Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: zX/5jYXTV2EFBG/+zxfPws+qITb5QNzc0YKd6stXvJU=
Subject key identifier: 37:B5:88:FB:94:F9:4C:A0:D6:FF:BB:9E:FC:0C:26:01:4B:1E:E2:41
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 0196AEE910C2112F7F9ED84FC4AA98BA50A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: 0400
Signing time: Thu 08 May 2025 08:00:31 +0000
Manifest this update: Thu 08 May 2025 08:00:31 +0000
Manifest next update: Fri 09 May 2025 08:00:31 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: kwGDVzBl8PTtdXLkEdB+BhhEhVBSwv/3x6Z9gUH/vFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e9:10:c2:11:2f:7f:9e:d8:4f:c4:aa:98:ba:50:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: May 8 08:00:31 2025 GMT
Not After : May 9 08:00:31 2025 GMT
Subject: CN=37b588fb94f94ca0d6ffbb9efc0c26014b1ee241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:ea:0a:29:4a:41:42:1f:4d:2f:03:e4:65:
d0:c3:f1:52:2c:b5:2d:6e:76:00:f3:41:45:07:91:
1d:af:d4:19:75:e0:f7:de:f4:14:a2:b1:b1:df:7c:
03:7e:7f:b8:9b:f0:d3:ac:17:f6:5e:bf:84:11:99:
73:88:58:c1:1a:84:5d:bc:8f:27:ae:01:79:44:c0:
c3:14:94:c0:8f:69:dd:6b:a2:46:7e:10:21:93:90:
b1:f7:16:53:fc:de:71:51:4b:dd:e5:af:a5:b5:5f:
56:7d:37:c7:06:b8:20:23:c7:08:2c:95:b0:15:32:
72:a4:12:c2:99:bb:a1:88:90:91:6d:e7:cd:25:2c:
4d:07:3c:c4:1f:d6:97:d8:78:8c:a2:4a:3a:8f:2d:
6d:66:d9:9b:57:60:a6:48:94:f3:1f:13:60:5c:15:
9e:ed:26:ab:07:9f:d4:8e:de:cd:e9:27:7d:a3:25:
62:27:aa:53:2c:e0:e0:78:9e:f0:b4:30:20:b4:b6:
0a:a7:6a:73:b6:90:cc:a4:46:3f:d7:7a:d2:f5:15:
72:01:ec:fe:27:2d:fa:18:e8:58:44:26:1d:f5:11:
19:f5:3d:c8:3b:31:b0:d8:be:74:a8:e1:dc:65:f1:
d2:2d:3a:81:70:d3:ab:28:ff:59:1f:69:73:2b:b0:
15:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B5:88:FB:94:F9:4C:A0:D6:FF:BB:9E:FC:0C:26:01:4B:1E:E2:41
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:dd:37:43:3f:30:01:c5:2c:ac:c4:9e:42:6b:a4:b2:0a:c5:
a7:5d:28:d6:0b:4b:be:38:a7:78:ea:23:6a:cb:30:e7:30:0c:
fc:ef:ed:b3:23:86:f5:44:c7:90:47:30:8f:f6:7b:f0:0c:33:
9b:3e:88:7a:50:43:a2:38:04:30:d0:5f:0d:7a:e7:ca:8d:c5:
e9:b2:f8:61:34:6a:e4:2c:52:15:57:4f:da:06:a6:da:da:ad:
1a:49:32:1c:32:32:68:04:7c:a2:47:9b:c7:0f:3e:95:8c:2e:
53:eb:3f:73:3d:0e:e7:8c:6c:f9:4f:a2:c7:b8:69:12:ef:b8:
2e:52:ce:f2:3f:ac:a5:83:d5:e7:19:b6:b4:48:27:ad:98:49:
fb:2c:e6:c3:05:5d:04:fb:9a:d2:56:66:70:4f:4d:18:35:b7:
e4:61:0a:5d:87:ad:27:a7:2c:ba:4b:f5:42:ff:b9:9d:93:61:
a3:01:61:db:0e:63:18:6e:1a:cc:37:85:25:cd:b0:b6:e6:32:
ad:6d:2c:6f:2d:69:59:a9:1d:6d:93:06:96:7b:f6:c1:72:0f:
ec:e2:d6:bb:b0:d8:b3:74:06:98:6a:11:ef:30:3b:a3:e8:6c:
64:f2:2f:99:94:03:b1:66:f7:4d:75:1c:f5:82:b6:43:a0:9f:
8b:7f:ec:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:12:58 2025 by rpki-client