Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
File: PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft (raw, json)
Hash identifier: G1UZsF8h4/MQNbclbGFAQw27NCEKcbbxTIgRsas3jdY=
Subject key identifier: 50:18:C7:41:A6:36:93:2F:8F:89:2C:94:E1:F3:35:3A:BE:7A:CC:24
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0196BAED484CBD65D2BD66172544C78C3C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
Manifest number: 1006
Signing time: Sat 10 May 2025 16:00:34 +0000
Manifest this update: Sat 10 May 2025 16:00:34 +0000
Manifest next update: Sun 11 May 2025 16:00:34 +0000
Files and hashes: 1: PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl (hash: hJ9ZyAXh5iAJBluhvoBOrnK3B67X0G7ChiWvQX3Vjp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:48:4c:bd:65:d2:bd:66:17:25:44:c7:8c:3c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: May 10 16:00:34 2025 GMT
Not After : May 11 16:00:34 2025 GMT
Subject: CN=5018c741a636932f8f892c94e1f3353abe7acc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dd:69:6c:57:89:52:d0:62:c0:1a:3e:1c:73:
a6:f7:48:69:8e:1f:ac:68:f2:05:16:cb:1d:38:d8:
9a:0a:f0:27:be:23:f7:93:a4:ef:a4:61:f0:8e:f3:
12:e8:84:6b:23:b7:22:9b:ed:a7:f1:a2:ca:1c:0f:
b0:9d:90:a8:81:9f:cd:f1:fe:29:10:92:db:e5:e1:
09:ce:b8:ec:4f:55:3d:4e:38:77:76:08:96:36:00:
50:cc:46:c7:56:6b:a6:3a:2d:ac:cf:80:67:aa:1c:
74:f4:b9:09:37:66:32:36:5b:c6:44:42:ba:dc:5f:
59:8f:4d:a8:14:f2:5f:da:c9:81:db:48:b4:55:5e:
60:27:75:44:89:6f:2c:00:49:fc:0d:e4:00:8a:a6:
1e:3f:a2:6d:42:c8:12:21:65:5a:79:d1:57:71:52:
af:cf:d9:04:ea:2f:bd:c9:07:8b:33:28:15:33:3f:
51:9a:e7:dd:dd:dd:0b:32:5e:04:6e:fb:38:b1:85:
62:e4:4c:e9:ca:48:81:c2:80:f2:9d:16:42:a4:e5:
85:a1:5b:4f:cb:82:82:0b:15:bb:f8:12:89:48:9d:
ea:0d:93:af:c1:49:62:cd:98:19:af:8d:2d:34:6a:
46:b8:dc:0b:b0:3c:89:21:c7:41:27:ab:4b:94:0c:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:18:C7:41:A6:36:93:2F:8F:89:2C:94:E1:F3:35:3A:BE:7A:CC:24
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:99:d5:f7:07:29:2e:59:4b:44:f1:3a:bf:4c:9e:36:e2:94:
1c:4f:fc:5f:ed:19:a0:3f:a4:ec:27:17:db:04:7f:7c:e5:c3:
85:a3:d4:89:47:2d:31:b4:6a:70:73:28:c0:35:8a:2f:cc:66:
32:d8:9f:a6:2f:29:f1:e5:82:e9:b4:ac:b0:d6:36:9e:1b:e9:
1b:1b:dd:47:fd:8d:60:25:a0:6b:99:91:f1:eb:a2:42:05:a5:
83:b5:a0:ee:a4:be:71:a4:63:fe:c2:0d:f5:aa:3e:7c:46:40:
94:36:e1:d7:b9:00:a8:66:bb:25:c5:f3:15:21:5f:bf:92:05:
b7:4f:68:73:d8:b7:27:a7:d6:01:a9:02:2c:55:3f:13:9a:38:
c8:67:a0:9a:c8:89:7e:50:f9:e9:30:0a:ea:f7:01:ff:58:af:
55:67:3a:66:02:64:d1:4b:7c:3f:18:49:26:25:f7:06:71:0a:
8f:9e:a2:81:1f:09:76:06:5b:2c:f5:a0:54:b4:1f:21:e9:1f:
c1:64:1e:c1:83:e8:de:ab:1c:86:c7:fa:93:db:f8:94:16:6d:
b8:15:ae:69:2d:17:2e:ad:4e:b5:f0:af:08:61:04:13:ba:54:
eb:81:28:5a:f9:05:a5:9f:ed:f8:ad:cd:69:19:09:34:0a:e2:
9b:fc:7b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:32:31 2025 by rpki-client