Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
File: PZlE6PVlGxvS8KngBoZfOmuB62E.mft (raw, json)
Hash identifier: bnDQbK4J0okYXJk3qXdkOU2JlR4mDCs79hH4EC9dJxk=
Subject key identifier: B6:0A:5B:1D:C4:2B:01:40:24:66:4C:4A:41:C4:52:8D:35:F2:27:93
Authority key identifier: 3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61
Certificate issuer: /CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
Certificate serial: 0196DE54E17A35487D4933417535EF74A1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
Manifest number: 1546
Signing time: Sat 17 May 2025 13:00:26 +0000
Manifest this update: Sat 17 May 2025 13:00:26 +0000
Manifest next update: Sun 18 May 2025 13:00:26 +0000
Files and hashes: 1: PZlE6PVlGxvS8KngBoZfOmuB62E.crl (hash: ZNUK505LwmOR4HC6XSZ3yfZ+97OfjnDUnMapYI9k8jU=)
2: tlchQmDxgjTRo1pLaspfZw12O3A.roa (hash: 6bDu460ilvbyFwMJbm1Vw+QewREO9nGYqnB3iYaAR4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:54:e1:7a:35:48:7d:49:33:41:75:35:ef:74:a1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9944e8f5651b1bd2f0a9e006865f3a6b81eb61
Validity
Not Before: May 17 13:00:26 2025 GMT
Not After : May 18 13:00:26 2025 GMT
Subject: CN=b60a5b1dc42b014024664c4a41c4528d35f22793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f6:3e:94:8a:20:a7:ad:f7:a0:b8:d0:bf:3d:
a3:f2:69:79:9d:1a:dd:96:23:8a:92:0c:9d:f7:9e:
05:6d:47:94:3c:6f:93:48:30:35:05:8f:6f:8e:07:
01:0b:fc:de:60:c8:9b:ff:64:4b:cc:c4:a4:56:6f:
18:3a:ef:66:81:f0:4d:bd:5c:6b:82:76:0e:4a:cf:
7c:e3:b4:07:13:eb:83:f5:3b:fe:7b:ab:27:c8:2b:
77:15:6a:de:1d:5b:66:84:a6:2a:6a:23:eb:1e:fd:
6b:19:69:12:a2:cd:19:90:7f:83:bd:94:4d:8d:e5:
89:f8:38:a4:d9:50:50:d0:38:20:9e:a3:8d:15:ae:
d4:b0:2f:1d:08:bf:2d:47:9e:c9:fa:ac:db:73:ab:
7c:4f:57:73:3e:56:c3:a5:e7:1e:25:8b:1b:1b:71:
96:e8:92:e2:96:9a:e2:3c:94:9c:d3:ca:1f:b5:5d:
a6:81:89:d3:fe:28:e4:cf:a3:55:5b:9f:09:da:82:
25:f6:46:c3:76:a2:f3:5a:cd:cc:94:32:53:c4:a7:
3a:aa:7b:eb:42:c4:33:e3:16:75:f1:a4:88:3c:d0:
7f:3b:c4:61:1a:b6:6d:8b:50:da:86:6c:74:59:ec:
1a:04:9c:7e:7a:24:db:b5:ae:10:e2:98:f6:63:40:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0A:5B:1D:C4:2B:01:40:24:66:4C:4A:41:C4:52:8D:35:F2:27:93
X509v3 Authority Key Identifier:
keyid:3D:99:44:E8:F5:65:1B:1B:D2:F0:A9:E0:06:86:5F:3A:6B:81:EB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZlE6PVlGxvS8KngBoZfOmuB62E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4bff72-ba5b-4528-8c42-7f6b9f1040fd/1/PZlE6PVlGxvS8KngBoZfOmuB62E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f2:dd:ab:f9:f2:10:a0:0e:eb:fa:ff:43:80:a6:8c:49:93:
fb:0e:a7:c7:f2:19:a5:a0:ad:aa:5f:f4:af:b6:24:e1:a8:7e:
74:ca:45:c5:c5:e4:31:ca:05:07:33:8f:1e:e5:5c:83:61:f8:
41:39:dd:c1:57:6e:66:67:11:cd:28:d8:89:c3:96:30:55:7c:
50:6f:88:de:24:ba:d8:67:1b:a2:04:aa:0d:88:0a:82:b5:82:
fc:10:1e:0c:15:d1:6d:ca:e8:a7:c0:21:20:03:79:1d:26:e1:
1c:58:0f:99:c4:e4:94:06:40:12:12:be:41:eb:f8:33:62:37:
6b:3e:52:ec:37:ce:bd:78:67:56:ff:2e:24:e8:3b:6f:a8:e1:
05:e3:9f:61:71:67:04:fa:51:4b:e9:e5:a1:65:38:50:38:5d:
0e:05:14:d9:36:4c:9a:5e:56:d1:fb:97:8a:53:79:b9:3c:ed:
58:fd:ba:cd:3b:4a:b0:0c:9f:c8:bc:93:0e:2a:a7:4d:aa:5e:
01:4e:86:a4:90:70:02:7f:4d:9d:20:0d:b4:e1:ff:d1:e8:ae:
9b:cf:16:b6:3b:a2:d1:25:cf:4b:74:ff:59:81:91:00:bb:8e:
07:03:c0:46:9f:88:42:1c:7f:81:04:c5:08:50:31:3b:6f:dd:
27:43:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:50:41 2025 by rpki-client