Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
File: PE71UtfFcTYTTntE1pfLAs3n2H0.mft (raw, json)
Hash identifier: R7x2V1pQgXuAln+h5Aa70PxXgwX760/64swywvBKXEI=
Subject key identifier: 17:55:51:E3:86:41:3E:E5:22:F1:85:B3:CA:BA:EB:D0:13:0C:30:B6
Authority key identifier: 3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
Certificate issuer: /CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Certificate serial: 01958F2A32381B4E52CFB6F235341FD1A16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
Manifest number: 08FC
Signing time: Thu 13 Mar 2025 11:01:02 +0000
Manifest this update: Thu 13 Mar 2025 11:01:02 +0000
Manifest next update: Fri 14 Mar 2025 11:01:02 +0000
Files and hashes: 1: PE71UtfFcTYTTntE1pfLAs3n2H0.crl (hash: hghxlOwX8nb6CkBK8NImSgpEaOf72sq96FL9aRyWK50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:32:38:1b:4e:52:cf:b6:f2:35:34:1f:d1:a1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Validity
Not Before: Mar 13 11:01:02 2025 GMT
Not After : Mar 14 11:01:02 2025 GMT
Subject: CN=175551e386413ee522f185b3cabaebd0130c30b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:ad:ab:3a:9f:a5:dc:cc:20:c6:c8:87:dd:
e7:47:f3:b1:6b:20:1e:1d:12:eb:f3:4e:21:8d:49:
c0:43:ea:fa:40:ee:af:a2:ab:49:05:fe:e5:ae:02:
03:bd:ea:83:e6:71:91:41:4f:dd:c9:dd:b5:d7:9e:
a2:e6:89:52:fb:e4:8f:30:84:71:4b:46:4b:b4:5c:
35:a4:56:b6:59:16:c8:ef:cd:e1:b8:8a:90:bf:f4:
13:da:69:e8:05:9c:c7:e5:5c:e0:9c:3d:45:ee:e1:
6f:6f:6c:e6:23:39:7e:4a:4a:f1:11:c3:81:b4:bc:
48:f2:9e:d9:f8:b2:a3:5a:c4:2d:69:05:2a:87:87:
8f:df:c4:aa:bf:71:17:7d:05:9b:77:b9:a7:f2:60:
9a:e0:67:f2:a4:2c:f4:4f:32:91:14:85:a0:52:70:
5b:72:89:2f:ad:bd:6f:64:a3:93:b3:29:3b:54:5d:
e0:54:02:f8:07:b7:f6:e2:be:5b:c5:7c:11:12:10:
e2:a9:ca:26:e6:5d:14:5e:be:ec:e4:57:fd:37:cc:
8c:b9:6a:31:8b:21:76:76:bc:a3:af:61:38:5e:1b:
d6:8f:42:61:a4:66:9e:29:d6:3a:01:bc:be:74:7a:
26:61:6b:00:07:cb:90:f5:2b:39:5f:0f:5e:6e:d9:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:55:51:E3:86:41:3E:E5:22:F1:85:B3:CA:BA:EB:D0:13:0C:30:B6
X509v3 Authority Key Identifier:
keyid:3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:da:05:b4:cf:ce:d7:ed:ad:f2:29:52:c9:07:b3:c1:ea:88:
f8:34:92:22:68:b8:e6:3c:78:03:fc:a5:f3:8c:4e:7b:0d:66:
8b:9c:1b:35:29:15:13:1d:6f:f1:ee:11:69:74:d0:f9:fd:ec:
5e:01:2b:41:cd:84:b9:ca:32:e0:ac:b7:ed:90:dd:dc:f8:2e:
56:1d:16:79:5f:59:4e:26:ef:f9:e2:7e:fa:9f:83:eb:a7:65:
84:4b:90:d6:54:7c:7b:c7:b2:d8:6f:8f:ce:be:15:01:a6:43:
84:8d:8a:9a:2a:34:46:5e:90:67:ec:40:f4:ba:87:80:52:4e:
25:ed:12:db:70:22:05:3c:bd:9a:86:c8:33:16:e8:08:7e:b5:
da:d5:47:76:11:12:33:39:dc:a5:a4:c7:1e:01:0a:f6:a5:97:
e9:dc:c1:67:e9:a0:21:25:ee:8e:96:02:a3:ce:84:2e:f8:8c:
bc:6b:3e:fb:33:09:ec:81:42:a8:3d:d2:6a:b0:af:1c:43:b5:
6b:15:64:5d:2d:ca:67:93:3c:ad:36:db:60:20:f9:74:0d:bc:
f3:4e:ac:69:39:d3:45:4b:3f:23:97:26:1e:39:3e:91:1b:82:
27:ce:ce:d7:ce:29:03:5a:be:75:7c:eb:01:78:3d:2c:f3:bb:
63:78:70:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:13 2025 by rpki-client