000
Manifest this update: Fri 11 Apr 2025 14:01:07 +0000
Manifest next update: Sat 12 Apr 2025 14:01:07 +0000
Files and hashes: 1: 8e7eehP1l-DLf5STdKJWnoHYbKQ.roa (hash: K8SacJP+Z6piM83BegnBqW6J1m/glPf8EgTcnUYrotM=)
2: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: LbkwxoG4QGVcmYIOj/cbMh54muFVtaNVkFGrBo9UF08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:27:7e:82:b8:40:20:5e:3d:dd:7e:09:34:49:6d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Apr 11 14:01:07 2025 GMT
Not After : Apr 12 14:01:07 2025 GMT
Subject: CN=6c8e5de52505f828aa1fbf621b084ed408192c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:d6:a8:48:33:bf:0e:a9:cf:98:02:b8:3f:
94:1b:06:1e:f3:a7:7d:01:b9:bf:a3:c0:78:17:46:
86:56:f4:c7:9e:44:89:d2:3a:ee:a4:fa:69:f8:ee:
2a:f4:73:49:40:b5:89:47:88:16:30:a2:be:b5:bb:
1d:a5:80:ae:0b:d6:7b:96:7c:28:7f:a4:6c:a2:27:
7e:70:92:de:c7:a2:3f:21:d2:34:f0:8f:27:d4:c5:
bb:e8:3e:dd:53:1b:09:58:31:e5:96:1c:65:6d:9f:
3f:03:05:89:64:dc:ef:d2:be:78:31:0b:28:4b:64:
7d:ab:5c:77:49:54:c9:3d:36:b6:68:27:c3:b7:b5:
c0:f7:92:ec:bb:f4:e8:7b:3d:c0:39:67:d5:dd:a9:
1c:08:38:7a:8e:32:83:23:f3:60:37:c9:82:27:95:
52:0a:20:28:6d:5e:98:17:a8:04:60:ff:d2:ea:a9:
c7:e7:fc:a7:4b:14:9e:aa:11:11:26:ed:28:cd:61:
fd:a5:d3:36:db:af:d2:bb:90:9c:b3:c1:06:34:4f:
f4:f6:e0:62:ea:f6:1b:b6:5d:d1:07:8b:40:a5:b3:
49:e7:a2:8f:d2:94:b9:19:9c:75:d2:a7:c0:62:db:
f5:5a:10:41:27:33:76:26:c7:c3:0e:55:d1:8c:2a:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8E:5D:E5:25:05:F8:28:AA:1F:BF:62:1B:08:4E:D4:08:19:2C:51
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ba:3d:25:c5:0e:85:1c:3d:62:35:1b:ec:0f:28:f2:74:98:
71:19:3c:1a:d6:da:65:82:3e:61:3f:a2:e9:83:b8:a8:d2:c7:
c2:79:48:0a:20:46:6d:13:1b:d1:9e:25:45:5f:10:59:72:7a:
1e:dd:7e:2c:5e:de:8a:07:e2:a4:6e:ef:fa:fa:7f:d2:8b:a8:
9b:c7:b6:51:56:c0:e4:7a:ed:1b:10:1f:45:a7:c2:29:86:24:
46:2e:b7:b8:7b:e1:56:19:6d:c8:73:43:fc:de:97:6c:72:66:
1e:02:1b:71:49:d0:a0:c9:15:3b:3d:f6:38:66:a6:c1:cd:8b:
11:ec:db:81:f4:4e:ff:ce:e4:4e:95:e8:3f:3c:7b:3e:4b:ed:
51:60:89:64:8d:04:bb:07:cb:56:7e:3d:b8:fe:ab:3e:b0:01:
85:35:9f:2f:e6:54:b1:4a:47:e6:8a:dc:a9:81:16:c9:0d:c6:
a8:c7:ed:ab:a1:e7:a8:5e:b4:49:95:76:2d:2d:30:02:03:23:
51:2a:30:b3:fe:5f:8c:a8:f5:c9:9e:0e:eb:44:f8:a4:54:95:
75:3b:c9:4f:1d:66:1f:42:19:f0:a7:63:83:7f:4c:dc:fa:07:
c9:7c:f7:0e:e4:d1:e1:4a:53:be:5f:67:15:4a:96:81:e1:3a:
71:8a:74:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:01:00 2025 by rpki-client