Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
File: pPwscnotINbRTRyACqzbLfEJPcQ.mft (raw, json)
Hash identifier: dRAX0++IaegFKx1+bHWgilEHwo9gP7pMBvIKwN8PDC0=
Subject key identifier: 43:B0:F8:A7:7F:D1:DC:04:E0:4F:EC:69:0C:BA:FB:DE:60:B1:EB:DC
Authority key identifier: A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4
Certificate issuer: /CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
Certificate serial: 01974DB2A9623BDF235388D1BAB5A60B5ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
Manifest number: EA
Signing time: Sun 08 Jun 2025 04:00:43 +0000
Manifest this update: Sun 08 Jun 2025 04:00:43 +0000
Manifest next update: Mon 09 Jun 2025 04:00:43 +0000
Files and hashes: 1: pPwscnotINbRTRyACqzbLfEJPcQ.crl (hash: aYsKqQID8VrqzMOw9kTe8lr++Rd+pEfWwrSHgi4OeYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:a9:62:3b:df:23:53:88:d1:ba:b5:a6:0b:5e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
Validity
Not Before: Jun 8 04:00:43 2025 GMT
Not After : Jun 9 04:00:43 2025 GMT
Subject: CN=43b0f8a77fd1dc04e04fec690cbafbde60b1ebdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:b3:f7:7c:a8:85:7a:2e:83:a3:f1:9a:65:
c9:97:b0:8a:c7:1c:3a:3d:53:b9:92:57:c1:30:5d:
c6:49:14:8d:ae:99:15:8f:27:9f:84:3f:09:83:a4:
21:1f:5a:2b:86:96:b5:b6:31:35:9d:25:a7:7c:63:
63:bd:3e:6e:f2:fc:91:13:33:44:70:d4:a7:67:67:
98:d3:ae:fa:b7:8b:c8:19:48:8e:c4:36:3f:76:53:
10:20:2b:47:82:80:15:92:98:57:1b:a7:53:81:91:
3c:67:9d:5e:85:31:29:c2:2b:a3:ea:a9:f6:64:1b:
7f:23:85:ea:a3:ce:ce:d2:f8:bb:6f:d8:47:18:ef:
04:4a:e7:b1:36:6b:08:99:92:a8:85:15:79:c1:73:
dc:d4:52:c0:f6:92:ce:15:4d:14:25:8b:7f:43:c7:
15:de:2c:47:25:c8:e6:5a:f5:a1:50:1f:0b:15:a6:
70:08:ee:9a:d9:48:42:79:15:23:8f:ea:8b:ea:e5:
b9:ee:36:3e:3f:56:60:4d:68:75:2f:d6:22:b8:55:
d2:3d:91:d1:4d:a6:84:37:1c:a5:4c:17:d3:9f:34:
31:6b:4a:67:1b:63:61:44:e9:6e:ca:86:fe:d3:2c:
d7:9b:0f:ef:78:38:fc:ec:69:92:69:17:87:50:76:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:F8:A7:7F:D1:DC:04:E0:4F:EC:69:0C:BA:FB:DE:60:B1:EB:DC
X509v3 Authority Key Identifier:
keyid:A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:50:f8:4c:ec:e1:e2:17:bb:86:8c:8c:03:cf:eb:54:3f:35:
a5:4b:64:8b:15:94:d6:c5:cf:a3:6f:55:2f:4e:b1:22:7c:ed:
3a:63:d8:e7:29:4b:be:42:2f:58:ae:8c:e8:4b:0d:e5:17:7a:
b0:6e:d5:4f:19:b5:f1:b0:79:a5:d2:79:9f:4a:8d:00:70:6a:
07:c4:20:e0:cf:90:f7:7c:4a:f6:e8:64:a1:d0:b3:0a:68:5e:
5c:28:0d:41:f0:60:47:e5:19:fe:48:97:6b:77:fc:60:78:a2:
c8:fa:60:da:72:12:4c:b6:4e:95:19:9b:e0:c0:71:a3:4e:8b:
a2:eb:e4:b7:14:4d:05:da:36:06:9e:b5:72:ba:03:22:5d:1e:
0f:25:5d:f2:87:e0:c5:1d:5f:6a:ed:94:c6:8f:f9:60:c7:99:
75:ec:07:c9:1e:11:1d:82:df:9c:2d:65:d7:60:cb:a4:db:c6:
0e:28:bb:76:aa:0e:29:97:92:c2:a4:55:a8:02:1d:eb:45:49:
c4:ad:23:c8:e2:68:d7:b5:a4:b5:a0:88:9c:f3:49:e5:5d:ad:
81:87:47:5e:fa:34:86:08:55:81:d5:80:ea:7a:fa:f5:a5:ec:
3b:bc:6c:35:9d:85:c7:6e:21:21:46:8f:34:85:bc:95:d4:4f:
e8:f5:1c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:51:19 2025 by rpki-client