Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: 9NGYufeK/Uqt085edGhpaZmHpGBEyHYhrzSeo2cisps=
Subject key identifier: 92:BB:EF:05:CF:88:7A:81:37:40:26:70:D5:9C:E0:2B:3D:86:61:6A
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 01958B4DE932ADA14B145F53B9A9B652C777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 17:01:33 +0000
Manifest this update: Wed 12 Mar 2025 17:01:33 +0000
Manifest next update: Thu 13 Mar 2025 17:01:33 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: gFXWCyXFRk4J78jk0cs+H1encwexWbk0J+IO9C8/lns=)
2: QIZ7oB864tCgRt_o70Ipdd0FOK0.roa (hash: m8Sbl87AQlvrLt/hOAausP00tdMD076gdUCeqvLuA8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:e9:32:ad:a1:4b:14:5f:53:b9:a9:b6:52:c7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Mar 12 17:01:33 2025 GMT
Not After : Mar 13 17:01:33 2025 GMT
Subject: CN=92bbef05cf887a8137402670d59ce02b3d86616a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:ea:f8:32:03:8a:3a:92:e8:57:27:2a:f4:
ff:30:77:bb:ab:89:33:eb:92:7a:bb:11:17:26:2f:
96:90:f1:c7:f6:6f:53:77:24:88:a5:97:8d:1e:17:
ef:79:20:6c:3a:25:14:02:cb:ef:d5:5e:d7:d3:b1:
ac:15:6d:6b:21:3d:c8:7b:bf:37:71:a0:7e:4e:55:
60:8b:3a:e9:07:c5:46:20:c6:79:6a:42:3b:ce:da:
51:ee:e0:de:a0:ac:d4:71:a6:1d:61:f9:01:a8:f5:
85:ef:1f:0f:06:2b:3b:54:ca:b0:5a:65:63:fb:e1:
ea:c3:3f:ab:9b:e8:15:61:35:62:5f:9d:81:bc:40:
3d:36:22:69:86:bf:da:10:68:61:10:19:47:a8:85:
b6:eb:fb:f8:60:d4:6d:9c:a8:7c:56:0b:e5:cb:27:
4f:1b:85:7c:09:cd:e3:0c:62:7c:92:88:68:91:f3:
0a:7d:c5:2f:78:17:a0:00:a5:9d:3a:39:dc:25:d9:
b5:dc:a5:4e:3d:50:35:04:b1:9e:01:71:eb:b0:8a:
3b:cf:78:26:cf:ef:f1:de:ca:4f:52:f3:e5:3c:4c:
ab:3b:0f:b8:fa:53:74:46:cb:cc:db:6f:60:da:cb:
fd:6e:0a:d7:d6:01:47:9c:70:65:f9:eb:40:2e:a1:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BB:EF:05:CF:88:7A:81:37:40:26:70:D5:9C:E0:2B:3D:86:61:6A
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e1:ad:97:6b:89:02:bf:d0:bd:1c:dc:d3:d8:14:ed:64:5d:
35:b3:fb:59:de:4f:02:ba:8a:0a:77:f3:bf:eb:f5:cf:16:fc:
b6:2d:d1:20:e7:e0:45:07:24:c1:0e:38:c1:f1:08:9d:5f:58:
02:f7:57:9b:64:3c:59:a6:3d:f7:cc:c9:82:67:9e:fe:7b:2f:
ee:36:a2:48:be:8d:0b:d3:0e:8b:12:8c:5f:60:21:02:ce:d5:
7a:6c:6c:d4:bb:c8:b6:65:be:63:d2:1e:af:22:90:7b:33:cf:
01:b9:88:0c:d6:10:19:24:3e:50:d2:f8:be:2c:0d:f4:ef:e5:
03:6f:00:d6:c2:a7:cf:46:be:65:b0:86:c8:13:16:70:06:71:
a5:d8:e9:d7:4a:0f:0d:c8:e2:0d:db:c0:6c:bb:c9:03:25:ef:
3a:d2:a1:fa:71:da:52:38:33:7e:5c:9e:e7:88:e0:d0:d6:78:
cf:5c:00:72:ab:c9:b1:ae:64:cd:f3:03:fa:5e:fb:0c:bc:1c:
af:03:32:75:6d:6a:ed:3a:4d:db:6d:88:2a:82:e0:72:b1:be:
e8:7a:6e:5f:d2:12:32:a5:7d:aa:55:9b:32:3a:0a:7f:71:86:
a0:d2:bf:f3:a4:de:78:e4:4e:98:cd:5c:8b:1e:c6:45:5f:2e:
de:2f:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:49 2025 by rpki-client