Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft (raw, json)
Hash identifier: ycLD6nKRxsfRCNe7/Owib9Lsgk6cY2qWkpGxs8e9/Gs=
Subject key identifier: 74:7B:3F:A4:5A:54:E2:12:EE:EC:13:09:FD:F0:EE:A0:75:97:B9:03
Authority key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Certificate issuer: /CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Certificate serial: 0196290480376E6909F271DD23CB7AB7C15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
Manifest number: 1479
Signing time: Sat 12 Apr 2025 08:01:22 +0000
Manifest this update: Sat 12 Apr 2025 08:01:22 +0000
Manifest next update: Sun 13 Apr 2025 08:01:22 +0000
Files and hashes: 1: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl (hash: OQFtawQ7nS/QfrcE4wx9HSW2+1AMlpn22rv7AQDDm4Q=)
2: itPEMbOZFFR8e5L5AvpBnlFEedQ.roa (hash: pIQ9iWRr1eE7BBGNob9EZxPiOkZPJVC3FeL7vrrHIjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:04:80:37:6e:69:09:f2:71:dd:23:cb:7a:b7:c1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Validity
Not Before: Apr 12 08:01:22 2025 GMT
Not After : Apr 13 08:01:22 2025 GMT
Subject: CN=747b3fa45a54e212eeec1309fdf0eea07597b903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:e5:e4:58:e2:64:3f:01:1b:ad:9d:b7:e6:
79:5a:9b:43:4f:53:07:86:a7:bf:16:8a:b8:3a:7c:
68:93:f5:1e:c4:8e:f8:22:d9:ac:3b:a1:12:9d:c6:
1f:a8:d2:ff:09:cd:6d:bc:6f:6a:84:3c:b4:9e:36:
90:24:dd:47:db:76:47:4a:4b:81:ca:3f:e5:25:18:
cb:55:29:8c:2b:c4:c4:44:0a:14:8d:b2:5d:e7:30:
db:08:c9:85:bd:ea:28:27:fd:04:e0:8d:b0:96:71:
e6:65:06:65:b7:84:ee:25:6d:08:ff:70:c8:f1:ac:
29:30:77:fc:94:aa:c2:57:29:08:db:8a:b7:73:7e:
c7:51:8a:7d:a6:72:b1:37:c4:e2:cb:1e:58:8c:c3:
1a:cf:93:f7:04:cb:7e:d9:40:dd:bc:11:6f:a1:10:
24:49:63:fd:f5:0e:94:8e:56:6b:88:78:2a:c7:23:
42:bf:d3:46:09:04:50:9b:72:a7:5e:e9:f8:31:69:
f7:2e:7d:2a:37:1a:99:dd:3b:91:d7:0e:0c:8b:ad:
c3:40:a5:bd:06:07:fd:3f:92:ed:df:f4:8b:3e:d3:
2a:e9:b3:53:10:be:9e:4a:71:97:47:a5:74:41:ec:
00:58:71:80:7c:bb:e7:96:be:f9:47:f0:ca:e0:51:
d0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7B:3F:A4:5A:54:E2:12:EE:EC:13:09:FD:F0:EE:A0:75:97:B9:03
X509v3 Authority Key Identifier:
keyid:3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:69:82:e2:38:5a:d1:dd:22:e5:94:35:d4:35:39:11:b3:a6:
df:e2:3e:84:ae:ad:d5:82:72:e8:2b:7d:ad:0f:d2:cd:c4:30:
bb:6d:76:a3:16:03:3f:eb:b8:1d:5f:f7:d8:4d:42:53:2f:ed:
c1:df:98:24:44:e7:a5:0e:17:34:e6:f8:01:17:fe:3c:a5:ef:
45:bc:cf:55:14:ba:bf:1c:0a:20:99:71:a9:cd:ae:63:d7:ca:
36:04:46:77:10:2a:28:79:30:10:68:3d:76:58:fa:87:35:e0:
c5:f6:36:7d:20:14:8a:6f:fd:08:34:2f:d1:d0:c1:50:ae:72:
7e:09:6a:9d:7c:6b:6c:c9:22:9e:a3:19:f8:df:a9:0f:7b:ab:
74:c2:50:44:7a:37:28:44:cf:ca:ef:35:50:c6:5d:45:c1:8d:
f9:12:ef:5c:e6:93:cf:b5:c6:88:6c:49:95:89:73:b1:70:dd:
f7:be:22:ba:4f:31:d9:a1:8c:11:0e:2a:bf:64:82:cd:ed:18:
0c:ea:3c:d8:f9:74:38:29:b7:f1:7c:e8:7e:42:de:ef:f3:84:
92:e7:47:73:16:56:a4:39:af:aa:43:ad:00:2a:53:87:08:8d:
54:93:4a:1a:c7:15:96:96:b3:0a:20:c7:a0:6c:47:65:8f:77:
c3:c9:37:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYpBIA3bmkJ8nHdI8t6t8FcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzQxMGUzZjA5YmVhNmFiYzlkZDhjNmZmNDE4NTY1MWIw
YWI4NjcwHhcNMjUwNDEyMDgwMTIyWhcNMjUwNDEzMDgwMTIyWjAzMTEwLwYDVQQD
Eyg3NDdiM2ZhNDVhNTRlMjEyZWVlYzEzMDlmZGYwZWVhMDc1OTdiOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ/l5FjiZD8BG62dt+Z5WptDT1MH
hqe/Foq4Onxok/UexI74ItmsO6ESncYfqNL/Cc1tvG9qhDy0njaQJN1H23ZHSkuB
yj/lJRjLVSmMK8TERAoUjbJd5zDbCMmFveooJ/0E4I2wlnHmZQZlt4TuJW0I/3DI
8awpMHf8lKrCVykI24q3c37HUYp9pnKxN8Tiyx5YjMMaz5P3BMt+2UDdvBFvoRAk
SWP99Q6UjlZriHgqxyNCv9NGCQRQm3KnXun4MWn3Ln0qNxqZ3TuR1w4Mi63DQKW9
Bgf9P5Lt3/SLPtMq6bNTEL6eSnGXR6V0QewAWHGAfLvnlr75R/DK4FHQEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHR7P6RaVOIS7uwTCf3w7qB1l7kDMB8GA1UdIwQY
MBaAFD3EEOPwm+pqvJ3Yxv9BhWUbCrhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wNDI5NTEtNTRkOC00NjljLWJiYTEt
YTY1NDZjZDlkYTk0LzEvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wNDI5NTEtNTRkOC00NjljLWJiYTEtYTY1NDZjZDlkYTk0
LzEvUGNRUTRfQ2I2bXE4bmRqR18wR0ZaUnNLdUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2mC4jha
0d0i5ZQ11DU5EbOm3+I+hK6t1YJy6Ct9rQ/SzcQwu212oxYDP+u4HV/32E1CUy/t
wd+YJETnpQ4XNOb4ARf+PKXvRbzPVRS6vxwKIJlxqc2uY9fKNgRGdxAqKHkwEGg9
dlj6hzXgxfY2fSAUim/9CDQv0dDBUK5yfglqnXxrbMkinqMZ+N+pD3urdMJQRHo3
KETPyu81UMZdRcGN+RLvXOaTz7XGiGxJlYlzsXDd974iuk8x2aGMEQ4qv2SCze0Y
DOo82Pl0OCm38XzofkLe7/OEkudHcxZWpDmvqkOtACpThwiNVJNKGscVlpazCiDH
oGxHZY93w8k3eg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:29:53 2025 by rpki-client