Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: qy78l8uCYNKsKDKJzElxe1k2jo4Or4YEUaJN2ts5Ryw=
Subject key identifier: 94:58:22:79:5B:D1:8E:92:CB:EE:57:3C:58:CE:8A:7A:16:EF:B3:70
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 0196C1CBBE77AC2C498090231BEE5A742490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 092E
Signing time: Mon 12 May 2025 00:01:17 +0000
Manifest this update: Mon 12 May 2025 00:01:17 +0000
Manifest next update: Tue 13 May 2025 00:01:17 +0000
Files and hashes: 1: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: TdGO7s0dGgUkX0TS1KOu/0OG26SAEm97aNNXWGzukY0=)
2: u6X_yWkVLE-C5GUl8sRlcXUfprI.roa (hash: G/Od4mhlmhQvTsBF+RYMonju3qrggKqYt06lJi4x8BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:be:77:ac:2c:49:80:90:23:1b:ee:5a:74:24:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: May 12 00:01:17 2025 GMT
Not After : May 13 00:01:17 2025 GMT
Subject: CN=945822795bd18e92cbee573c58ce8a7a16efb370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:74:7e:3d:60:49:fc:7c:53:21:c0:66:5c:
36:27:58:a3:1d:39:c1:45:e8:e5:ff:19:a0:64:ee:
84:3b:8d:d6:13:14:63:93:e6:93:e6:da:54:ab:ee:
c3:a5:08:a9:82:ba:a8:a9:3c:28:7f:67:d4:d2:58:
6f:9c:a8:7b:6e:ce:87:27:7c:b0:d6:82:e6:2f:3b:
3c:f4:70:04:62:9c:8a:7e:d7:69:05:44:89:22:22:
f4:1b:c6:4a:c8:ea:fc:7b:6f:f8:ae:24:6b:2c:e3:
e5:e6:c8:f0:c3:f9:69:a8:cb:e9:1f:84:02:a1:9b:
20:a7:b9:94:c1:c6:42:bf:d3:55:13:8c:a9:d5:13:
c5:43:7b:cf:0a:ab:d0:23:59:01:f2:e8:d4:0f:c4:
fe:04:2e:6b:46:f3:86:49:2e:03:9c:07:86:4d:ed:
05:09:37:5b:e1:79:e5:67:da:7b:0b:fb:df:51:25:
a2:a0:3e:04:61:7b:52:36:42:32:6c:0e:d2:a3:ef:
bb:c5:f5:7d:53:9b:39:33:41:d6:f0:78:aa:d3:45:
37:48:41:02:ed:d8:f3:e9:dd:7f:e2:ce:0a:f9:22:
89:7d:18:75:eb:0b:5b:f0:ba:fa:71:b8:25:61:cc:
38:76:02:cf:5b:26:54:5a:5f:19:32:a1:5f:4a:56:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:58:22:79:5B:D1:8E:92:CB:EE:57:3C:58:CE:8A:7A:16:EF:B3:70
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:82:6c:86:df:a7:23:dc:8b:19:a4:fd:ae:20:cf:96:ba:7f:
c7:d9:78:61:19:7a:86:d9:8a:cf:bb:40:e7:85:84:3c:90:da:
b7:05:2d:77:57:ab:83:95:f4:6d:af:81:ad:7b:92:b1:3b:48:
0c:34:61:95:06:4b:4c:0c:3f:4b:ba:f0:c1:51:95:3e:63:be:
bd:b2:0f:d1:da:b0:df:45:99:bb:dd:eb:d8:33:cf:2d:d3:40:
74:9e:13:32:9d:51:4a:fd:c4:3e:7f:8a:7a:d7:8f:11:67:53:
31:3b:98:ee:b7:e7:a8:19:79:b9:be:a6:0c:57:9b:1a:3b:80:
85:d4:b0:99:3f:25:10:2e:84:14:a4:57:1a:0a:04:6e:a8:b9:
34:05:9b:67:af:11:74:ba:2d:6c:75:3f:62:60:4a:15:26:09:
98:6b:f5:0a:d6:72:09:22:cd:de:db:45:95:c7:70:5d:e1:14:
0d:ab:86:97:cb:40:19:17:a7:94:30:38:48:65:f5:6f:84:6d:
ef:25:dd:b5:13:ab:8d:a7:e7:95:6c:e7:15:6d:42:01:e7:ae:
7e:b1:f4:1e:d0:05:39:d4:a8:a3:96:d3:43:bc:01:c6:5a:09:
03:ed:27:9c:d8:fb:4b:9d:3a:16:c7:8f:47:e7:04:de:88:e6:
9c:ce:c1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:17:33 2025 by rpki-client