Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: XEQtU2YAqi2DUUpWwnvfhO2syyCw/BfFcJNRVprlzcw=
Subject key identifier: D5:F4:1D:EC:59:EB:EE:4B:12:20:31:B5:07:7E:F3:EF:48:83:29:A5
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 01962CAAF2D0BF66813586883B5E93192655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 01:02:02 +0000
Manifest this update: Sun 13 Apr 2025 01:02:02 +0000
Manifest next update: Mon 14 Apr 2025 01:02:02 +0000
Files and hashes: 1: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: 4m35ZE5p9QEOI9HIJWJZCq3HBTFCmCmVuFWcK963BBQ=)
2: yxseiDrTDKkfKumKkJUQ-S699SM.roa (hash: jMn0qSGQuB1rlWwE3sPg8LRuW4ybf3WJJD6jW2FPlxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:aa:f2:d0:bf:66:81:35:86:88:3b:5e:93:19:26:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Apr 13 01:02:02 2025 GMT
Not After : Apr 14 01:02:02 2025 GMT
Subject: CN=d5f41dec59ebee4b122031b5077ef3ef488329a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:88:d7:35:d0:0a:29:6c:a9:d2:6d:7a:63:
db:91:8f:1b:38:a7:a4:1c:2a:ab:4a:32:00:5a:eb:
52:d8:9f:15:e2:5f:04:7c:10:d4:8b:bc:60:e2:96:
15:ee:e7:66:0a:9f:8e:7d:e2:1b:46:62:c2:87:89:
8f:50:cd:7b:7e:a7:21:30:ff:5d:9c:de:12:4f:22:
28:79:b5:1d:4c:fc:2c:3c:04:5d:63:7d:de:8d:6c:
16:27:29:82:98:f2:b3:2c:e2:1f:8f:da:a6:ea:4a:
aa:6e:be:fe:88:2e:a3:69:e5:63:b4:9c:d5:2d:82:
73:ba:d7:21:c6:47:f6:0b:46:49:30:17:c0:b6:cf:
10:13:9d:fa:dc:00:32:01:e7:52:27:0b:0f:b3:98:
4c:17:15:9f:b7:9a:ad:d5:90:28:5a:73:1e:f6:6c:
8f:d5:24:62:f3:16:42:85:ad:7c:57:6c:12:94:f6:
91:6c:86:c7:be:c6:47:93:cd:53:ac:47:7a:7c:96:
71:f0:d8:99:1c:42:00:d2:fc:6b:66:2b:63:18:ed:
c6:8e:5e:00:42:8c:d1:00:b9:87:c7:69:f1:a3:f2:
b1:a8:60:d7:06:58:b4:02:9b:ee:88:fa:47:aa:9e:
ff:c5:4d:40:4d:8b:d9:a6:fd:43:23:ef:90:7e:4d:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F4:1D:EC:59:EB:EE:4B:12:20:31:B5:07:7E:F3:EF:48:83:29:A5
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1b:9d:e6:30:7e:e0:17:df:14:65:4f:c7:e1:9b:44:fc:e2:
9c:29:51:7f:d0:d8:26:c5:62:4b:fb:b9:ee:75:78:7a:75:31:
be:f1:3f:da:e8:2c:ca:c6:62:2e:a2:1f:ea:ca:56:ba:04:e2:
64:fd:70:16:4d:10:20:1d:10:75:3c:9a:8f:02:1d:ba:ac:5e:
bd:f5:ef:6a:1c:e1:73:7d:18:cf:b2:5b:b2:3d:f9:67:a3:c3:
35:a2:cd:7a:49:75:14:78:9e:a8:fc:67:8e:de:32:7e:25:9e:
dd:06:75:ac:3f:3e:9f:5b:95:27:e8:d1:e5:a6:62:b1:9b:18:
18:a9:d7:f7:7e:c8:59:4b:66:fe:22:27:35:97:68:30:ed:fd:
6a:6e:d4:4a:51:4f:07:7f:3c:61:b5:ce:b7:18:63:e0:88:d8:
e5:ce:46:66:43:e9:bf:86:cc:3a:49:e1:01:52:12:3b:05:1c:
20:34:58:d3:71:c4:96:b9:48:e4:2b:e7:23:72:24:3b:56:9a:
ad:95:21:92:3d:06:5c:24:50:93:ac:ce:ea:18:6d:9a:54:a6:
26:57:51:3c:c8:bb:13:01:0c:d6:fa:74:38:ca:16:27:ad:51:
81:c4:9c:ac:4f:6a:94:73:04:4c:3f:73:bd:86:4b:5a:01:f6:
41:48:07:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:22:28 2025 by rpki-client