Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
File: PqU6yajcRG-34BE7aLOOlwwZ98w.mft (raw, json)
Hash identifier: SjrWvqm73qeARyIB45ZouyyMv8AOBSIblEtShAQCjDc=
Subject key identifier: 16:83:BA:33:3A:55:C6:25:C4:7F:5B:39:EF:36:E1:36:B7:CE:B3:37
Authority key identifier: 3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
Certificate issuer: /CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Certificate serial: 0196B10E7ECC5996243A9C861B0BCB5899CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
Manifest number: 14BB
Signing time: Thu 08 May 2025 18:00:39 +0000
Manifest this update: Thu 08 May 2025 18:00:39 +0000
Manifest next update: Fri 09 May 2025 18:00:39 +0000
Files and hashes: 1: PqU6yajcRG-34BE7aLOOlwwZ98w.crl (hash: Xu1o4plsLjl4jZtqgO5eXYRT1jLrfzBe3GwUfSvOuJ4=)
2: ZFcvFlhDWryyoXWXMpIDlrIOANM.roa (hash: vf4LDljSHDeogKMO6SAS7Y9xTDtYGGINc31+p97CZuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:7e:cc:59:96:24:3a:9c:86:1b:0b:cb:58:99:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Validity
Not Before: May 8 18:00:39 2025 GMT
Not After : May 9 18:00:39 2025 GMT
Subject: CN=1683ba333a55c625c47f5b39ef36e136b7ceb337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:d6:05:4f:89:a0:90:2b:84:14:87:b0:56:
37:72:bc:42:08:21:29:0d:13:1e:53:f2:58:62:c4:
03:ad:03:71:b8:0e:33:ff:18:68:ce:0e:81:7e:40:
47:68:4c:5f:cd:de:25:ca:0c:66:0c:17:2c:f1:22:
27:02:6a:80:c4:19:16:3b:39:ae:b0:9d:c0:e7:42:
79:38:94:48:6b:2b:0c:a1:8e:91:61:3b:c6:1e:a8:
0d:a6:8a:15:75:ad:c1:12:84:77:c5:9c:7c:c7:32:
a9:96:3b:21:24:1b:87:13:73:34:36:ce:cc:fb:b4:
cc:7d:3d:9a:3c:af:19:8d:bc:3c:f7:92:c6:17:3d:
4f:f5:e5:f4:67:22:95:13:4a:6d:d0:d6:04:07:af:
e6:7d:76:53:24:ee:75:11:62:54:e7:e9:48:5c:d8:
54:13:34:39:3a:b9:37:32:82:ac:3d:9d:f9:f2:e3:
dd:47:ce:4f:bd:bd:d7:86:e5:a3:4d:89:c2:fb:92:
e8:74:1b:61:94:47:78:c2:a6:d8:17:b3:74:07:2e:
0c:ad:d7:8a:1f:f9:c6:b2:63:54:ba:09:8d:15:36:
f5:87:d3:a5:98:e4:72:68:7d:04:9a:66:29:57:f7:
a6:81:34:23:82:45:ef:cb:2f:19:74:36:5c:65:a2:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:83:BA:33:3A:55:C6:25:C4:7F:5B:39:EF:36:E1:36:B7:CE:B3:37
X509v3 Authority Key Identifier:
keyid:3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3f:f4:d6:63:21:e4:b1:cf:ee:a6:f8:e5:85:d2:65:3b:1b:
1a:1b:41:96:59:a3:84:8f:8f:28:a3:bf:67:50:ff:41:68:9a:
89:2a:18:97:8b:7a:2d:26:08:03:3d:ff:b9:26:cb:73:6e:5c:
92:a0:a5:b7:1b:3d:e3:de:7a:70:cd:7d:11:45:31:b6:cb:ae:
8e:49:1b:10:56:eb:fd:67:47:50:f6:3b:62:5a:f0:c5:91:8f:
b3:eb:f3:72:2d:9e:0d:ac:9e:e5:23:b7:c6:92:b1:0f:4c:ce:
67:9b:75:f5:e2:fb:ec:d4:5c:0b:d6:83:bd:be:c5:d4:df:4f:
00:49:46:06:d1:40:d8:ce:cc:c6:29:50:1f:17:55:95:27:74:
2e:32:00:e0:9d:02:d5:33:0b:d3:b4:14:f2:e0:71:8d:33:e2:
42:9e:ef:c3:1b:7e:0a:aa:82:ad:8b:44:37:24:01:8a:94:e1:
38:f3:3c:de:2c:12:20:f4:f6:52:4e:b7:04:cb:ba:42:37:0b:
e5:45:54:48:b0:d9:bc:e4:77:8c:da:02:2f:be:e5:0b:10:1f:
40:32:54:fa:79:3c:d7:63:a2:7c:37:3c:f3:6f:e6:a0:59:44:
50:bc:7d:59:68:2e:29:00:8d:40:e7:b0:57:ec:73:05:a2:36:
3c:a8:dc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:04:59 2025 by rpki-client