Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: bncbPSPUDb35uNJKg5j16lyP0tRvtkgVLaINC2YX9ys=
Subject key identifier: 71:54:7C:D2:13:43:BC:D3:6D:8D:90:29:CB:A1:55:DF:D4:AC:73:B8
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 01958F2A8A99E23DE8B68F057843B6495A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 0708
Signing time: Thu 13 Mar 2025 11:01:24 +0000
Manifest this update: Thu 13 Mar 2025 11:01:24 +0000
Manifest next update: Fri 14 Mar 2025 11:01:24 +0000
Files and hashes: 1: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: gwOJR6ggtAmMl8mzerA72twiJFvQeHnNfdg6q+iiS7o=)
2: vDazkPOiPtoCYetZfRX-qpQ69j8.roa (hash: B0GK+5WaWwtXf0DhRaPxfP/Ak+Di2Wr89zC0Jym0UK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:8a:99:e2:3d:e8:b6:8f:05:78:43:b6:49:5a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Mar 13 11:01:24 2025 GMT
Not After : Mar 14 11:01:24 2025 GMT
Subject: CN=71547cd21343bcd36d8d9029cba155dfd4ac73b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:aa:cc:67:18:cd:e6:13:f4:c5:77:18:0b:
a0:f3:bb:e6:dc:08:45:f7:c5:bd:32:82:79:43:43:
d9:b4:9c:0a:b3:b6:8b:1f:01:c2:0d:7b:d8:ab:66:
c2:86:f7:5a:d4:87:15:50:54:c8:01:2e:e9:4c:c0:
ea:ac:00:45:ce:dc:dc:ed:11:6a:fa:11:c4:47:b3:
2b:8d:b6:74:ce:a4:41:1d:39:46:30:35:86:f0:12:
2c:90:e5:b1:a2:3f:67:bd:8e:77:9c:4e:45:88:bf:
0d:9e:0c:e1:22:a7:8e:ec:00:3b:35:aa:74:56:bf:
7a:f1:0b:e0:68:98:d0:29:68:f9:a9:09:90:11:ff:
1f:9c:da:05:a1:a3:51:77:3d:17:9c:4f:0e:b4:c2:
8f:03:25:17:b8:e6:67:b7:a1:b1:a5:3b:13:2f:67:
a5:e8:be:e3:ee:24:4d:bf:72:2b:68:90:62:04:49:
32:c4:c7:86:89:b3:8e:f1:ec:f5:dc:37:d1:d8:04:
37:5d:f1:84:f1:d2:a9:aa:16:28:e8:30:7c:f0:13:
d0:66:b8:b8:09:6d:ce:03:4f:37:ad:9c:b6:31:58:
00:e8:44:bd:f9:99:6e:7e:11:6f:aa:9d:03:ff:20:
3a:0e:f7:d7:38:ea:3e:22:a7:e3:da:64:6f:ef:db:
99:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:54:7C:D2:13:43:BC:D3:6D:8D:90:29:CB:A1:55:DF:D4:AC:73:B8
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:78:77:e8:57:11:98:56:a8:cd:db:1a:fd:9f:f9:66:02:3a:
7f:24:cb:63:b2:cb:8e:e2:57:ad:7d:a0:a9:5c:2c:17:cb:1f:
d1:c2:02:8b:b2:d2:0f:9c:31:83:72:98:44:c2:2a:fe:d0:67:
c3:1a:e3:ab:df:2c:7c:eb:08:36:c7:ae:f2:2a:fb:cc:a4:b4:
53:e6:5b:22:89:57:75:5f:b4:b1:70:77:05:38:19:5c:60:e9:
25:4d:f6:73:37:ac:5d:e1:7e:41:b1:76:77:f3:85:a8:57:51:
4f:5f:3e:5d:ea:be:e9:d8:52:6a:9f:b2:56:d7:86:42:e9:de:
2a:0c:e8:24:e9:0e:dc:9c:9d:16:2a:e8:3d:6a:04:a4:1f:a7:
b9:b4:5b:b9:9e:b0:4c:47:07:0f:a4:3e:f5:26:b5:34:95:c5:
f9:b5:78:c1:d8:62:74:39:4b:be:df:02:ea:88:c4:24:c8:c5:
99:27:13:37:48:e9:59:7f:83:e2:59:f9:6c:5d:42:a9:9a:ea:
ea:19:1a:1e:53:87:f1:c0:4d:64:aa:f1:5f:af:e6:04:7d:78:
33:35:d3:45:a3:43:da:c3:bc:00:5a:c8:3d:64:2b:d4:ce:b8:
a3:4f:17:f0:45:24:c4:37:9d:bd:a0:12:2d:ae:88:fc:51:f8:
e2:2f:59:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPKoqZ4j3oto8FeEO2SVozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzE1NmFiZWU2YmEyMzhiOTA3MzE1ZGY5YzU1Mjg2NWFk
Y2RhZTgwHhcNMjUwMzEzMTEwMTI0WhcNMjUwMzE0MTEwMTI0WjAzMTEwLwYDVQQD
Eyg3MTU0N2NkMjEzNDNiY2QzNmQ4ZDkwMjljYmExNTVkZmQ0YWM3M2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFqqzGcYzeYT9MV3GAug87vm3AhF
98W9MoJ5Q0PZtJwKs7aLHwHCDXvYq2bChvda1IcVUFTIAS7pTMDqrABFztzc7RFq
+hHER7MrjbZ0zqRBHTlGMDWG8BIskOWxoj9nvY53nE5FiL8NngzhIqeO7AA7Nap0
Vr968QvgaJjQKWj5qQmQEf8fnNoFoaNRdz0XnE8OtMKPAyUXuOZnt6GxpTsTL2el
6L7j7iRNv3IraJBiBEkyxMeGibOO8ez13DfR2AQ3XfGE8dKpqhYo6DB88BPQZri4
CW3OA083rZy2MVgA6ES9+ZlufhFvqp0D/yA6DvfXOOo+Iqfj2mRv79uZ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFUfNITQ7zTbY2QKcuhVd/UrHO4MB8GA1UdIwQY
MBaAFD5xVqvua6I4uQcxXfnFUoZa3NroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3Zjkt
NThmMmQ0NGZmMjgxLzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3ZjktNThmMmQ0NGZmMjgx
LzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknh36FcR
mFaozdsa/Z/5ZgI6fyTLY7LLjuJXrX2gqVwsF8sf0cICi7LSD5wxg3KYRMIq/tBn
wxrjq98sfOsINseu8ir7zKS0U+ZbIolXdV+0sXB3BTgZXGDpJU32czesXeF+QbF2
d/OFqFdRT18+Xeq+6dhSap+yVteGQuneKgzoJOkO3JydFiroPWoEpB+nubRbuZ6w
TEcHD6Q+9Sa1NJXF+bV4wdhidDlLvt8C6ojEJMjFmScTN0jpWX+D4ln5bF1CqZrq
6hkaHlOH8cBNZKrxX6/mBH14MzXTRaND2sO8AFrIPWQr1M64o08X8EUkxDedvaAS
La6I/FH44i9Zjg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:05 2025 by rpki-client