Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
File: PRgTEVbDK1enN4cYxgiq46mWXCs.mft (raw, json)
Hash identifier: 850uKbuhvphsJB+FIyFeBKk5auUd8D8vkdQcyU7TSLQ=
Subject key identifier: 71:8B:79:26:7E:D5:E8:83:1F:BA:6F:8C:46:FD:82:7A:87:F1:22:C8
Authority key identifier: 3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
Certificate issuer: /CN=3d18131156c32b57a7378718c608aae3a9965c2b
Certificate serial: 0196B7B520FFA9D47195F080B0F764A4F732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
Manifest number: 152C
Signing time: Sat 10 May 2025 01:00:22 +0000
Manifest this update: Sat 10 May 2025 01:00:22 +0000
Manifest next update: Sun 11 May 2025 01:00:22 +0000
Files and hashes: 1: PRgTEVbDK1enN4cYxgiq46mWXCs.crl (hash: ImYXjwNM/QhpEwUHYUP00pZGDnWWum3M4MZ1/8VlU2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:20:ff:a9:d4:71:95:f0:80:b0:f7:64:a4:f7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d18131156c32b57a7378718c608aae3a9965c2b
Validity
Not Before: May 10 01:00:22 2025 GMT
Not After : May 11 01:00:22 2025 GMT
Subject: CN=718b79267ed5e8831fba6f8c46fd827a87f122c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:d1:dd:85:bc:cf:d9:03:3d:a3:26:1f:d3:
12:66:21:a6:84:7f:4f:12:f4:b7:51:bd:e0:45:0a:
82:98:39:96:a4:fe:1c:49:96:f0:e7:2a:ce:b9:83:
f7:45:78:c0:7b:db:ae:43:d5:c7:bd:ba:1d:0a:d4:
ae:33:e3:0c:a6:93:21:a2:cd:aa:67:c9:46:7d:01:
62:c4:74:9d:be:8f:32:23:26:0d:3f:e8:8c:74:e3:
d2:48:a6:c5:61:f4:04:b5:68:74:ee:e1:f2:77:d1:
8c:aa:f2:fd:a7:cf:aa:c4:dc:6d:f3:60:21:d9:88:
dd:e4:f8:34:ab:78:b8:7e:54:3e:98:c2:08:a0:b2:
02:71:ea:37:7a:52:4b:af:b1:44:f1:47:45:6d:3b:
ab:13:93:ba:21:9e:2d:e9:4b:da:29:2d:78:c6:94:
9e:bf:bc:c2:a4:d7:e0:8a:6b:cc:f9:ec:c3:6a:40:
5f:69:44:91:fc:94:f5:19:c1:c2:8c:2c:26:1f:e7:
d7:3e:6d:e6:cb:b5:a1:b7:ec:b0:e6:c2:3f:03:aa:
3e:ae:68:6b:c1:9c:79:28:8d:0a:6a:0c:5c:6d:9d:
df:39:64:60:4b:ab:96:cd:c3:ef:07:91:4e:db:a7:
8d:a4:df:80:fe:63:69:b2:bd:fe:f8:8e:30:47:58:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:79:26:7E:D5:E8:83:1F:BA:6F:8C:46:FD:82:7A:87:F1:22:C8
X509v3 Authority Key Identifier:
keyid:3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:94:c8:55:b4:b6:b0:ec:ea:71:c2:91:76:39:d3:9c:6f:c2:
6e:b3:77:7c:31:a8:1f:48:6a:9f:66:d7:e4:70:6b:c8:ea:32:
ed:ff:b3:97:2c:54:14:d7:d2:2d:47:a6:cf:47:76:1a:a3:1a:
0a:dc:53:23:95:76:41:e5:33:4f:68:b9:8c:61:aa:c8:0f:44:
11:0d:04:3b:a3:40:11:2d:8d:22:49:7b:19:d6:ee:ce:ea:10:
41:71:68:59:86:57:e6:a1:97:11:34:cb:ac:ab:f6:0f:f0:9d:
2a:03:00:d7:1a:83:8f:24:d3:a7:d2:61:20:8a:3e:33:0e:21:
45:5e:7c:d2:ea:c8:dd:57:99:63:9b:b0:44:9f:9b:d3:53:3b:
a5:5a:66:f0:e9:a7:8b:ab:86:55:bb:d2:27:77:ad:e6:7a:7f:
19:49:b5:58:97:31:80:08:27:ef:36:21:4b:41:85:e0:bb:41:
7e:c8:a6:d4:2b:44:5a:f5:b4:9a:79:40:24:76:b9:2a:73:db:
d4:a0:f8:bb:94:75:e1:6f:c5:ba:74:88:06:1f:0f:b2:3d:2d:
92:b1:61:69:3a:50:0d:40:16:69:47:84:c8:10:14:37:06:cf:
d7:cf:ae:51:f6:ba:18:82:29:6f:ac:20:4b:a0:60:a1:a7:31:
72:71:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:16:57 2025 by rpki-client