Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json)
Hash identifier: sCQrdjGrCz644oOpJhQvyn65dClPm2rBs5SkOjGjn9M=
Subject key identifier: 38:D1:DF:B2:BB:58:FE:7D:FF:6D:3B:19:72:CE:79:C2:F0:20:10:D0
Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Certificate serial: 01965801FB9BBD178B2BEC2FAA0FD34E91DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
Manifest number: 05E4
Signing time: Mon 21 Apr 2025 11:00:46 +0000
Manifest this update: Mon 21 Apr 2025 11:00:46 +0000
Manifest next update: Tue 22 Apr 2025 11:00:46 +0000
Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: /TfUbnkfOx9D/oteoZ9A49zqoYvs2wcN7eukAHQNPRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:fb:9b:bd:17:8b:2b:ec:2f:aa:0f:d3:4e:91:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Validity
Not Before: Apr 21 11:00:46 2025 GMT
Not After : Apr 22 11:00:46 2025 GMT
Subject: CN=38d1dfb2bb58fe7dff6d3b1972ce79c2f02010d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:73:c9:6c:b3:0c:ad:c7:09:8d:63:16:3b:
bd:64:47:77:75:7d:d5:20:dd:1d:2b:16:bb:2f:31:
96:b1:ef:70:49:60:1e:1b:22:ef:3c:0d:fa:ba:53:
fd:cc:6b:00:1a:09:41:c2:0c:49:97:8d:c0:7f:63:
8f:53:fa:7a:a4:ff:88:21:4c:1d:d8:f4:fb:c7:c5:
d6:7e:48:1c:e5:99:7f:c7:6b:df:b3:4d:15:74:ce:
b0:7b:c3:e5:9a:14:0a:e9:75:37:7b:c4:28:96:17:
6d:e1:92:5c:d4:34:98:84:22:cc:4b:0e:cb:18:6b:
57:f3:d2:e3:c5:7c:31:9d:71:10:c7:4a:ff:41:b6:
38:25:ef:5f:0f:58:ad:3b:17:73:f0:8c:ac:64:f5:
4b:5d:34:84:38:7b:94:f8:6b:43:c0:be:4f:c3:a0:
57:fd:ac:73:5b:47:f1:74:f8:24:86:4c:2c:e6:4e:
96:27:57:8b:27:81:9a:11:ea:cf:9f:b9:85:56:0c:
af:77:3a:5d:47:43:9f:d6:a3:69:c2:b4:8d:48:7b:
bf:3c:5c:7e:46:57:4d:91:79:63:08:4a:3f:9c:e2:
38:86:ec:5c:8e:b5:90:5e:f9:9f:80:88:ec:dc:73:
5d:95:67:d0:e7:fe:7d:72:2a:02:65:e5:c7:c2:b6:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D1:DF:B2:BB:58:FE:7D:FF:6D:3B:19:72:CE:79:C2:F0:20:10:D0
X509v3 Authority Key Identifier:
keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:15:19:f0:b0:54:74:fe:95:a1:a6:82:d1:88:1f:6c:67:5f:
cf:a3:f4:b4:22:07:f0:75:e5:a4:af:a6:d1:35:65:17:bc:b8:
03:2e:23:3d:d7:6a:d9:d5:0b:77:15:da:39:97:34:0b:74:d9:
38:7f:36:d2:6f:de:cb:5e:b4:49:42:34:ff:7e:cb:2d:cb:3b:
d6:6f:f9:ac:02:2a:e9:cb:ab:1e:16:b9:1b:13:a1:64:ba:6d:
53:74:3c:88:76:4f:a7:71:83:73:be:b4:bb:1b:cc:34:1d:67:
54:8b:13:d0:91:1b:83:72:0a:a3:34:d0:46:ee:eb:c4:46:bd:
6c:56:0e:c9:7c:5b:a7:00:0a:25:17:5b:47:56:9e:29:e4:e4:
49:07:a2:db:61:b6:f2:04:83:54:c4:61:68:2d:01:13:3b:60:
bf:13:f8:49:8c:11:f0:37:f9:71:46:1c:36:7c:d2:e9:56:8a:
3f:0c:be:bc:d9:49:fe:8a:ff:e6:b8:9d:c9:a3:80:93:16:79:
b1:77:2d:8a:a3:58:aa:6b:f1:c3:71:78:54:46:ca:09:cb:0c:
b6:c8:17:29:6c:4e:b4:9a:0c:1a:19:f8:16:87:02:bf:73:de:
78:2a:4f:1d:e2:2a:66:8b:3f:22:b6:ef:8f:e3:7a:53:fb:dd:
6b:ef:01:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:56 2025 by rpki-client