Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: y6MLA0Cu4MCFyVzWPUqluN7RKzLRy5TbItcKOYdB3Hs=
Subject key identifier: 25:C3:51:6C:CC:79:9F:EE:19:AE:85:53:54:F6:2C:2A:01:EF:6A:5B
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 0196451F91FFFA4BF61D90E1FD1C4E7C2810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 142E
Signing time: Thu 17 Apr 2025 19:00:18 +0000
Manifest this update: Thu 17 Apr 2025 19:00:18 +0000
Manifest next update: Fri 18 Apr 2025 19:00:18 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: 7z02o/z/7xVPDXmArhFXDqP+kHds/VRdVboIEstM5tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:91:ff:fa:4b:f6:1d:90:e1:fd:1c:4e:7c:28:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Apr 17 19:00:18 2025 GMT
Not After : Apr 18 19:00:18 2025 GMT
Subject: CN=25c3516ccc799fee19ae855354f62c2a01ef6a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:62:70:f9:17:bb:57:9b:e4:7e:20:b1:aa:
f3:15:0f:95:f2:16:b7:bc:57:79:34:5d:d2:4a:0c:
51:1a:2f:62:5c:df:12:57:d3:55:a4:0e:6b:13:e2:
cd:3b:28:f8:dd:c5:6d:36:d1:cc:b8:7f:8b:34:dd:
98:93:6a:64:4c:34:04:dd:43:c9:5e:5f:2a:15:c5:
06:09:20:90:69:bc:c2:5d:f1:98:ba:3b:29:06:f9:
1a:7b:df:2d:d3:b9:7b:2c:11:ac:4b:4f:a6:b9:14:
15:6d:14:7a:09:9c:a7:d4:4e:30:2b:e3:82:a5:49:
cc:9c:f7:fe:cd:f4:29:12:95:6f:10:b5:b7:d3:df:
aa:ab:6c:b1:fd:d2:54:d8:2d:70:4d:1d:e2:38:04:
79:22:35:60:44:39:c6:70:da:f5:21:09:68:1a:4b:
92:31:0d:a1:6a:88:6f:1a:ad:c0:87:75:c4:a1:5e:
fe:1f:c5:21:a5:44:fa:ed:22:a0:00:fe:ad:70:ce:
91:a1:34:3f:0d:e4:60:25:c0:0b:38:2c:db:a9:21:
f4:59:5b:82:d1:10:67:7d:ad:6f:fa:ae:da:af:22:
31:ed:3a:48:2f:98:aa:75:47:af:fa:15:3d:00:9a:
8b:fb:1e:a1:c4:98:25:62:eb:03:87:8b:72:80:7b:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:51:6C:CC:79:9F:EE:19:AE:85:53:54:F6:2C:2A:01:EF:6A:5B
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:03:48:5c:c2:8f:89:ec:50:b2:df:67:a4:a1:3f:b8:fd:9b:
b1:7f:5e:3c:3f:be:36:f6:35:6f:27:8f:d8:6c:43:d2:4a:0e:
fb:47:cb:dd:e6:ea:97:7f:c3:43:e8:2c:15:12:fb:e6:f5:e7:
b8:c3:0a:4f:49:5e:10:43:4b:66:29:2f:06:c3:59:01:9d:f3:
d3:b6:ae:af:cc:c8:60:8f:f5:f0:77:46:e8:60:b5:3d:d1:a5:
f7:cb:0b:fb:31:dd:a3:f4:3e:43:f9:59:3b:43:dc:c2:08:98:
b2:27:66:8e:e4:cd:91:9e:1a:28:b4:78:e0:4a:32:e7:b6:84:
b9:9a:60:a9:1b:22:1e:7d:46:61:fe:9a:b9:ad:cb:07:f4:31:
eb:16:0e:dd:7c:48:a0:ee:9d:32:3a:11:d1:b8:34:88:a8:41:
75:3b:47:1c:bf:ee:eb:30:6f:47:a1:a1:fd:56:1d:01:32:25:
94:4b:09:7b:f2:d9:3b:96:ac:a6:a4:db:98:94:d8:4e:64:cc:
8d:cd:8c:44:01:7b:e1:a9:cf:2c:5c:49:a7:fe:8e:17:70:87:
a1:82:be:73:3a:7b:85:09:6e:c4:71:0e:7f:bb:60:10:dd:90:
d3:dc:3d:d0:33:68:30:30:84:d7:7a:b8:94:c5:47:06:8c:43:
bd:95:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:28:32 2025 by rpki-client