Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
File: PrEhzwYygZ7s6r64qVVpxnUpiCE.mft (raw, json)
Hash identifier: aRA+n8arGU1TJYypp5fU7zOHnk4HWsZ9DbVS/ttTGsk=
Subject key identifier: 24:43:15:E7:56:E8:87:EC:17:7A:2B:83:68:20:55:42:5E:97:3D:FF
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 0196CD61DC7AA0B713F3322B84F78C522B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
Manifest number: 10C0
Signing time: Wed 14 May 2025 06:01:04 +0000
Manifest this update: Wed 14 May 2025 06:01:04 +0000
Manifest next update: Thu 15 May 2025 06:01:04 +0000
Files and hashes: 1: PrEhzwYygZ7s6r64qVVpxnUpiCE.crl (hash: /k19So0xm+lLcOnwCzo2haOAAnZ4SsboN0Hwe1Z7tmU=)
2: _k-LVkRidjyVBxM5JDfBSAF4xXQ.roa (hash: sWdlQ6il1efqRiBOryvgVXuddGRGIEg9GvemLG8GNq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:dc:7a:a0:b7:13:f3:32:2b:84:f7:8c:52:2b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: May 14 06:01:04 2025 GMT
Not After : May 15 06:01:04 2025 GMT
Subject: CN=244315e756e887ec177a2b83682055425e973dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:35:bf:f9:e0:32:ea:8d:b0:f6:8b:67:a1:
d0:0c:8d:c2:18:10:53:35:dd:25:a1:0d:92:90:18:
a1:c8:80:40:00:64:11:9a:7d:ee:9c:20:99:f2:05:
da:ea:f8:e2:6f:c9:d3:4e:a4:e6:fd:e3:8e:df:41:
09:ba:96:85:5f:88:91:7b:27:55:c9:94:63:f6:8f:
cf:78:3e:f8:98:5b:2b:68:df:a8:6c:aa:2b:2c:92:
26:95:9d:a8:27:59:0d:ef:e2:dd:17:38:15:cc:ca:
44:38:db:8f:48:80:8a:42:44:5e:fd:42:61:c0:2c:
d6:5d:38:5b:e0:68:ca:56:92:cb:32:6c:15:5f:42:
7b:57:23:be:fe:ec:83:e4:bc:61:a1:8b:d7:08:7d:
05:9e:45:21:a1:21:be:28:12:a2:2a:a9:57:91:a2:
c9:d6:85:6a:c3:cf:51:d4:0c:0b:4e:0e:e3:e1:d5:
bd:2e:f7:7b:39:2f:79:6a:e0:97:14:f1:56:7e:4a:
21:3e:fa:73:49:38:f3:08:8f:f3:21:6b:63:43:40:
1c:37:f9:fa:4f:d8:e4:e0:7f:20:da:59:f4:2e:9a:
93:b3:dc:d7:4b:35:6f:e5:6b:9e:1d:27:3a:72:81:
8a:1d:b8:fb:e3:53:f6:32:c7:90:87:46:19:6a:1c:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:43:15:E7:56:E8:87:EC:17:7A:2B:83:68:20:55:42:5E:97:3D:FF
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1d:92:0a:b3:b6:d8:55:c3:b8:b8:7c:96:03:3b:72:33:72:
de:b5:bf:4a:b8:0e:f4:3f:47:d9:c2:ff:79:2f:bc:4b:2f:6f:
c9:16:37:f3:02:3d:33:45:7a:ff:59:5f:ae:51:5b:4f:5d:dd:
35:46:ea:53:3b:d5:4a:4d:62:3b:6b:83:b2:c8:ec:d5:37:5f:
79:76:4c:19:38:e3:92:86:bb:93:1e:ba:e9:73:93:62:d6:47:
03:e6:21:63:e9:18:0d:a1:04:87:07:e3:43:b3:2d:5d:e3:d1:
ae:bd:fb:0a:34:9a:be:08:df:1e:2c:fa:db:95:60:34:88:4a:
80:87:04:4e:a2:26:cf:04:1a:87:0e:f5:69:ac:8e:e3:86:72:
bd:e4:ea:bb:ca:0b:58:a8:5a:31:60:3e:78:60:2f:72:2e:82:
6d:e7:d4:49:60:fc:c0:6d:92:a8:89:8a:e6:bb:87:43:33:29:
ba:ee:89:87:ab:a7:94:e9:ea:97:e5:6d:33:d5:8d:9d:91:d3:
dd:61:dc:b3:86:10:df:99:fb:a7:ff:55:d8:df:7c:f7:6f:5a:
fc:d4:e9:97:d2:bb:f2:7b:ff:39:d4:ac:10:9d:8f:c3:3d:24:
53:93:bb:93:e5:af:de:c0:3b:71:cd:da:34:f8:77:79:75:0c:
64:f7:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:33:58 2025 by rpki-client