Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
File: PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json)
Hash identifier: S3C9e/XhLKQK6fjd8m1U1gjZLf2LNK3AVMVPkwbgqvA=
Subject key identifier: 1C:83:55:09:08:FE:71:2F:B8:16:E3:62:48:3E:25:4C:70:34:2F:53
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial: 0196C34B5CEDF4203E17788C1016101D39C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
Manifest number: 093D
Signing time: Mon 12 May 2025 07:00:18 +0000
Manifest this update: Mon 12 May 2025 07:00:18 +0000
Manifest next update: Tue 13 May 2025 07:00:18 +0000
Files and hashes: 1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: ZEwgauN6BqCLP/9hzlvYaq32Gq+jnzMyBv5OkaRE+G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:5c:ed:f4:20:3e:17:78:8c:10:16:10:1d:39:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Validity
Not Before: May 12 07:00:18 2025 GMT
Not After : May 13 07:00:18 2025 GMT
Subject: CN=1c83550908fe712fb816e362483e254c70342f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:83:35:b5:3d:ea:39:58:a7:89:6b:c4:28:
54:0f:5c:32:3e:d7:79:a6:82:df:5a:16:a2:7b:e7:
dc:9c:1b:9e:cd:76:f7:45:82:4f:55:db:3f:75:50:
5d:34:0f:5c:25:e5:bb:10:f5:57:17:04:d6:b2:c6:
c6:c2:0c:f2:d5:af:fd:46:79:a5:53:2a:9b:b0:1c:
e8:d9:20:52:a9:45:20:f6:95:19:34:41:60:03:ed:
92:4a:ec:c9:a7:5b:1f:ca:d0:88:3e:f4:38:b0:bb:
dc:94:cc:8c:e0:b3:49:0b:72:15:21:89:84:81:54:
2f:79:d7:9f:ed:61:cb:f9:66:f5:c0:4b:bd:17:e7:
17:41:f7:f3:03:d3:fe:5b:97:1b:09:f6:64:ea:df:
e3:47:18:00:ad:06:a3:80:08:d9:72:31:e9:91:3a:
6c:e3:8b:3f:8d:c5:91:53:2b:49:4a:f7:d0:ad:02:
02:e3:71:3f:c2:1d:31:63:42:87:02:e7:5a:1d:42:
b7:fa:d7:da:45:31:10:17:7d:07:a0:81:67:c6:e2:
cf:fe:bd:ba:aa:fa:6b:7b:6e:29:08:4b:7a:c0:8d:
5d:82:21:fa:ba:98:6f:c9:b0:2e:cf:d0:c4:c1:69:
0a:01:06:3c:20:80:69:ab:28:6d:43:61:98:d7:04:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:83:55:09:08:FE:71:2F:B8:16:E3:62:48:3E:25:4C:70:34:2F:53
X509v3 Authority Key Identifier:
keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d3:fd:e2:89:75:a2:fd:63:e7:eb:70:8e:a8:e3:15:6c:84:
8d:50:8f:b1:e3:7e:31:06:92:94:8d:87:ab:8b:5d:34:0b:be:
0f:59:39:54:6f:5d:e7:bf:30:9e:6e:98:4d:6b:57:61:4c:11:
26:3f:53:bc:8b:86:44:a6:f6:41:7b:96:ac:2b:71:28:10:b1:
dd:a6:79:6e:f6:72:02:a0:d1:92:ee:23:77:53:da:14:86:8f:
1e:83:49:0f:20:6b:ae:13:ab:c4:17:81:78:55:db:fb:2c:bd:
ff:9e:f8:08:a6:c7:56:48:c0:b1:2b:8f:92:97:3b:c9:3a:fe:
5f:31:45:4c:8f:d3:b3:a2:17:af:e5:24:6d:44:12:1d:b7:62:
e9:c4:f8:2d:a9:84:bd:ee:87:8f:1f:5d:cf:ae:2b:2f:c1:ca:
1f:9a:85:78:85:23:d6:63:33:ec:51:91:ea:58:17:4c:40:8f:
74:d2:10:b5:ce:77:ef:e0:9b:2c:bc:01:ac:6e:6c:33:8a:98:
9d:19:3f:d4:ec:d1:f4:83:bd:e8:0f:58:d1:4c:05:07:d1:ef:
50:d0:53:75:48:de:ba:79:a3:d2:8b:ce:63:70:1a:1e:cf:57:
08:3f:32:d6:a6:f0:7c:c5:bb:7c:f2:84:96:c7:b1:79:f6:0d:
e1:4d:9c:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS1zt9CA+F3iMEBYQHTnFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMTBiYmI5N2I1MzljNmJmODMwNTk1OTg1NTY2NWEwZTdh
YTZkOTUwHhcNMjUwNTEyMDcwMDE4WhcNMjUwNTEzMDcwMDE4WjAzMTEwLwYDVQQD
EygxYzgzNTUwOTA4ZmU3MTJmYjgxNmUzNjI0ODNlMjU0YzcwMzQyZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F+DNbU96jlYp4lrxChUD1wyPtd5
poLfWhaie+fcnBuezXb3RYJPVds/dVBdNA9cJeW7EPVXFwTWssbGwgzy1a/9Rnml
UyqbsBzo2SBSqUUg9pUZNEFgA+2SSuzJp1sfytCIPvQ4sLvclMyM4LNJC3IVIYmE
gVQvedef7WHL+Wb1wEu9F+cXQffzA9P+W5cbCfZk6t/jRxgArQajgAjZcjHpkTps
44s/jcWRUytJSvfQrQIC43E/wh0xY0KHAudaHUK3+tfaRTEQF30HoIFnxuLP/r26
qvpre24pCEt6wI1dgiH6uphvybAuz9DEwWkKAQY8IIBpqyhtQ2GY1wTHuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByDVQkI/nEvuBbjYkg+JUxwNC9TMB8GA1UdIwQY
MBaAFDwQu7l7U5xr+DBZWYVWZaDnqm2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJDN3VYdFRuR3Y0TUZsWmhWWmxvT2VxYlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mNzYzYTktNzE3Ni00ZjMyLTk3NjAt
MjIwMTY1YzNlNmRmLzEvUEJDN3VYdFRuR3Y0TUZsWmhWWmxvT2VxYlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9mNzYzYTktNzE3Ni00ZjMyLTk3NjAtMjIwMTY1YzNlNmRm
LzEvUEJDN3VYdFRuR3Y0TUZsWmhWWmxvT2VxYlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvNP94ol1
ov1j5+twjqjjFWyEjVCPseN+MQaSlI2Hq4tdNAu+D1k5VG9d578wnm6YTWtXYUwR
Jj9TvIuGRKb2QXuWrCtxKBCx3aZ5bvZyAqDRku4jd1PaFIaPHoNJDyBrrhOrxBeB
eFXb+yy9/574CKbHVkjAsSuPkpc7yTr+XzFFTI/Ts6IXr+UkbUQSHbdi6cT4LamE
ve6Hjx9dz64rL8HKH5qFeIUj1mMz7FGR6lgXTECPdNIQtc537+CbLLwBrG5sM4qY
nRk/1OzR9IO96A9Y0UwFB9HvUNBTdUjeunmj0ovOY3AaHs9XCD8y1qbwfMW7fPKE
lsexefYN4U2cGQ==
-----END CERTIFICATE-----
Generated at Mon May 12 09:11:15 2025 by rpki-client