Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
File: Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft (raw, json)
Hash identifier: mMhfsGrAEBG9+iJfKT93dF8X8axJWCzAhHcccKObrf4=
Subject key identifier: 95:E9:0E:82:8F:6A:C2:3A:3B:B1:04:9E:7C:E0:D9:C1:94:58:33:A7
Authority key identifier: 3E:0A:BA:30:F4:B4:04:FF:4D:EC:9F:C0:01:6C:0B:BE:E4:B6:B8:77
Certificate issuer: /CN=3e0aba30f4b404ff4dec9fc0016c0bbee4b6b877
Certificate serial: 0196C3F0AF0FD10571632EEE6C3548DD6EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
Manifest number: 03B6
Signing time: Mon 12 May 2025 10:00:52 +0000
Manifest this update: Mon 12 May 2025 10:00:52 +0000
Manifest next update: Tue 13 May 2025 10:00:52 +0000
Files and hashes: 1: Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl (hash: JOo1u4bdC1p2mzz9jbPKaejffy5i/RrWaBZydpQTUS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:af:0f:d1:05:71:63:2e:ee:6c:35:48:dd:6e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0aba30f4b404ff4dec9fc0016c0bbee4b6b877
Validity
Not Before: May 12 10:00:52 2025 GMT
Not After : May 13 10:00:52 2025 GMT
Subject: CN=95e90e828f6ac23a3bb1049e7ce0d9c1945833a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:47:8c:20:e1:26:a6:d9:9b:60:50:42:06:
0a:e1:00:26:26:d3:00:a3:20:5b:1a:d5:01:f5:5a:
61:4b:d8:b6:5a:7d:bd:1e:8d:16:86:d7:cd:7e:95:
c4:7c:07:d8:0a:e1:33:5a:d1:14:1d:55:10:cf:49:
be:88:2e:b3:b4:65:17:f0:95:de:1a:70:a0:d7:88:
76:83:d0:8e:2f:80:ec:9e:fc:a2:15:0d:66:bb:46:
12:d9:8e:69:c6:51:38:ce:a5:e2:0c:ca:0e:89:bb:
6b:00:16:e2:46:02:57:01:8e:6c:e1:ca:39:a0:ed:
e6:7e:44:8e:bb:15:c1:5c:60:5b:bb:42:10:1b:ee:
78:5d:83:6e:b9:a8:69:6b:cf:6d:3d:68:f3:92:2f:
e3:da:98:9d:81:60:01:c3:d9:f6:8d:db:52:a8:bb:
db:c2:9f:81:b4:21:99:41:d6:9e:ae:cc:db:b7:cd:
3b:26:4b:f3:00:0d:84:bb:7c:0e:63:21:d1:cf:0b:
82:d2:28:fd:1e:7d:66:5d:d4:41:9b:8d:be:c4:04:
a2:7a:b6:27:4f:47:07:23:97:41:2c:bc:e7:31:b8:
f1:78:07:2a:1f:26:89:ef:97:4d:66:0e:09:dc:1d:
97:e9:71:54:83:84:39:7f:7f:01:70:9e:55:d2:e4:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:0E:82:8F:6A:C2:3A:3B:B1:04:9E:7C:E0:D9:C1:94:58:33:A7
X509v3 Authority Key Identifier:
keyid:3E:0A:BA:30:F4:B4:04:FF:4D:EC:9F:C0:01:6C:0B:BE:E4:B6:B8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8f:b2:95:0c:d2:b2:99:39:45:82:81:1a:91:ba:e2:d4:ed:
a0:56:64:2d:5f:b0:3d:5b:d5:8b:ab:86:04:84:10:d9:42:c1:
0f:ab:6c:5b:08:2b:d4:41:73:7a:d4:3d:b6:c4:3a:36:c5:29:
b2:86:95:fc:c1:38:2c:b3:6b:69:4e:ef:27:dc:20:5d:89:04:
4a:51:f1:76:4e:38:ec:41:e4:79:4b:16:02:1c:97:ca:a8:b2:
ba:54:48:4c:d2:d0:81:4b:27:5f:2c:62:83:54:b9:77:96:1a:
5b:28:b3:bc:7d:7f:00:a2:9e:0a:35:e4:db:5d:87:3f:3c:c7:
c2:9e:49:10:93:bf:13:b9:69:72:30:5c:91:7f:5c:0d:64:a9:
39:93:3c:a4:45:d6:27:d9:18:b8:a2:c9:29:2f:68:25:50:fa:
70:a8:6d:2c:0b:23:10:e1:c6:d9:a9:8f:10:44:4d:8b:a9:47:
e4:b1:d6:3b:7f:5e:85:a8:1e:fc:b0:be:fa:cd:d2:cb:41:c3:
70:4e:80:57:34:ad:3f:a6:91:b8:7c:87:24:c0:92:a4:ee:c2:
c8:b8:ba:5f:4b:76:32:cd:fd:56:92:0c:4a:f0:7c:1b:eb:34:
d3:7d:5a:0f:f9:ab:a4:d1:0e:fa:e6:0f:02:94:04:d5:ea:10:
05:95:07:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:03:34 2025 by rpki-client