Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
File: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft (raw, json)
Hash identifier: GRT8TCHA7BdEyCuiK5W96HKT1OSGxxuYE73Ho06f58c=
Subject key identifier: 19:5A:8E:43:FD:A1:B6:86:C4:66:70:30:E8:9E:FB:1D:B1:E4:16:88
Authority key identifier: 3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
Certificate issuer: /CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Certificate serial: 01964D7E83DEC0188EB51835DB2C04438D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
Manifest number: 0CF3
Signing time: Sat 19 Apr 2025 10:00:59 +0000
Manifest this update: Sat 19 Apr 2025 10:00:59 +0000
Manifest next update: Sun 20 Apr 2025 10:00:59 +0000
Files and hashes: 1: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl (hash: SN2AXlKdi+67Y/lslLaaaIcutA+4EHL/62yUb39EzFs=)
2: yQbKC99XDhYm8cHYtCzNNvOq7pA.roa (hash: RfdjXnuMOAkekc3w4VyM+j8sngFlhqDHkrg6JoAkaVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:83:de:c0:18:8e:b5:18:35:db:2c:04:43:8d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Validity
Not Before: Apr 19 10:00:59 2025 GMT
Not After : Apr 20 10:00:59 2025 GMT
Subject: CN=195a8e43fda1b686c4667030e89efb1db1e41688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:f2:b4:9f:f5:d7:90:7f:b5:65:b9:b7:06:
ce:ba:8d:62:b2:df:41:fa:dd:95:4b:03:59:85:2e:
a5:3f:97:5e:1b:3d:11:e6:71:ca:21:65:1a:53:e5:
e9:76:d5:fd:eb:87:d5:34:41:57:08:5a:29:62:b5:
bb:e7:a7:64:7a:7b:7c:97:06:0b:9b:52:5e:32:08:
12:65:d6:ab:db:fb:24:34:38:6e:00:c8:66:28:10:
d3:3d:09:51:99:e8:fb:8c:68:e3:f2:e1:63:fa:66:
d8:ea:58:4f:d3:bd:b9:8d:7a:68:61:9b:e4:3e:5c:
92:a7:9f:80:a1:05:95:be:13:0b:a6:4e:d0:d3:be:
41:e0:6d:f0:91:46:db:39:29:27:0a:a8:0a:0b:86:
43:07:77:ec:42:03:47:33:79:78:57:46:50:30:60:
b9:ee:fd:ab:e4:3a:21:88:69:a2:a5:94:15:07:85:
e0:13:59:be:9b:4d:db:cc:c9:a7:93:39:40:11:de:
4f:e7:4d:96:fd:87:7c:ad:9c:08:41:20:e4:6c:0a:
f4:b7:dc:27:0b:e6:81:9b:f1:e8:e5:4c:4d:10:9f:
da:24:e1:c6:d6:54:95:72:fd:6b:1c:71:25:2a:48:
c7:78:f2:e9:8f:96:4b:06:8f:b1:4d:90:34:d1:d6:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5A:8E:43:FD:A1:B6:86:C4:66:70:30:E8:9E:FB:1D:B1:E4:16:88
X509v3 Authority Key Identifier:
keyid:3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:bf:a9:d3:a6:6e:95:ca:c6:7f:0e:bb:c1:a1:c5:e5:92:7e:
4f:fa:84:8d:4e:68:97:1f:2a:27:99:9f:3f:bd:20:f8:4c:8c:
5f:71:0e:0a:36:59:c1:6f:e6:58:e7:c1:e9:48:73:a2:2d:1d:
44:a6:a9:9c:cd:e9:39:9f:b1:22:fc:58:f1:bc:e5:b2:c7:0b:
9e:0c:d4:a0:fa:ee:72:51:4a:19:b1:a3:86:48:a2:0d:ab:7a:
53:44:0a:94:4c:f3:d6:f6:1e:fe:4a:d9:24:14:d4:88:7f:63:
5e:4b:69:aa:ba:72:97:59:c6:40:50:07:ba:67:78:dd:b6:cd:
6a:8c:9f:d0:a5:d7:ab:77:25:44:36:87:68:2a:58:ad:e8:57:
97:fd:00:b9:1c:fa:51:6c:94:96:10:c2:0d:f7:eb:53:a1:07:
35:cd:9a:c9:8c:bd:80:89:ea:dd:fc:41:22:bf:be:e1:a4:bb:
0d:da:f6:b1:df:b0:e3:bf:42:eb:3f:97:bb:63:c4:b6:49:db:
4c:07:ca:03:f9:06:74:f1:ab:c5:fc:1f:76:01:77:cc:95:d2:
90:42:80:3a:3e:1f:20:15:11:1c:e2:6c:cb:5a:4b:9a:62:c9:
02:99:90:f4:e6:43:99:88:ce:7f:9b:fd:51:67:0e:4b:a8:45:
6d:f0:9b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:27:58 2025 by rpki-client