Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
File: PuzIGOGpxqhRe81paldEKNbRekQ.mft (raw, json)
Hash identifier: ge4ptaAZOsPyowaqriWBRDQNOIwY4IC4njOWFIVYE+U=
Subject key identifier: FB:C1:CD:98:45:25:E5:39:BB:A8:CC:6D:0C:F7:96:B8:81:28:8E:20
Authority key identifier: 3E:EC:C8:18:E1:A9:C6:A8:51:7B:CD:69:6A:57:44:28:D6:D1:7A:44
Certificate issuer: /CN=3eecc818e1a9c6a8517bcd696a574428d6d17a44
Certificate serial: 0196C570BF2E0D4D5891B23F09178279155E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
Manifest number: 03E7
Signing time: Mon 12 May 2025 17:00:22 +0000
Manifest this update: Mon 12 May 2025 17:00:22 +0000
Manifest next update: Tue 13 May 2025 17:00:22 +0000
Files and hashes: 1: PuzIGOGpxqhRe81paldEKNbRekQ.crl (hash: Pvt18BAL3VNNE/0lHjyGa64qVZ+FWhGrfZbBrIxgdLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:bf:2e:0d:4d:58:91:b2:3f:09:17:82:79:15:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eecc818e1a9c6a8517bcd696a574428d6d17a44
Validity
Not Before: May 12 17:00:22 2025 GMT
Not After : May 13 17:00:22 2025 GMT
Subject: CN=fbc1cd984525e539bba8cc6d0cf796b881288e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:4e:11:a8:61:cb:71:7e:57:94:11:75:72:
70:51:92:8b:e9:5c:15:eb:7c:09:16:6c:53:8d:62:
dc:2f:16:9a:1f:94:89:33:f4:25:98:95:b5:1f:41:
7d:83:43:cc:44:c1:09:e0:1b:4a:4e:f8:3f:40:68:
18:4f:cc:7d:49:b3:34:ee:4b:99:2d:60:b4:24:e0:
be:79:52:b8:b7:c5:04:47:5e:3a:06:29:a2:ff:e5:
e6:4a:d7:8b:1a:bf:ae:ce:2e:92:f6:94:3f:9e:63:
a1:cb:4b:51:f6:53:a1:54:b2:29:37:af:83:a7:0d:
6e:0d:1b:c3:fd:4a:a8:ee:53:3f:85:38:2e:d4:d2:
22:fb:ed:28:c6:2d:84:68:5c:75:17:99:80:80:db:
90:63:26:a3:0f:75:45:58:15:97:f9:4d:35:56:66:
31:fe:c0:3f:0b:dc:ae:9a:a2:c8:00:b7:e0:55:62:
98:75:f8:8d:6c:a6:72:7b:ee:29:76:32:40:3e:2e:
f2:d8:37:40:74:2c:a8:75:82:07:d1:36:eb:ed:95:
8a:a0:61:81:21:b8:d2:33:2c:9f:00:9d:0a:16:02:
0a:ed:fe:61:c0:27:68:03:8e:eb:05:c3:05:40:fc:
b9:92:e6:9d:3b:d4:4c:08:2a:84:3b:50:8c:6d:5e:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C1:CD:98:45:25:E5:39:BB:A8:CC:6D:0C:F7:96:B8:81:28:8E:20
X509v3 Authority Key Identifier:
keyid:3E:EC:C8:18:E1:A9:C6:A8:51:7B:CD:69:6A:57:44:28:D6:D1:7A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ae:45:ba:ff:14:4e:f6:16:ce:cf:fe:0a:00:a7:61:c6:9c:
0e:d6:a4:2a:d2:5b:df:42:0a:08:c0:74:38:3e:42:3d:c3:fd:
f6:2b:a0:39:15:fc:08:8f:07:a9:a9:92:f2:25:55:1d:a1:dc:
f5:15:eb:18:70:9c:af:56:4a:2e:37:d7:db:a6:77:3a:54:a1:
c7:42:9a:23:ba:3d:27:39:bf:9d:5b:11:99:58:58:7c:bb:01:
af:08:17:79:d8:b1:80:1a:e6:1b:75:52:cf:58:6f:fb:cf:db:
28:0f:11:59:e5:83:d1:23:40:32:79:6b:e9:3c:5e:0e:ea:fb:
4f:9d:ad:cf:f3:07:cb:92:56:b4:5c:87:1e:c3:80:d7:98:db:
9d:36:74:ce:05:7b:17:69:7e:90:cc:11:8e:62:6b:83:56:48:
dc:b5:2c:b9:43:91:70:97:47:fc:a0:20:2a:3c:ac:96:03:bf:
a2:d9:ab:1a:8e:10:a5:17:76:0b:57:88:fa:fd:02:7d:33:c3:
ad:f4:7a:31:f9:6b:79:f8:67:f7:f8:48:27:17:79:8d:01:eb:
c8:32:27:47:3a:c7:30:1d:55:05:75:27:d5:da:33:b4:12:b2:
d8:94:88:2f:bb:7f:e6:79:a5:56:d0:03:90:d8:9a:5f:c2:78:
eb:2c:7a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:34:19 2025 by rpki-client