Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
File: PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft (raw, json)
Hash identifier: Fh4RFk6LteKWVYT1Oist7xCsAWuRdbAykiyn+sayXgI=
Subject key identifier: 8D:A5:64:81:6E:7F:BC:9B:01:9C:17:5C:1B:48:B9:33:24:77:4E:F5
Authority key identifier: 3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
Certificate issuer: /CN=3c1415421685ace3682f161d310d92726cdfb097
Certificate serial: 01969CAC62CA8123390022CB6585C6F0F2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
Manifest number: 151F
Signing time: Sun 04 May 2025 19:01:05 +0000
Manifest this update: Sun 04 May 2025 19:01:05 +0000
Manifest next update: Mon 05 May 2025 19:01:05 +0000
Files and hashes: 1: PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl (hash: kptKmbqUTU22cRJXAvogKnRqCw8JOVYShmp24JBfYYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:62:ca:81:23:39:00:22:cb:65:85:c6:f0:f2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1415421685ace3682f161d310d92726cdfb097
Validity
Not Before: May 4 19:01:05 2025 GMT
Not After : May 5 19:01:05 2025 GMT
Subject: CN=8da564816e7fbc9b019c175c1b48b93324774ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:8d:4b:27:e2:95:06:54:71:ec:5b:42:fc:
83:74:4a:60:3c:86:61:70:72:cf:8a:3f:d3:9f:58:
f6:15:88:9b:4d:85:4d:b5:1c:eb:c3:25:32:2e:46:
4c:99:d1:5f:63:af:2e:66:7d:5d:36:64:f1:42:04:
c8:6a:ef:e2:0e:21:ff:a8:84:1a:05:0d:c6:b8:e8:
09:0e:cb:3f:5c:34:24:84:12:44:9c:b6:7b:31:d9:
87:d9:67:f9:9e:c1:76:b7:9a:05:47:5a:84:33:d2:
a2:86:25:fb:89:1d:f8:ff:43:05:88:d5:b7:70:49:
72:e4:cf:1c:ee:b5:01:5c:4f:56:da:38:50:d2:43:
4d:02:51:7a:a2:6d:27:77:e0:65:d9:0a:56:eb:d7:
d7:f0:68:b8:47:8d:f2:b4:41:6c:a3:7d:b9:e5:ec:
0c:93:27:2c:9e:a7:93:95:c1:f3:92:fc:84:4d:cb:
22:46:d5:68:6d:b7:db:e7:76:cc:f8:10:50:5f:d5:
11:ed:0a:72:cb:6b:44:75:cc:9a:0f:7b:06:b6:2f:
49:c7:2f:bb:2e:3b:6e:ae:65:d9:aa:f1:d8:95:db:
03:c5:13:15:86:a5:31:d3:0b:6e:a5:24:75:7b:59:
6f:f5:80:a9:23:0d:a7:af:aa:43:d9:a0:bb:13:96:
f0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A5:64:81:6E:7F:BC:9B:01:9C:17:5C:1B:48:B9:33:24:77:4E:F5
X509v3 Authority Key Identifier:
keyid:3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8f:95:d8:b2:8c:63:83:a0:4d:a8:d5:6f:52:fc:e1:7f:d7:
99:a4:2c:f2:d2:2f:e8:26:b1:9b:71:4b:85:71:ff:46:6e:0a:
5c:75:50:f8:30:84:9f:6e:04:ad:b3:b7:14:ad:d0:ce:62:2c:
12:36:86:6d:6a:ff:16:1c:c9:7a:66:6e:de:cb:a7:42:d5:a4:
89:69:91:97:df:f6:e8:3c:84:3f:49:e7:b9:08:f7:9b:f5:09:
e8:78:55:fe:1d:c0:c3:62:63:ab:16:9c:be:3a:99:4c:32:5f:
95:ec:99:c3:92:d3:1e:5e:c1:4a:58:21:9d:39:1e:48:95:fa:
6a:67:06:af:90:b7:a0:f4:84:3b:7d:de:73:c7:b2:93:8d:03:
f0:62:4e:07:ab:b7:b5:00:a8:3b:57:64:07:bf:10:6f:04:63:
b2:30:5c:37:b2:3b:e8:07:df:01:64:8d:8e:ee:5c:01:b7:0c:
0a:b2:e1:f5:9e:e1:70:0a:35:2d:33:0a:96:60:0d:9c:c5:fd:
f4:17:38:d9:51:7b:a3:0f:3c:e2:e1:e7:d5:58:78:4e:51:3a:
9f:7e:4a:47:58:42:b6:db:61:74:cf:f1:73:81:c5:34:f0:a4:
cb:ce:66:f1:ae:eb:bd:53:a0:59:19:1f:81:52:62:9b:bf:60:
9f:f3:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:55:40 2025 by rpki-client