Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: zShjKSTPdZKpPOKF5AzRAcWvr0sbhAXl7sajVF73aEY=
Subject key identifier: 70:A9:C0:62:98:09:41:EA:8D:F9:10:98:C7:1B:4E:E6:4C:9F:14:45
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 0196E043CF22F45B565B133841C8A493450A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 1547
Signing time: Sat 17 May 2025 22:01:02 +0000
Manifest this update: Sat 17 May 2025 22:01:02 +0000
Manifest next update: Sun 18 May 2025 22:01:02 +0000
Files and hashes: 1: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: HqFl4jMJ1WWTXXNqX2wRhfrYooskcRmghPXt5xuS89o=)
2: yxseiDrTDKkfKumKkJUQ-S699SM.roa (hash: jMn0qSGQuB1rlWwE3sPg8LRuW4ybf3WJJD6jW2FPlxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e0:43:cf:22:f4:5b:56:5b:13:38:41:c8:a4:93:45:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: May 17 22:01:02 2025 GMT
Not After : May 18 22:01:02 2025 GMT
Subject: CN=70a9c062980941ea8df91098c71b4ee64c9f1445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:50:f3:49:26:ff:6c:89:03:ea:4b:0e:c0:
fa:97:90:48:27:16:c0:9a:6d:5d:11:71:5b:ba:a7:
d5:6d:6b:a2:1c:68:c7:f1:9a:9f:b6:31:97:64:51:
02:12:a0:3a:07:cf:cd:c4:a9:c5:d8:99:10:8f:44:
bf:c3:8a:ff:b7:ad:ce:d4:b2:f3:51:1c:89:9a:57:
94:49:28:db:54:c2:99:a2:e5:9d:14:20:8d:b6:b9:
23:6c:34:b7:52:93:48:e8:89:ad:30:f7:d1:3a:4c:
4d:13:99:02:d8:36:76:59:35:20:63:3c:21:35:31:
78:d3:39:4d:7d:7e:a9:0e:0f:14:ef:f7:a0:ff:1b:
f8:6a:1e:b6:0f:a2:ea:f1:77:67:8b:a5:e9:2b:60:
00:2e:f2:26:14:16:a6:5a:80:ce:c0:45:15:12:5f:
9f:19:b0:29:2a:99:b7:70:8c:aa:11:92:96:e7:04:
2f:f7:6b:93:90:62:57:59:c5:37:21:7e:c1:75:a6:
1f:6d:8c:2e:45:8f:97:19:9b:d2:4a:67:81:3b:89:
ef:42:9e:f7:1d:10:88:5d:ed:cd:d4:4e:16:98:2b:
b3:6d:55:9c:a8:49:2b:04:48:78:25:b2:23:de:c5:
66:83:08:02:d1:9c:cb:4c:85:33:c7:a8:57:f6:0c:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A9:C0:62:98:09:41:EA:8D:F9:10:98:C7:1B:4E:E6:4C:9F:14:45
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:87:4a:b2:6d:6e:99:db:84:2e:7c:27:59:7c:0e:e7:6d:f4:
8e:a1:b7:32:88:a9:27:a0:25:f2:1b:f3:04:2a:bb:62:9e:1f:
fe:73:a8:e6:60:2b:3e:ad:7f:38:c4:38:3e:65:da:bf:ad:29:
25:86:9d:8b:9c:73:7e:b8:64:9b:7e:b6:96:ef:f4:b4:0b:18:
23:0c:3b:67:fe:d7:f4:aa:60:ce:a4:91:67:9e:af:d9:be:59:
b7:88:05:d3:43:31:7a:97:e7:eb:64:01:e0:64:da:3f:0f:bf:
89:5f:42:a5:2d:98:fc:c6:a3:d8:be:97:bc:2c:90:5b:96:ff:
ee:cc:5b:49:2a:ac:22:7d:12:3a:2f:d8:7f:95:dc:0a:5c:04:
c4:cc:83:48:4a:a6:07:e4:a5:d4:0a:9f:85:74:a7:96:9e:d7:
dc:4a:78:1c:2f:e7:39:ed:de:2e:41:48:4c:71:70:b2:ea:ae:
6b:a3:f4:fa:63:40:c6:bb:72:95:b2:6f:2d:2a:d2:a3:e2:6a:
39:8c:54:a6:61:96:2f:52:8f:eb:df:76:27:53:0c:1f:53:90:
5b:71:5a:63:2d:cd:21:67:a7:a2:e8:6b:63:bb:f1:46:44:d3:
8d:d5:02:92:67:24:0e:41:84:84:f5:1b:fe:56:84:b8:be:77:
86:10:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:52:37 2025 by rpki-client