Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier: cKujnnapyZzKh0nGy0gBATXNyVxrM2hH27acShep6Hw=
Subject key identifier: 00:67:9E:B3:BA:56:23:4E:7C:4F:B8:46:FF:9B:7D:6B:8C:D7:73:83
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial: 0196D2BEE648F7F0CF24FB9FFA662A1626D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number: 153A
Signing time: Thu 15 May 2025 07:00:48 +0000
Manifest this update: Thu 15 May 2025 07:00:48 +0000
Manifest next update: Fri 16 May 2025 07:00:48 +0000
Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: F9qXGJCvzpr+yuuLh/1e2kiAGYv9cyHbFiMXTJYig1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:e6:48:f7:f0:cf:24:fb:9f:fa:66:2a:16:26:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Validity
Not Before: May 15 07:00:48 2025 GMT
Not After : May 16 07:00:48 2025 GMT
Subject: CN=00679eb3ba56234e7c4fb846ff9b7d6b8cd77383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:c4:4b:00:73:01:b8:07:93:45:10:f1:8b:
1b:35:df:24:ab:f3:50:29:e8:18:c6:8d:e2:3f:33:
b6:43:8e:c9:1a:c1:45:00:ec:af:b3:78:7f:a9:b3:
dc:09:53:92:47:63:58:fb:60:b7:9c:2b:68:de:da:
37:3e:0b:71:bf:ff:45:63:ba:ff:3b:19:b4:d9:e6:
a0:4d:dd:86:a3:84:7a:52:e8:64:07:aa:b3:b0:50:
7b:9a:b3:67:80:77:91:d5:ee:d8:a3:02:db:64:34:
c7:b0:a8:7a:e8:9b:0e:32:0f:fe:01:ff:57:22:ff:
25:d5:70:9e:fc:b2:f9:fa:4c:3d:e0:90:84:32:46:
7e:9c:a0:e2:db:fb:31:8a:ce:55:c8:27:38:31:38:
f1:2b:4a:ab:e8:43:7e:4a:02:44:50:ad:5f:14:2e:
00:4b:a9:6d:10:ba:ab:bd:5a:f2:fa:4c:ed:64:32:
71:e0:24:10:d0:87:d5:fc:94:15:0a:8e:b4:29:7f:
55:5e:02:2c:08:cd:bc:02:bf:55:72:42:fc:f6:ae:
dd:d1:62:fb:cb:c5:81:f5:13:b6:73:d7:56:c5:62:
7f:e8:ea:7a:fb:aa:8a:18:6c:6d:ce:8a:db:44:2c:
6f:f6:e2:30:0f:28:d6:55:76:cb:f5:b8:d2:b0:a6:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:67:9E:B3:BA:56:23:4E:7C:4F:B8:46:FF:9B:7D:6B:8C:D7:73:83
X509v3 Authority Key Identifier:
keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ed:37:72:82:74:76:09:da:8c:f4:e7:5f:55:3d:6e:9e:46:
ac:6f:c1:d2:79:dc:12:5d:f9:56:2d:c9:2d:dd:cb:21:40:bf:
9b:15:8a:33:d7:a1:a6:7b:80:24:cd:77:f8:b8:6c:d3:bd:49:
8e:23:8f:a8:ff:78:ed:44:6d:ad:c0:5c:79:40:93:23:64:3c:
f2:ad:d2:cb:ec:1a:09:85:42:cf:84:34:63:f8:bf:6f:aa:fa:
d4:d6:ac:69:40:50:f4:eb:5f:18:cd:f1:17:37:20:7d:51:55:
b7:02:16:08:0f:c2:e4:da:8d:30:77:69:9a:3c:b6:f8:5f:bc:
d0:1c:b7:c3:ef:c3:df:81:85:6c:41:1c:95:e2:53:91:0c:f6:
c4:25:21:f5:51:e4:9e:de:29:a6:cd:ea:89:9c:0e:b7:48:4b:
fc:73:09:19:a1:fc:b5:fd:dd:2c:0c:79:b4:36:56:fa:00:64:
56:56:de:13:d3:48:0f:f5:74:7b:f3:70:e5:f2:4c:77:81:cb:
5f:e8:57:ac:42:f3:95:ee:60:d3:c5:ff:e1:93:48:0e:83:89:
55:1c:38:89:aa:05:d1:d8:ee:54:2b:c0:9c:35:5a:12:de:67:
29:16:6f:3a:e7:1f:75:47:39:fa:e4:c7:1d:e1:58:2d:af:f2:
e1:87:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:51:40 2025 by rpki-client