Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File: PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier: k/3PRkpHNc/Teh15Wk1Z77mQOXYB5VXPEE8mIuMHNnc=
Subject key identifier: 88:80:13:39:DC:41:03:CA:FF:25:03:E4:0B:DD:D3:C7:52:2A:FE:EB
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer: /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial: 01961057508C80811D1ACFA2EA33512825AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number: 1001
Signing time: Mon 07 Apr 2025 13:01:19 +0000
Manifest this update: Mon 07 Apr 2025 13:01:19 +0000
Manifest next update: Tue 08 Apr 2025 13:01:19 +0000
Files and hashes: 1: IFYqWjpdJxRaG3uyQLqw79JLTGo.roa (hash: alQatZzeYH3fzwBxC+QNB+5aLjO5V+OfKBsHgM/Tlv8=)
2: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: fTDExH8aHRcaDykGLcXpV8x8EfRyFVsK0JRZIqHRE+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:57:50:8c:80:81:1d:1a:cf:a2:ea:33:51:28:25:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Validity
Not Before: Apr 7 13:01:19 2025 GMT
Not After : Apr 8 13:01:19 2025 GMT
Subject: CN=88801339dc4103caff2503e40bddd3c7522afeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:4e:df:e1:70:8c:c6:9c:69:03:13:43:8b:
32:53:64:c7:25:01:89:42:b7:6e:61:7a:bf:95:5b:
5f:48:fc:ee:12:1b:73:a0:9c:98:f5:42:df:a3:67:
68:97:19:63:21:0a:3c:a0:4f:11:07:41:e0:2a:54:
fd:f9:74:0d:89:3d:31:ff:be:65:4a:82:9f:96:33:
d5:95:36:a4:73:d1:d5:5a:d8:cc:5f:87:70:fa:c6:
d2:69:1a:88:4c:89:2a:ab:d5:76:8e:83:4a:60:3d:
dd:58:ad:7b:da:0f:ab:2b:7c:5c:e6:b2:3e:fb:5d:
44:4c:58:fe:af:94:62:a4:81:45:f8:92:1a:7e:ed:
9d:04:f5:3f:67:ec:9b:68:2e:fa:a7:8d:34:ad:0a:
b8:95:30:d4:a0:e4:e1:11:d0:85:d6:40:bf:ee:45:
fe:92:a1:e0:21:83:fa:cd:54:5d:76:a6:4f:f5:6b:
b0:92:40:4e:97:a7:a8:02:da:25:68:d4:2f:0e:0a:
f1:61:a6:50:23:fc:34:0a:6f:0e:87:5a:ae:69:70:
0a:7c:f0:03:53:09:da:ba:f9:c3:fd:be:6a:fe:68:
98:23:64:df:01:d5:e2:98:74:d2:c2:ec:72:41:23:
50:12:d7:91:d4:09:2e:91:4d:61:25:fe:e4:6e:39:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:80:13:39:DC:41:03:CA:FF:25:03:E4:0B:DD:D3:C7:52:2A:FE:EB
X509v3 Authority Key Identifier:
keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c2:87:88:82:88:92:a9:f0:f2:20:d6:80:63:40:8c:db:58:
f1:6e:c1:ea:96:b4:08:dc:1c:78:5b:a7:d9:a4:53:d4:79:50:
80:07:b1:44:f8:0f:4a:2b:2c:ef:e7:ce:9a:4a:e4:1c:e6:e4:
04:0f:50:ab:d2:12:13:ee:ac:aa:e1:13:9b:18:48:0b:34:c5:
61:b3:3a:6b:04:ae:31:3a:3f:42:19:29:de:10:4f:bf:1d:98:
8f:74:c6:f6:83:66:86:cd:dd:7b:71:da:fc:2f:e2:5d:4c:53:
4a:32:2b:ac:9f:01:22:3d:2a:8a:ba:0a:20:7c:8b:dc:28:11:
3d:71:2a:c3:df:77:38:a9:8e:5b:65:d8:09:07:65:97:b4:9c:
0f:f5:e1:a1:6f:aa:21:d8:fc:24:da:07:70:ec:46:79:e7:cd:
81:73:93:d6:06:74:ac:06:16:2f:3f:b0:e6:7f:10:e8:5f:48:
96:66:5a:f3:30:15:4e:1c:89:de:84:27:01:d9:28:ab:8e:5c:
02:c2:9d:45:e2:b0:e3:53:e4:62:8c:b2:37:21:b1:d2:45:7a:
10:d7:3b:e9:48:bb:05:53:58:83:c3:bf:15:95:f4:5d:f7:1a:
31:b8:96:56:fa:14:35:0f:3b:db:b4:5e:c0:71:c9:fd:e4:ba:
54:e5:ec:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:21 2025 by rpki-client