Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: m+LkmYMXcBT33HF6AF2p/pjvSt//sAx6ThRlkpFCl2w=
Subject key identifier: 93:30:50:22:20:50:D9:30:E5:67:7D:CE:88:07:D2:6E:C9:7B:89:96
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 0196B2C5CC09D9090C08275C70E7289D8D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 07E5
Signing time: Fri 09 May 2025 02:00:29 +0000
Manifest this update: Fri 09 May 2025 02:00:29 +0000
Manifest next update: Sat 10 May 2025 02:00:29 +0000
Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: yg/5t4OiwjONZCgB5rYT3Lj9Ntk5QPBHe4ViP3eE1oA=)
2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c5:cc:09:d9:09:0c:08:27:5c:70:e7:28:9d:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: May 9 02:00:29 2025 GMT
Not After : May 10 02:00:29 2025 GMT
Subject: CN=933050222050d930e5677dce8807d26ec97b8996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:14:20:57:06:99:ad:06:0c:1a:83:f2:cc:
83:b4:c7:1d:f7:c6:e4:6b:2a:17:52:9b:d8:e1:f0:
f1:f6:c9:05:04:f3:ec:f2:91:3a:69:a2:d4:05:7e:
38:69:81:c0:e0:b1:58:c5:6c:8b:5b:6b:e4:54:70:
b7:13:df:3e:90:a7:57:c0:16:84:3a:28:59:66:0f:
ee:f3:b8:ae:f7:89:41:f6:5c:2c:df:d3:00:d3:5e:
26:38:b6:0f:91:9c:de:e8:20:b4:25:cc:cd:72:b9:
ae:54:8a:c2:e8:cd:3f:af:c9:8f:15:d0:68:6b:39:
48:60:98:4a:f0:f8:47:fb:87:8e:f2:90:d3:b4:a5:
7b:eb:1d:a8:b9:a0:07:a3:d0:c1:8f:75:12:cd:b8:
87:bf:5b:2b:5a:04:98:09:37:e2:08:2c:12:59:92:
93:e8:ce:b4:2f:2d:a9:5a:a1:c1:06:cf:d4:e5:c9:
f6:b2:0f:9b:40:a8:27:d3:99:3c:60:a2:4b:5d:61:
1b:1b:51:50:6c:11:3b:ec:7c:41:7e:5a:22:79:bb:
64:55:97:aa:5b:69:11:da:a8:3d:02:ad:b5:8b:cb:
57:c9:e6:45:4a:73:57:c1:8c:10:f5:11:54:f3:d0:
63:3a:ae:f7:92:15:1d:db:18:d0:32:45:f0:2f:80:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:30:50:22:20:50:D9:30:E5:67:7D:CE:88:07:D2:6E:C9:7B:89:96
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e3:cf:48:10:6c:e1:17:44:11:55:22:79:97:42:da:f7:ff:
06:4b:cc:8e:90:cd:17:bb:b5:93:6d:a0:4c:0d:da:cf:73:c1:
7a:68:35:69:47:f9:d5:0f:54:78:77:cb:40:96:6c:2f:ea:b0:
0d:09:2d:51:97:ce:b5:e3:00:1b:c8:bd:ba:23:16:f1:2c:8c:
d5:4c:06:a7:82:f1:a8:a5:c4:51:e0:b4:24:a6:3d:48:85:73:
b6:d4:3c:aa:d6:84:89:fa:32:da:e9:48:1a:7c:ac:48:ab:77:
9b:97:7f:ec:bc:d6:1e:b7:60:6b:36:62:00:50:3d:a5:72:ba:
0e:4c:49:1e:60:db:43:6a:dc:e1:62:a9:df:e1:9e:33:3c:e3:
0a:87:9a:8a:87:78:de:e8:6a:dd:cf:6a:cc:88:6f:22:32:22:
a5:86:37:f6:71:6d:01:51:b5:22:bb:2b:f6:61:14:ee:0d:00:
a7:0c:c0:29:08:0b:57:1a:1a:54:27:dd:18:6c:5f:b7:d6:23:
a0:65:29:4f:0d:0d:8a:d5:ae:13:89:c5:ff:e6:d7:34:23:dd:
86:99:22:85:16:c2:6e:4b:86:99:86:d8:ad:19:f1:5b:21:10:
62:45:ca:a0:d4:af:10:80:3c:fe:69:2f:c6:7c:d9:93:86:d0:
1a:44:ae:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:33:40 2025 by rpki-client