Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
File: pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft (raw, json)
Hash identifier: wjfx2NCgEqOdGDv39DlDomZvS5XCwlan8xm0DtG3+AE=
Subject key identifier: 72:78:F4:EA:10:11:3A:31:34:C2:85:71:C8:25:5D:13:3B:CF:21:4F
Authority key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
Certificate issuer: /CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Certificate serial: 0196B7476EE7E4D48312BBE9C2885F887D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
Manifest number: 035D
Signing time: Fri 09 May 2025 23:00:33 +0000
Manifest this update: Fri 09 May 2025 23:00:33 +0000
Manifest next update: Sat 10 May 2025 23:00:33 +0000
Files and hashes: 1: pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl (hash: wn0DmUNhYC54E/Rl/jrQPp+VXbwX8UM3DBPULds/W48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:6e:e7:e4:d4:83:12:bb:e9:c2:88:5f:88:7d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Validity
Not Before: May 9 23:00:33 2025 GMT
Not After : May 10 23:00:33 2025 GMT
Subject: CN=7278f4ea10113a3134c28571c8255d133bcf214f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:cd:82:ad:be:01:e0:3b:1e:31:eb:68:f4:
bf:bd:7c:ce:5d:b3:0a:22:33:8f:09:6c:40:74:d2:
a7:4a:94:9d:16:4e:b5:e7:db:2a:84:c5:cb:6c:ee:
2d:55:a4:91:f7:b2:1f:5d:c9:57:0e:ff:7a:05:60:
7e:b2:23:6b:e6:bf:c6:3f:5f:8a:90:e8:ec:74:d6:
ad:94:21:be:c9:8c:84:49:36:f0:51:83:50:a2:53:
03:22:71:62:ba:8c:1a:77:bd:80:1c:f2:fe:e2:df:
c5:01:f7:33:aa:72:5a:0c:8f:3e:d6:b0:21:26:61:
b3:0a:45:dd:6a:2c:38:6a:c1:17:76:4b:c2:8f:ec:
a4:dd:85:49:5a:53:f2:9c:c9:53:79:2e:94:2c:da:
6b:0d:f8:f8:cb:00:71:48:6e:c3:3e:51:b9:85:52:
71:63:33:84:48:8a:db:8d:59:e4:6b:7d:ea:cd:a9:
a4:52:f8:e3:53:c2:10:92:a2:c7:86:1e:3e:55:88:
2d:1b:e6:0b:1f:50:7b:f4:ee:db:a4:9e:37:07:a5:
2e:f6:27:75:bf:0b:3e:62:c0:b5:4c:c9:4c:72:ef:
fb:6b:6a:43:97:c9:1a:53:23:bc:cd:51:22:14:c9:
90:65:d2:25:b2:91:ba:b3:de:8c:b7:35:40:d2:24:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:78:F4:EA:10:11:3A:31:34:C2:85:71:C8:25:5D:13:3B:CF:21:4F
X509v3 Authority Key Identifier:
keyid:A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5e:21:91:a1:1b:9e:fb:e4:eb:c3:3d:ba:24:5a:1b:78:9a:
78:df:7e:13:bb:bd:84:82:d8:35:72:31:f7:3a:8c:52:85:5d:
d1:f4:97:cb:8d:d7:77:2a:39:1d:83:fa:6e:48:15:c0:0c:87:
0b:08:bb:0f:b8:bc:ab:ee:90:39:86:e3:cd:3a:db:01:94:62:
6f:50:bb:72:3f:01:bb:37:da:78:cb:bf:68:1e:de:e1:0e:1c:
40:fb:7b:68:1c:88:44:cc:81:bd:f9:14:34:c0:53:3c:f2:d6:
28:2a:bb:30:85:78:18:94:53:c6:9c:18:1d:b9:97:e3:ef:84:
a8:f6:11:d6:f4:8e:8a:8d:68:be:df:d4:15:5d:36:08:b7:99:
4b:a7:f6:96:c8:c0:93:c3:dd:59:fe:a5:54:94:81:e4:48:ea:
74:65:0b:28:62:c5:81:b6:c2:a3:61:d8:1b:30:37:c9:c6:5f:
af:5d:cf:15:65:9e:4d:81:89:00:69:aa:5a:50:cb:2a:59:17:
09:7c:21:ca:b1:ab:0e:c4:90:c3:b4:cc:1c:fa:f9:59:6d:ba:
17:ed:bd:18:f2:0c:6e:86:fe:73:95:c8:88:0e:bb:74:61:bc:
89:53:ec:75:21:b7:da:31:42:84:41:2c:8f:9e:e6:63:99:ec:
1e:f7:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:38:07 2025 by rpki-client