Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: 7LLfLORPn2TYsB7jMPuxT4nLj7Tfm3EazLmhPHxu23c=
Subject key identifier: 5B:10:08:DD:BA:5A:56:E7:5A:29:93:D2:F7:DD:C2:C5:A1:F9:31:BE
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 01965011A7200FBB6C33CAFA7E336B61CED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 074A
Signing time: Sat 19 Apr 2025 22:00:56 +0000
Manifest this update: Sat 19 Apr 2025 22:00:56 +0000
Manifest next update: Sun 20 Apr 2025 22:00:56 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: hZZVzQzeclzxQPoRCTfjx2pNQyqSk5emf0Ci6qnc/K8=)
2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:a7:20:0f:bb:6c:33:ca:fa:7e:33:6b:61:ce:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Apr 19 22:00:56 2025 GMT
Not After : Apr 20 22:00:56 2025 GMT
Subject: CN=5b1008ddba5a56e75a2993d2f7ddc2c5a1f931be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c1:e7:16:fb:94:8b:7c:0d:e1:7d:3a:48:6f:
9b:03:17:f3:f5:9d:4c:e9:7c:f8:8c:14:93:76:35:
fe:27:e5:aa:90:23:a2:c0:39:90:d9:a0:75:b1:d0:
64:87:1c:c7:0b:d5:2d:28:17:79:98:2a:49:2b:a0:
aa:af:f0:4f:58:d4:5e:db:98:13:ad:61:06:56:3a:
5c:14:ea:45:d1:2d:14:20:b1:41:24:fd:ac:9e:7e:
d7:24:0f:e9:5a:26:30:c6:69:c9:81:9f:13:6f:fc:
bd:23:19:67:86:7c:30:cc:6c:d4:55:4e:f9:0f:45:
b0:32:1f:4e:35:b7:12:d7:dc:c1:11:ae:dc:6c:99:
2d:ec:a1:d2:3c:90:7a:d6:1e:63:18:9c:0e:ba:e1:
7b:a8:61:e0:c5:e0:70:b2:d6:4a:72:a8:37:90:71:
cd:72:c2:cd:ec:32:79:21:29:d8:2d:a0:7f:35:0b:
bd:08:6d:69:ad:9c:f1:c7:89:58:53:f9:56:76:d4:
ce:0e:a5:a4:a6:b6:c7:7c:45:c1:89:da:bf:ec:ae:
f5:cc:02:75:cb:32:77:bd:0d:3d:e5:d7:de:fb:7c:
32:98:d1:38:39:a5:9a:d1:b8:e9:40:f8:f8:69:85:
09:b1:2e:0b:ab:84:da:e0:b4:df:44:58:fe:4d:66:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:10:08:DD:BA:5A:56:E7:5A:29:93:D2:F7:DD:C2:C5:A1:F9:31:BE
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4b:09:3e:93:1c:ee:9e:64:96:e8:13:71:17:9f:f1:a2:ad:
2a:82:e2:73:80:c3:1a:45:91:92:89:9f:ed:9c:1d:b6:a6:ec:
cb:82:e1:8d:45:8c:4c:7c:44:9b:8b:8c:d0:39:39:a9:0a:ce:
4b:e4:79:73:66:56:17:19:cc:ab:1e:68:22:2a:b8:eb:1e:5c:
7c:5f:0e:9a:00:6a:a8:b0:6a:ff:42:09:75:59:2b:14:0b:b8:
59:ed:83:ff:99:cf:19:d4:b7:f1:b8:7b:9b:e8:85:8a:5f:ec:
95:67:6b:29:bd:1b:62:92:4d:b1:55:41:f4:d8:03:fc:b5:e1:
e1:68:97:af:f5:74:30:8b:b7:09:f2:d5:69:5b:cd:a7:6c:f9:
45:96:3a:5c:ed:f9:91:dc:5c:2b:5e:7f:5b:35:ae:46:16:e2:
65:76:08:53:72:82:84:5c:dd:d3:2a:55:06:96:da:cb:ab:d2:
03:f0:e5:b9:69:d0:b6:fb:c9:4c:eb:58:8e:59:14:e8:c0:f9:
51:47:15:26:a7:97:78:90:f5:20:02:11:39:27:b7:65:75:e3:
4e:c8:7a:f7:f7:8d:fe:cf:d1:5b:9c:26:d2:c9:5d:e6:bc:07:
d9:26:7c:4c:e0:14:c4:8b:b3:dd:f1:f0:ba:72:1b:a7:75:58:
fe:1b:15:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQEacgD7tsM8r6fjNrYc7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTFkMDVjZDI5YWI3MTkyYWYwMzljZjVmM2QwMGJlOTIx
NTc5MzkwHhcNMjUwNDE5MjIwMDU2WhcNMjUwNDIwMjIwMDU2WjAzMTEwLwYDVQQD
Eyg1YjEwMDhkZGJhNWE1NmU3NWEyOTkzZDJmN2RkYzJjNWExZjkzMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8HnFvuUi3wN4X06SG+bAxfz9Z1M
6Xz4jBSTdjX+J+WqkCOiwDmQ2aB1sdBkhxzHC9UtKBd5mCpJK6Cqr/BPWNRe25gT
rWEGVjpcFOpF0S0UILFBJP2snn7XJA/pWiYwxmnJgZ8Tb/y9IxlnhnwwzGzUVU75
D0WwMh9ONbcS19zBEa7cbJkt7KHSPJB61h5jGJwOuuF7qGHgxeBwstZKcqg3kHHN
csLN7DJ5ISnYLaB/NQu9CG1prZzxx4lYU/lWdtTODqWkprbHfEXBidq/7K71zAJ1
yzJ3vQ095dfe+3wymNE4OaWa0bjpQPj4aYUJsS4Lq4Ta4LTfRFj+TWZL+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsQCN26WlbnWimT0vfdwsWh+TG+MB8GA1UdIwQY
MBaAFDwR0FzSmrcZKvA5z189AL6SFXk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUt
NzA4ZGMwOTdmZmZlLzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9jZGIxMDQtMDVkYi00Y2RiLWE0MmUtNzA4ZGMwOTdmZmZl
LzEvUEJIUVhOS2F0eGtxOERuUFh6MEF2cElWZVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0sJPpMc
7p5klugTcRef8aKtKoLic4DDGkWRkomf7Zwdtqbsy4LhjUWMTHxEm4uM0Dk5qQrO
S+R5c2ZWFxnMqx5oIiq46x5cfF8OmgBqqLBq/0IJdVkrFAu4We2D/5nPGdS38bh7
m+iFil/slWdrKb0bYpJNsVVB9NgD/LXh4WiXr/V0MIu3CfLVaVvNp2z5RZY6XO35
kdxcK15/WzWuRhbiZXYIU3KChFzd0ypVBpbay6vSA/DluWnQtvvJTOtYjlkU6MD5
UUcVJqeXeJD1IAIROSe3ZXXjTsh69/eN/s/RW5wm0sld5rwH2SZ8TOAUxIuz3fHw
unIbp3VY/hsVUg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:21 2025 by rpki-client