Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
File: PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json)
Hash identifier: jSniQXDOSK6OT1oQJfY3/uw7+EWoXykm0aYvBCOmlyg=
Subject key identifier: 09:F9:D3:16:A7:69:98:82:AB:91:56:C7:53:8E:2B:BD:DE:19:4E:D3
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Certificate issuer: /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial: 0196B33402DB5F2AC9BFC3FDE1DDD4CB98D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
Manifest number: 0971
Signing time: Fri 09 May 2025 04:00:52 +0000
Manifest this update: Fri 09 May 2025 04:00:52 +0000
Manifest next update: Sat 10 May 2025 04:00:52 +0000
Files and hashes: 1: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: l3weQKMrfQ+7sWLOgvMAvJ4Lsrmqk75Qvl8T5HyCXSQ=)
2: flDyEgY09JcTncHiiRnZ44dc3Jg.roa (hash: U/d1Btmo0ndLftNS6W3aEjJNMxknGgzWNSoSOFVtfm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:34:02:db:5f:2a:c9:bf:c3:fd:e1:dd:d4:cb:98:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
Validity
Not Before: May 9 04:00:52 2025 GMT
Not After : May 10 04:00:52 2025 GMT
Subject: CN=09f9d316a7699882ab9156c7538e2bbdde194ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:71:31:70:18:f1:ef:96:69:fd:12:26:67:
7e:b7:98:2e:bc:f8:3e:78:62:7d:99:fe:6e:af:4f:
d6:b1:38:f8:dc:be:11:93:30:aa:64:29:64:db:24:
58:19:5d:5e:9e:27:dd:60:5c:9b:24:a4:16:e2:ef:
14:8f:e2:a3:05:92:c5:de:dc:aa:47:8f:98:7e:7b:
11:5a:a7:69:ed:89:97:89:fb:b4:8a:da:be:40:89:
72:c1:01:f0:65:cd:66:f6:84:68:7d:03:45:c1:94:
86:7f:7c:33:23:27:2a:5e:43:44:e2:32:8c:b5:58:
d0:7c:8b:6c:00:25:07:a3:f7:4c:e3:3f:90:d3:3a:
d3:bd:30:54:e4:18:94:18:ac:e9:c4:10:00:cc:97:
78:a3:16:d2:4e:de:0b:5c:82:9b:5c:88:e1:df:ba:
04:88:15:d5:e3:36:57:2e:4e:4f:a6:f3:db:38:1d:
17:07:ee:67:fc:82:52:e6:06:f2:7c:a8:23:e7:40:
78:1d:36:6c:46:19:0f:7d:c1:6e:13:85:ff:6e:3f:
fd:52:ff:c4:b1:64:62:04:5d:0c:5a:40:c8:e9:01:
29:ff:d9:d2:e2:70:ab:06:13:44:c5:52:fe:9d:7a:
56:02:86:f3:d6:5f:98:a4:83:cf:dd:34:6e:e4:79:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F9:D3:16:A7:69:98:82:AB:91:56:C7:53:8E:2B:BD:DE:19:4E:D3
X509v3 Authority Key Identifier:
keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8d:28:f8:33:89:b8:e6:af:8c:bb:94:b6:db:c3:1f:e0:48:
54:6b:15:15:51:05:88:da:eb:21:04:18:4e:55:1f:e4:d7:3f:
8b:4b:91:8d:dc:ac:11:11:79:e4:c0:4d:7a:44:49:fa:53:d4:
7c:a2:cd:68:17:ab:b4:41:7d:1f:80:f9:6c:93:7a:3b:0d:72:
fd:2d:d4:e1:07:3c:8f:a2:6e:35:ff:9e:63:82:57:d8:92:c0:
63:00:03:ed:39:4d:93:90:56:86:a5:d4:23:1a:8c:52:cf:d4:
c5:32:52:91:54:23:9a:e6:3b:f4:9d:83:44:31:ff:00:b8:42:
f5:b4:57:c2:ae:06:b5:a8:22:2d:b1:38:c3:83:f3:26:6e:ba:
41:22:01:01:02:a6:79:55:d4:b0:1e:71:64:7b:42:d4:c4:91:
a3:c3:c8:cc:1a:b4:3b:c5:38:37:8c:da:85:7b:3e:a2:00:48:
43:3f:7e:c5:fe:7d:91:ba:18:2d:f9:1b:cd:ba:1a:5c:bb:a8:
4c:84:b2:6b:2e:d4:43:9b:dd:b4:42:f7:13:d5:dd:04:1f:25:
f7:cd:cd:55:8d:fe:21:59:cd:40:60:df:82:7e:89:69:ff:a6:
3b:22:62:7a:14:5f:c9:5f:ff:7f:5c:b6:37:df:5a:93:f9:5a:
28:73:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:26:18 2025 by rpki-client