
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
File: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft (raw, json)
Hash identifier: VAj7cJNZhZQvqqh450DaC7F8ql9PfWD1GBd7NTA2/Wc=
Subject key identifier: 74:37:32:D4:3E:40:90:E3:11:6C:03:30:70:2F:0B:7C:5F:C2:71:16
Authority key identifier: A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
Certificate issuer: /CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Certificate serial: 0196ACC3E600430BFD0444F8ACC4BBEFB9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
Manifest number: 0183
Signing time: Wed 07 May 2025 22:00:41 +0000
Manifest this update: Wed 07 May 2025 22:00:41 +0000
Manifest next update: Thu 08 May 2025 22:00:41 +0000
Files and hashes: 1: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl (hash: kAMifpEq8JC6Y/TKGJ8sX/oj69rAa1/n2ehfV5RB2sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:c3:e6:00:43:0b:fd:04:44:f8:ac:c4:bb:ef:b9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Validity
Not Before: May 7 22:00:41 2025 GMT
Not After : May 8 22:00:41 2025 GMT
Subject: CN=743732d43e4090e3116c0330702f0b7c5fc27116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:70:c6:23:41:25:55:34:f1:64:3b:c0:1e:
6d:0b:c0:90:44:6f:11:e0:f8:2e:5e:86:77:3e:0c:
8d:d3:d0:c3:b4:2d:f6:f9:b5:e7:24:79:a1:5e:a4:
64:be:c1:61:d9:e3:05:27:dc:d2:d6:6a:72:cb:b7:
5e:9c:d4:4b:3c:3d:00:68:e8:b1:e1:87:e7:f2:b2:
33:b5:9b:aa:ea:4f:f4:93:1a:b3:a8:a8:da:e3:a3:
c1:95:6f:82:78:cc:3f:fe:ca:b8:22:d9:66:2c:d3:
15:0a:38:d0:af:42:1b:52:2e:52:06:67:e2:4f:7c:
15:22:76:e3:b4:2a:43:ea:68:92:a6:46:4a:fa:9e:
55:34:a6:1e:f8:09:ef:7a:52:65:01:75:35:28:c2:
36:cd:85:02:6e:a2:da:52:70:c1:2e:5d:c7:64:55:
ec:0c:62:3e:f9:aa:74:46:17:fc:31:0c:6f:c6:59:
a5:13:8d:7a:47:a3:fa:02:16:37:73:53:92:68:ee:
ac:52:98:ff:2f:45:ca:93:99:0e:ed:92:eb:8d:18:
f3:06:42:88:a2:89:36:7f:f5:16:0a:ba:d1:ce:d0:
00:a5:6e:1f:a1:b3:83:79:39:02:7f:04:0c:d7:96:
6f:c9:30:ac:f2:b5:0c:2b:be:3a:5e:be:07:9c:b0:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:37:32:D4:3E:40:90:E3:11:6C:03:30:70:2F:0B:7C:5F:C2:71:16
X509v3 Authority Key Identifier:
keyid:A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a1:55:b8:85:18:ee:e3:11:35:32:22:13:6e:aa:0c:c6:c0:
81:1e:2e:96:7b:e2:b3:d0:53:c9:4c:aa:ff:6a:63:63:e6:49:
a0:30:38:f9:4b:c1:1e:87:e7:96:67:b8:b0:92:2c:d9:de:36:
0f:98:a0:91:a2:a2:02:fc:4f:23:33:d6:27:85:3b:61:55:d5:
36:56:76:0f:c6:f4:9e:25:08:1b:49:d0:9b:70:3e:e2:88:21:
de:99:40:4b:a5:89:1f:36:45:80:83:8e:dc:63:9a:91:9d:ce:
74:6e:cb:c4:fd:ca:40:9f:f8:59:0e:48:4f:15:71:8b:7a:3a:
9f:3a:0f:d6:03:61:c5:2e:8e:d5:f3:a7:04:82:c3:91:72:87:
ab:0f:78:bd:c4:26:30:ab:3a:d9:f0:d5:78:2a:16:e0:86:96:
31:d9:93:e7:14:0d:fc:5f:4b:0a:75:ad:be:6f:4e:87:43:1d:
9f:ee:2f:70:08:69:29:6a:1c:04:36:d3:b7:68:25:93:2e:47:
d5:e3:3f:6b:72:7f:f3:0e:5d:39:52:c4:c3:15:56:77:7c:52:
74:6b:75:25:07:bd:59:d9:58:d4:9d:f8:b7:74:26:2c:0e:3a:
b6:6f:61:f9:da:f6:5d:05:e5:7d:7b:f2:02:60:b5:37:20:b1:
8a:4b:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:29:47 2025 by rpki-client