Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
File: pffZAsirU0AJh6GIKrJ_fPoBt0A.mft (raw, json)
Hash identifier: fBKruVM/IVI1pAgjEvelUlzK/a9TOCX6xUMHDiH9jnI=
Subject key identifier: AF:F3:13:6F:97:C0:4B:EC:59:F8:B4:0D:67:A0:16:2C:F0:13:E5:1B
Authority key identifier: A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
Certificate issuer: /CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Certificate serial: 0196C9BB5C9AC19EAE9F47FD0A2D82A9995C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
Manifest number: 0193
Signing time: Tue 13 May 2025 13:00:21 +0000
Manifest this update: Tue 13 May 2025 13:00:21 +0000
Manifest next update: Wed 14 May 2025 13:00:21 +0000
Files and hashes: 1: pffZAsirU0AJh6GIKrJ_fPoBt0A.crl (hash: PH3L+KDAxEawu7UeVXP+TlR2oXHkUN1DGQlVOV+mX5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:5c:9a:c1:9e:ae:9f:47:fd:0a:2d:82:a9:99:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Validity
Not Before: May 13 13:00:21 2025 GMT
Not After : May 14 13:00:21 2025 GMT
Subject: CN=aff3136f97c04bec59f8b40d67a0162cf013e51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:7f:35:06:a5:65:f5:e5:60:99:e5:c3:50:
0b:3b:46:6a:cf:46:f3:86:e1:48:d3:30:aa:b1:0d:
74:1d:c7:09:f8:55:03:cd:52:85:19:27:8f:4f:66:
cb:70:5c:e3:22:c6:e3:d4:6f:97:a9:fc:6c:f7:37:
92:59:52:dc:ed:58:c2:a1:83:71:cd:3e:37:c4:5b:
26:2b:e4:05:1e:79:48:66:ba:0c:34:93:a7:ce:43:
48:71:1f:fb:25:89:19:1d:e2:35:b2:26:a6:ac:9e:
0d:21:b0:43:1f:6f:7b:38:f0:1a:a0:e0:14:f5:cc:
12:47:49:7a:df:c4:fd:0b:ad:0f:98:b3:e2:bf:d7:
7e:81:5f:1a:bf:b5:71:bc:f6:01:a1:bd:e8:9a:ac:
52:f9:19:9c:c1:b8:2c:ad:61:52:e4:b0:d9:ca:cd:
a3:73:3b:74:5e:27:7b:16:58:67:5a:14:77:7f:2b:
3a:1f:00:5a:23:38:07:00:03:1d:2a:35:00:a8:56:
6a:e4:55:96:6d:15:81:90:1c:bb:5a:a8:de:16:57:
8c:c2:61:cc:b9:8c:63:85:b7:1c:ad:ed:f8:23:6e:
4a:a7:00:63:27:ed:8d:5a:d7:20:6f:75:65:06:61:
70:54:5e:18:13:48:6b:b2:b7:c5:4b:7c:6a:51:e8:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F3:13:6F:97:C0:4B:EC:59:F8:B4:0D:67:A0:16:2C:F0:13:E5:1B
X509v3 Authority Key Identifier:
keyid:A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:db:2e:bf:da:17:ce:91:1b:56:d6:c0:aa:9e:ec:16:86:d8:
89:82:95:2e:0a:6d:a6:5d:18:47:14:12:6b:66:4c:28:ea:38:
c0:2f:38:68:63:03:a6:81:3e:2d:99:82:b6:68:cb:65:c7:50:
ad:e1:e0:5f:27:57:5f:27:38:ca:a5:c8:41:f3:6c:ed:47:7f:
00:e5:dd:51:7d:f9:ec:a8:a9:67:c9:36:63:ab:ba:3a:be:47:
00:39:5f:9f:bb:4a:88:e7:d7:14:93:0e:8d:73:a0:2c:4f:95:
50:77:3f:bf:51:85:8d:31:68:e5:17:85:e8:96:19:99:37:8e:
e6:1a:7c:ce:55:68:1b:8e:7f:2c:41:b0:cc:12:e3:8b:e5:56:
46:48:14:58:f4:08:b8:f3:5a:2f:be:9c:8e:b4:be:65:68:52:
a6:42:bc:d9:02:eb:61:87:36:ad:69:e0:55:35:39:ff:bf:d1:
29:68:a5:80:73:e7:6d:e9:48:40:18:ed:0b:62:54:66:7c:60:
92:9b:44:27:0c:d0:d0:c1:94:03:58:55:93:69:9c:c8:ea:3c:
cc:b5:bc:18:9c:08:15:ae:af:12:3c:38:6b:23:62:76:16:6d:
e0:bb:42:e6:59:2d:00:f8:5d:60:c4:7e:c5:31:1f:fd:f9:b8:
82:83:f3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:03:57 2025 by rpki-client