Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: jQnWEJVAI05GNe4LqCXKLwiVoRr5KtVGgf9b8Kp5LhY=
Subject key identifier: 26:DF:60:BB:56:80:41:79:4F:E1:D9:71:6A:0D:0C:B9:B5:37:30:6C
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 01958B84743BB6F043EDA20CFB499E9E586E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 0374
Signing time: Wed 12 Mar 2025 18:01:07 +0000
Manifest this update: Wed 12 Mar 2025 18:01:07 +0000
Manifest next update: Thu 13 Mar 2025 18:01:07 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: lsM+JX6rWW3gTJX9WCQRwt2DFilhWsHXoK4HaRlg62s=)
2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:74:3b:b6:f0:43:ed:a2:0c:fb:49:9e:9e:58:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Mar 12 18:01:07 2025 GMT
Not After : Mar 13 18:01:07 2025 GMT
Subject: CN=26df60bb568041794fe1d9716a0d0cb9b537306c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:ce:7f:f8:23:f2:c2:95:4c:cd:fa:b5:e6:
05:32:86:aa:bb:2d:e2:df:8d:e5:60:8a:f4:f7:6f:
30:03:0c:7f:80:63:c8:c0:93:8f:f2:9d:94:fd:21:
62:1a:ac:55:ac:32:de:5b:e0:33:d0:7a:11:5b:b1:
3e:53:06:78:40:b4:46:57:db:83:bf:8a:ae:8c:85:
00:5d:6e:72:b0:e9:32:9e:b4:42:0c:b3:63:ce:cb:
f4:1f:46:46:95:98:cd:24:fc:7f:0a:6d:d0:7f:7e:
fd:48:e5:7a:20:39:e6:3e:3c:bd:3e:31:98:0c:4a:
80:bf:a6:68:2f:23:58:0b:f2:c1:b9:45:a2:3b:f4:
16:8a:82:fd:6f:40:53:f0:0a:9f:ec:94:ff:03:47:
bd:52:c4:41:d4:03:80:bf:38:41:be:f1:c4:5b:59:
86:03:8f:83:ba:45:b0:2b:84:45:fa:47:70:98:ab:
03:9c:46:b7:d9:f1:25:02:44:86:b8:0f:25:e2:94:
11:37:d4:49:c4:3d:eb:06:f5:42:33:4a:53:10:0a:
3f:fa:ef:c6:3a:1e:70:02:4b:f8:82:0f:02:b9:3e:
5a:91:37:9c:96:41:7b:d9:eb:52:36:05:c8:81:a4:
51:22:68:c5:1a:d0:dc:c7:bc:70:44:e7:89:83:82:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DF:60:BB:56:80:41:79:4F:E1:D9:71:6A:0D:0C:B9:B5:37:30:6C
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ba:57:01:79:65:c5:83:ae:36:67:38:4b:56:59:42:9e:16:
c7:4c:ad:49:d0:e0:cc:10:89:2b:cd:b4:a2:e7:b1:25:97:7a:
32:8c:17:fd:b2:e9:2c:fb:4e:4a:98:0c:97:52:18:f0:99:20:
38:e8:b7:3c:82:9c:5b:b3:14:99:be:b6:62:86:6c:f4:68:d5:
66:fc:0b:87:e7:b2:6a:7a:9d:c3:d5:9c:5a:1e:2e:9e:a5:26:
7e:aa:b8:7d:a8:d9:a9:80:a8:20:1a:77:f8:35:46:3b:67:82:
6c:df:55:8a:e7:28:b1:06:3a:65:a5:2d:85:e3:84:cc:10:49:
09:9c:6f:b6:77:45:7d:46:8d:87:c4:83:e4:65:e0:7b:0a:a3:
37:65:78:54:9b:76:94:01:82:59:86:ce:34:c0:2a:65:d7:2b:
27:ed:3a:e7:cf:8e:b5:c2:6e:28:7d:c0:99:5f:18:09:bd:39:
6a:bf:57:79:61:a7:71:ba:d7:5f:29:45:92:45:82:da:72:4e:
a1:a7:bd:dd:1a:4b:88:d5:f6:27:87:8d:4b:7c:ae:58:a3:c7:
6b:19:50:3a:fb:c9:a5:be:b3:af:90:a7:93:cb:a6:d4:a3:3a:
c3:25:4f:e1:93:c4:43:31:1a:47:30:18:ce:35:b3:45:ca:08:
98:d2:2b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:30 2025 by rpki-client