Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
File: pnyqBsCo91QBbmFEgLuzh35AiR0.mft (raw, json)
Hash identifier: Kpc7Fv6eT41ATSausaaV9DXEMX+sTy7DBEwYnZfX07E=
Subject key identifier: D3:B2:E7:0D:D0:51:D8:12:02:80:4F:68:96:B0:F3:B9:8F:71:6E:DC
Authority key identifier: A6:7C:AA:06:C0:A8:F7:54:01:6E:61:44:80:BB:B3:87:7E:40:89:1D
Certificate issuer: /CN=a67caa06c0a8f754016e614480bbb3877e40891d
Certificate serial: 01963F1DA60AB2F1636BDFC790E963A32AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
Manifest number: 021C
Signing time: Wed 16 Apr 2025 15:00:29 +0000
Manifest this update: Wed 16 Apr 2025 15:00:29 +0000
Manifest next update: Thu 17 Apr 2025 15:00:29 +0000
Files and hashes: 1: pnyqBsCo91QBbmFEgLuzh35AiR0.crl (hash: cwrgnRBvfh/GQxYxVhP9IOohkj3nOmFJOnWe2jLPmGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:a6:0a:b2:f1:63:6b:df:c7:90:e9:63:a3:2a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67caa06c0a8f754016e614480bbb3877e40891d
Validity
Not Before: Apr 16 15:00:29 2025 GMT
Not After : Apr 17 15:00:29 2025 GMT
Subject: CN=d3b2e70dd051d81202804f6896b0f3b98f716edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:25:b5:bd:ec:77:5e:a4:2d:14:41:96:1e:
0c:65:70:aa:ca:3c:0a:00:72:c9:99:d7:34:71:d9:
31:33:7c:f8:57:35:69:b3:41:f9:46:b5:60:1c:f2:
06:e1:e2:8c:94:4e:5c:b1:07:93:c1:b0:b9:2a:74:
08:a0:78:f1:4f:c1:34:75:8b:0a:78:4a:1a:39:75:
0a:22:af:f9:18:77:84:f4:1e:9a:50:84:1b:66:97:
4b:2d:52:d0:0c:04:46:a4:74:3e:6d:de:60:f2:c9:
d7:1f:e5:58:87:69:8c:de:b8:5f:50:0c:9a:64:4c:
0c:ef:cd:a9:10:66:fc:9d:71:3f:18:bf:e1:70:e7:
3d:b3:13:e8:dc:bc:ec:a9:a0:f4:ea:0b:4b:a3:12:
be:4f:38:c8:f8:19:76:52:a6:12:dc:77:fa:43:1d:
77:eb:d3:b8:95:bc:a2:ed:42:d5:ab:80:d2:6f:b3:
35:51:e3:dc:32:0e:52:58:95:3a:bb:74:5f:9e:a1:
9a:1b:fd:55:90:3b:a7:e5:dd:d5:da:40:97:40:96:
ae:cf:4d:39:d5:41:c6:6e:8a:5f:67:cd:5a:df:00:
3c:83:7a:ef:97:80:18:92:f6:2b:cd:9b:be:aa:64:
26:4e:3d:bf:f1:d7:b7:83:d3:f3:e7:ca:e0:bc:72:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:E7:0D:D0:51:D8:12:02:80:4F:68:96:B0:F3:B9:8F:71:6E:DC
X509v3 Authority Key Identifier:
keyid:A6:7C:AA:06:C0:A8:F7:54:01:6E:61:44:80:BB:B3:87:7E:40:89:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:76:c6:72:7e:22:c9:e2:84:61:b7:b3:43:45:b1:ac:58:dc:
0d:8a:83:f5:d6:a1:49:38:cc:aa:db:29:1b:ae:cf:3c:92:0b:
ed:22:e9:b1:1a:7d:2e:ca:e9:4f:88:6c:38:fa:9b:60:ee:1b:
cd:e8:f4:2c:91:08:5d:e5:8e:59:a1:b8:85:6c:6c:37:39:de:
98:86:6c:38:83:c8:4e:ba:d7:f4:cc:d1:81:09:d4:50:d9:b4:
6f:e6:ac:c8:59:5e:d6:de:2b:82:9f:54:3c:57:2b:0b:6d:a7:
95:9c:a2:eb:ed:19:8e:59:d1:9f:25:53:03:fa:09:eb:e8:1e:
f3:b7:4d:34:6e:b5:b5:7a:62:5f:0b:8c:e4:cd:43:63:b9:ad:
6b:ea:19:b4:23:d6:ca:c0:d5:d1:19:62:41:70:d0:57:1e:70:
32:57:fb:2b:a2:2b:00:6c:dd:04:f2:fa:7f:81:0b:07:17:5a:
52:ef:d5:b1:d2:a8:86:6b:4f:07:18:fc:dc:a6:38:3a:5c:a5:
a4:48:de:b4:34:d5:6a:7a:e8:41:77:c0:e8:8c:24:2b:72:f2:
79:c6:e6:c3:b8:1e:00:97:79:0a:f8:b1:8a:bd:25:44:a3:18:
89:99:2a:02:11:7c:46:e4:8a:a8:26:f7:9f:b2:a0:75:09:d6:
a1:45:db:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:32 2025 by rpki-client