Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
File: PpeXKwFXszTha_kfKifuDi3BOag.mft (raw, json)
Hash identifier: dFazQLWBQFHLBFefhNSvgnO/RjgNNT9H58oUatrm2tU=
Subject key identifier: F3:50:99:7C:DC:AC:2F:6A:B6:58:51:D9:BD:57:D8:27:5A:AE:20:0B
Authority key identifier: 3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8
Certificate issuer: /CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8
Certificate serial: 0196545C0C78DA52DD032B3D13B8CB985960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
Manifest number: 016B
Signing time: Sun 20 Apr 2025 18:00:40 +0000
Manifest this update: Sun 20 Apr 2025 18:00:40 +0000
Manifest next update: Mon 21 Apr 2025 18:00:40 +0000
Files and hashes: 1: PpeXKwFXszTha_kfKifuDi3BOag.crl (hash: JY8X+MTtVdXXqbPlzy+72o7C0ISD+n0dM1E9WPP8Nqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:0c:78:da:52:dd:03:2b:3d:13:b8:cb:98:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e97972b0157b334e16bf91f2a27ee0e2dc139a8
Validity
Not Before: Apr 20 18:00:40 2025 GMT
Not After : Apr 21 18:00:40 2025 GMT
Subject: CN=f350997cdcac2f6ab65851d9bd57d8275aae200b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0e:5a:22:21:23:d3:8b:cf:55:a3:1b:c3:17:
cd:b9:ab:fe:d6:4b:10:d7:2e:2d:55:be:7d:fe:f7:
6a:9c:2d:95:43:a8:cc:9b:fd:df:eb:46:7c:03:b7:
49:be:21:96:ac:27:a5:59:91:8b:4c:16:34:47:16:
73:ef:2c:1d:21:cb:c5:4b:6b:c5:0a:6b:0d:c7:8f:
a7:c4:4c:0f:10:94:ea:41:a3:d1:a6:75:9b:37:81:
b3:4d:c4:ce:06:cf:de:01:c4:da:a6:32:b7:71:5d:
6b:96:76:65:d5:37:da:27:f1:8b:6a:7b:c7:38:e7:
c4:c4:dd:1f:a6:3e:7a:01:f1:1a:7f:ab:bc:7a:8c:
77:bc:01:3e:14:60:ba:4d:ea:7f:af:f7:f5:39:cd:
e8:4c:df:47:68:d8:e9:0c:b8:f5:15:19:f8:3d:2b:
fe:48:39:70:4d:66:89:db:72:b6:08:14:95:4e:08:
4b:a0:a2:47:bb:78:e5:fb:b4:e5:bd:25:0f:80:e5:
ad:80:a2:05:6f:e5:bd:75:7a:c8:5e:7a:08:ca:8c:
c5:8d:82:84:b3:dc:8d:fc:89:c8:af:62:ef:fd:0d:
51:80:06:77:dc:90:79:b1:75:ac:49:2d:ae:05:60:
bc:3c:d9:5c:63:04:01:e7:6c:b1:3c:b1:8e:cd:f9:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:50:99:7C:DC:AC:2F:6A:B6:58:51:D9:BD:57:D8:27:5A:AE:20:0B
X509v3 Authority Key Identifier:
keyid:3E:97:97:2B:01:57:B3:34:E1:6B:F9:1F:2A:27:EE:0E:2D:C1:39:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpeXKwFXszTha_kfKifuDi3BOag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/27eba1-3ea1-4191-9699-9f004101ce4c/1/PpeXKwFXszTha_kfKifuDi3BOag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f2:9b:30:ef:a8:01:4d:cf:23:88:85:2e:50:0e:13:08:32:
9e:c5:63:dd:5e:4a:55:c6:1a:90:4b:30:53:24:c5:ac:17:f6:
a8:de:68:d9:65:dd:ca:8a:8f:ad:c7:cf:de:e4:8c:33:44:a7:
74:67:11:3f:e5:45:a6:62:dd:f7:54:19:4b:95:64:47:bd:af:
ea:1a:87:a5:8e:eb:c4:f3:46:a9:d0:a7:14:f0:e6:0b:1e:89:
c3:f0:3e:3d:76:09:3e:c7:b8:16:1b:5b:f4:10:02:eb:ed:5d:
f3:5f:9a:b6:9b:48:26:48:96:0f:fd:b5:b1:3f:36:c6:d8:59:
5e:0a:b4:ff:86:3c:8c:da:e5:c2:3f:77:07:71:71:b8:ca:77:
13:1b:05:c4:fc:61:5b:d9:c4:0c:2f:d6:01:4c:87:2e:77:56:
56:97:73:99:1e:a5:03:50:af:f7:ca:ad:a0:2a:ad:6a:57:e6:
a2:64:d7:39:cb:ae:fa:6c:f0:eb:6f:6a:78:3e:2e:ff:22:25:
25:93:67:2b:6f:a0:60:30:fb:3e:b8:74:69:6d:51:eb:e8:f4:
0f:fb:0a:5b:87:15:e2:ed:d6:82:99:ef:d9:3a:8b:bc:af:60:
b9:cc:b5:45:3d:db:d3:26:97:12:33:81:73:20:6b:ea:3e:4b:
a3:39:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:58 2025 by rpki-client