Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
File: Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json)
Hash identifier: Td2xpTmR6rn5JrYXxP3lKHRBcEnTtLE9eoFmb1HlvI8=
Subject key identifier: 19:62:96:B2:8F:56:22:F6:A6:BB:CD:23:4C:05:B8:C3:06:56:00:A1
Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Certificate serial: 0196AA9ECCE928CA6CB0B8421F5C0B486407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
Manifest number: 152D
Signing time: Wed 07 May 2025 12:00:55 +0000
Manifest this update: Wed 07 May 2025 12:00:55 +0000
Manifest next update: Thu 08 May 2025 12:00:55 +0000
Files and hashes: 1: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: Yq82le7XhlX9OEJbI2TVf6jhuDAVo4OOOXgcoFdE/o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:cc:e9:28:ca:6c:b0:b8:42:1f:5c:0b:48:64:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Validity
Not Before: May 7 12:00:55 2025 GMT
Not After : May 8 12:00:55 2025 GMT
Subject: CN=196296b28f5622f6a6bbcd234c05b8c3065600a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:f6:c6:a5:d1:d2:5f:0d:cd:93:d8:3e:6a:
58:26:a9:d8:91:2f:f9:6c:42:b9:bb:53:75:19:23:
a0:18:87:89:95:58:98:63:30:1d:5d:af:36:ab:2d:
93:58:cd:78:21:69:57:b6:cd:07:d3:3c:93:4d:60:
13:f1:5d:08:0c:16:76:61:33:9a:04:38:fa:17:86:
51:f6:ea:44:b3:9d:6f:f1:4b:b9:05:c6:f4:bc:15:
42:f2:db:65:1c:de:bc:e6:05:d6:de:0a:df:ec:ce:
d5:bf:b1:0c:87:d4:f6:96:c8:8c:c6:30:86:f3:8d:
56:20:8c:0b:a0:2d:8d:da:50:06:be:fd:14:64:7c:
aa:6d:01:ad:89:e9:51:69:04:be:2d:dc:6a:0b:92:
06:42:3d:ee:1a:03:92:34:c9:4e:aa:07:05:4d:7f:
51:09:60:47:0f:a8:12:f4:f6:84:3f:76:b9:56:8a:
4e:00:c8:f8:34:e4:a5:fd:2a:27:50:32:b7:c9:a4:
25:0e:a0:99:73:e2:d3:12:ae:a8:a0:00:e6:59:36:
1f:19:ce:3e:fa:3b:dd:d6:d7:69:e2:e8:00:e1:53:
d5:6c:82:21:bd:fd:40:09:e6:69:0c:c3:cb:03:58:
57:4d:e3:8b:bf:d5:c8:21:12:92:af:4d:d9:16:e4:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:96:B2:8F:56:22:F6:A6:BB:CD:23:4C:05:B8:C3:06:56:00:A1
X509v3 Authority Key Identifier:
keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4a:72:4f:bb:64:68:bd:60:aa:e6:4c:3b:95:b9:6f:2c:37:
4d:ea:bf:60:4c:5e:73:be:2f:13:27:3a:07:33:65:64:1e:75:
ed:62:55:48:0d:cb:30:2c:73:eb:52:aa:0c:92:48:d3:74:f2:
c8:e6:a9:22:ed:b4:cb:65:4c:53:c2:33:48:ab:e8:0c:43:b0:
b1:11:19:87:21:b7:48:ed:07:24:f2:48:2f:95:d6:a0:de:0f:
a8:11:9a:ab:e9:98:a1:a2:94:4a:e4:2e:39:2e:e6:7a:2b:53:
6d:99:93:fb:8c:d6:3b:d5:54:39:b6:ac:e6:c8:39:41:22:c0:
45:d5:85:03:f0:73:68:3b:9a:c2:f2:f1:f9:ec:6c:15:62:81:
65:9f:65:3f:40:fa:cd:2d:c1:43:e5:4e:ff:5d:80:d4:e7:98:
5d:b6:31:d5:19:2f:cb:3d:ed:86:ab:d9:3a:65:5f:76:35:c0:
4d:2b:6a:a0:20:d8:a6:26:e1:04:8f:77:8f:b5:f9:f1:b8:9d:
ce:4a:a9:12:8f:20:f3:a0:96:aa:5f:35:7a:7f:ee:5b:32:03:
42:0b:d2:76:e9:ea:9e:ce:ab:f9:a9:63:4b:ce:a1:cc:77:a7:
57:ed:9e:1c:74:9e:24:8c:ac:80:e9:d4:e9:23:3b:2c:90:2d:
0b:22:6c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:41:14 2025 by rpki-client