Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
File: PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft (raw, json)
Hash identifier: QWHWewlo8zHhYl5b+/XwEP1+DT+2v37k9ovityQlEb4=
Subject key identifier: CE:96:63:7A:5E:EB:3D:E6:CD:9B:5E:ED:13:E2:C5:14:6C:40:3A:72
Authority key identifier: 3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78
Certificate issuer: /CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
Certificate serial: 01965838FB095E9C5A50751E4772D66E2DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
Manifest number: 03EB
Signing time: Mon 21 Apr 2025 12:00:51 +0000
Manifest this update: Mon 21 Apr 2025 12:00:51 +0000
Manifest next update: Tue 22 Apr 2025 12:00:51 +0000
Files and hashes: 1: PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl (hash: lqCU/bsRskP7ragfdphZLSulLx/kCWLnOhKPa1TYBqE=)
2: eSMweySQayVjw4TxrRct4yupfzc.roa (hash: vIdUHA4BTNYVBukw2W8J/Pb08xt6VrAwfBVQVhqYWeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:fb:09:5e:9c:5a:50:75:1e:47:72:d6:6e:2d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
Validity
Not Before: Apr 21 12:00:51 2025 GMT
Not After : Apr 22 12:00:51 2025 GMT
Subject: CN=ce96637a5eeb3de6cd9b5eed13e2c5146c403a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:23:bc:26:e8:97:ab:a0:2f:5e:00:c4:25:
51:f1:b2:d5:4b:76:99:8c:ad:7e:12:67:07:29:40:
fc:19:49:23:e6:b8:e6:66:74:28:90:84:15:4d:33:
19:d5:09:79:3a:12:fb:29:40:99:c5:ff:f0:75:d8:
a7:c8:49:60:2a:dc:85:b6:81:9b:21:4e:2f:19:91:
81:e2:1e:a6:e0:0f:65:41:35:a1:1f:91:45:6d:7b:
c7:ce:3d:a0:55:6c:51:16:43:75:0e:06:b3:ad:8d:
26:b4:40:74:47:b8:84:5b:7f:1c:72:a1:25:6d:15:
b4:fd:37:3b:4d:6f:6a:e5:08:24:5d:bb:39:ec:10:
a8:52:5d:2c:3e:bf:85:a7:60:de:0a:fd:e9:2c:87:
24:6e:18:27:80:77:88:fc:54:84:19:03:ef:de:08:
9c:44:ff:30:19:a9:45:2a:d4:4e:76:df:14:e5:7f:
33:cf:85:f1:1a:f1:10:1c:4c:bf:fe:d1:49:c6:5a:
b8:f6:f8:d9:a3:78:f2:7f:46:31:09:8e:e7:13:92:
92:14:13:83:a8:19:61:72:ef:f2:65:e0:f7:c7:94:
f6:06:01:0b:a8:52:12:42:c1:5c:39:8c:47:4d:48:
a9:1c:59:4d:98:f9:04:58:b2:98:38:c1:f3:ba:b7:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:96:63:7A:5E:EB:3D:E6:CD:9B:5E:ED:13:E2:C5:14:6C:40:3A:72
X509v3 Authority Key Identifier:
keyid:3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8c:1e:99:0b:36:f5:4f:ca:fb:f6:bd:52:54:c5:c6:00:6a:
68:44:0f:c8:2c:7e:81:f4:3c:1d:bb:bf:8a:17:33:d5:95:39:
fb:ad:75:34:b6:9c:b7:d2:10:a8:36:0b:d1:56:80:da:68:6a:
8d:b5:88:c8:2a:73:f4:b7:05:d4:75:28:f7:c4:07:f4:c1:e5:
44:7f:f1:12:ef:00:79:1b:91:49:23:99:7e:72:65:3f:75:98:
62:13:ca:ed:ab:87:51:83:9b:fe:b6:70:81:e0:10:d2:28:50:
93:e6:d6:44:3b:4c:cf:64:d2:6e:85:28:62:c3:84:c7:ba:63:
25:b3:93:36:0d:9c:f0:71:d5:08:09:7f:70:06:56:5e:f8:16:
df:34:69:97:02:40:e8:fb:f7:b7:e0:e8:bd:aa:0e:eb:87:5b:
72:5f:ae:c3:fb:b8:65:16:53:1a:ce:09:ad:c6:e9:b0:0b:60:
e2:61:dc:b0:40:98:ed:15:be:1c:ad:8d:b6:df:b3:85:a9:e4:
61:49:01:2d:90:b9:a4:18:27:c3:95:c6:60:35:2f:20:8d:fa:
32:c9:9d:a7:6d:81:08:97:54:aa:c6:f7:7a:ad:5a:b2:ed:64:
9e:72:ec:28:f1:1d:81:65:c8:9e:70:15:f9:0a:f4:18:e9:7b:
ce:e4:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:59 2025 by rpki-client