Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
File: PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json)
Hash identifier: 71VajsVPl1S7XPrMwrcOStwfcynB5s5EpmeAu+fRyeE=
Subject key identifier: 56:61:8B:9A:72:D3:88:B1:77:F5:37:A7:BE:09:7B:F6:A5:56:1A:20
Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
Certificate issuer: /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Certificate serial: 01965C155DAF6EDFECE9C1286076F9803671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
Manifest number: 10F2
Signing time: Tue 22 Apr 2025 06:00:26 +0000
Manifest this update: Tue 22 Apr 2025 06:00:26 +0000
Manifest next update: Wed 23 Apr 2025 06:00:26 +0000
Files and hashes: 1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: r7a/PbQNVb2VO3DMX+Hn8Enu8gaatavW2wR4gEKMKz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:5d:af:6e:df:ec:e9:c1:28:60:76:f9:80:36:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Validity
Not Before: Apr 22 06:00:26 2025 GMT
Not After : Apr 23 06:00:26 2025 GMT
Subject: CN=56618b9a72d388b177f537a7be097bf6a5561a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:40:92:c8:04:bb:80:69:00:96:16:65:17:fd:
72:c8:c8:29:9e:0f:b8:15:78:41:a3:73:47:dc:4b:
9e:d0:eb:cb:d5:bf:d0:9c:33:d3:86:bf:71:de:7e:
78:ad:67:5b:75:d6:28:28:28:15:17:3f:ac:55:2b:
cb:f3:76:19:5f:e9:d9:74:8f:c1:b9:16:3c:c8:24:
fb:ec:f7:cc:a1:db:a4:62:fb:98:ed:cc:bc:27:a4:
ca:73:32:70:8e:cc:2b:a3:f6:dd:96:1f:98:f5:4e:
75:1d:9e:85:93:d9:bb:d3:52:84:e6:39:00:62:d4:
3b:9d:bf:7a:bb:87:e2:6a:11:2c:73:37:f4:67:5e:
4b:db:da:8d:3a:a6:14:88:35:18:ef:05:7a:bc:12:
d3:a4:9d:19:f4:5f:c1:78:56:73:90:88:a4:cb:72:
43:1f:bf:06:9d:63:ce:52:c6:69:db:04:71:8b:ae:
ca:a6:94:c3:4f:0a:51:e5:dd:fe:6e:6c:6f:90:5e:
cf:21:0b:f3:a2:a7:03:e8:33:45:75:73:20:33:7a:
08:93:65:7f:fc:f6:5a:37:9d:74:c0:e9:c1:60:f3:
9b:81:0e:97:b1:40:04:fa:2e:e1:e1:d6:99:4a:d1:
32:ff:12:85:6e:c6:44:32:eb:b1:db:ac:e0:02:13:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:61:8B:9A:72:D3:88:B1:77:F5:37:A7:BE:09:7B:F6:A5:56:1A:20
X509v3 Authority Key Identifier:
keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ed:6d:7c:79:2a:7c:bb:27:ad:b3:fa:0b:5e:7c:e8:00:a8:
56:4c:6d:a1:45:93:1e:f8:02:b5:ca:59:7c:cf:0c:72:df:d5:
03:56:a8:31:82:2e:65:1b:d4:24:14:14:49:f4:45:99:e9:8b:
08:11:b7:15:71:a7:40:3f:2f:cd:6b:36:a9:74:04:c5:14:42:
02:e2:e2:16:dd:69:58:07:e6:8d:c0:c8:a3:a0:e9:76:ac:d5:
06:59:1c:2d:f4:6b:c4:a0:ae:35:28:25:25:d1:ee:e7:be:56:
b3:64:7d:55:f9:b1:92:da:d2:a0:13:d9:20:f7:b1:bc:e6:d3:
e0:3b:e9:8b:c7:b4:c8:4d:5e:8d:83:4f:f8:e0:e4:90:13:95:
f7:6e:4d:eb:09:bb:de:7f:0f:5c:c3:33:98:71:54:d3:0d:c3:
39:e2:f4:1f:08:a3:48:54:1e:71:96:60:8c:77:f5:e5:6d:b9:
45:7e:1f:9b:99:64:fe:e0:41:63:90:e0:0f:20:74:11:8b:6c:
68:74:bf:ee:27:9a:69:da:8b:75:b9:77:e1:bd:9b:b2:f5:21:
f0:b7:8c:44:90:cc:0a:15:23:fb:7b:57:01:b4:9c:47:23:9b:
03:b3:7a:09:0c:d2:2a:22:ef:f2:74:01:ef:a3:6f:47:a6:71:
aa:57:32:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:00:29 2025 by rpki-client