Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File: pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier: m2pg8M+9fX+kOaEphKG8t4SIHPedt3YrzCWmfqHGDDE=
Subject key identifier: 82:CC:7E:8B:A4:1A:D8:9D:21:61:27:E0:05:20:AF:C4:DE:9C:DA:7E
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial: 0196C34C62CBB6C8C5DBD9671284BA708EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 07:01:25 +0000
Manifest this update: Mon 12 May 2025 07:01:25 +0000
Manifest next update: Tue 13 May 2025 07:01:25 +0000
Files and hashes: 1: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: gaw2VtQ3yuPX+InsnFZ3NJPrW275HtzBQQWAriF5cbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:62:cb:b6:c8:c5:db:d9:67:12:84:ba:70:8e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Validity
Not Before: May 12 07:01:25 2025 GMT
Not After : May 13 07:01:25 2025 GMT
Subject: CN=82cc7e8ba41ad89d216127e00520afc4de9cda7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:92:06:61:d7:1e:f5:d8:76:6b:eb:57:75:
f7:15:2b:3b:e2:0f:dc:63:4b:11:28:f7:7a:e3:93:
58:f3:e5:62:3f:36:27:db:30:75:56:25:1c:d4:0a:
8f:d6:d8:c3:54:64:8c:1f:8f:a3:87:91:5a:6d:5a:
27:5f:76:02:9d:89:f3:d4:e3:66:aa:57:bb:46:cf:
8e:a6:9e:ad:99:35:ec:3a:ce:4e:1d:26:8a:cd:6f:
24:b8:f5:d1:1b:93:2d:75:2a:a6:97:94:80:28:e9:
fe:ef:86:76:59:a2:df:c8:14:2f:68:87:99:0d:59:
09:f0:21:ef:6e:db:c8:8a:7b:35:dd:fe:1b:ab:71:
ee:80:a3:6d:10:c6:03:dc:ec:58:0c:2b:c3:59:87:
42:5a:6a:5f:db:2a:9c:d6:f7:af:6d:23:99:9b:69:
06:96:3f:5f:ec:ff:49:09:e1:1d:16:1e:cf:c3:d0:
24:9e:dd:f2:43:dc:67:de:5d:88:0c:35:0d:de:67:
fb:8a:df:08:a5:6e:52:f8:c3:ff:b3:28:85:a5:af:
73:77:39:08:e2:95:6b:30:c8:b6:50:a2:dd:5f:41:
8f:74:d4:97:d9:6c:a8:5b:92:47:d3:a2:98:8b:da:
7c:e1:e4:90:72:46:6e:3d:a3:3a:6f:b6:8a:b0:79:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CC:7E:8B:A4:1A:D8:9D:21:61:27:E0:05:20:AF:C4:DE:9C:DA:7E
X509v3 Authority Key Identifier:
keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:59:c9:bd:41:ae:e7:0d:35:19:bd:c0:d5:aa:f3:ab:40:a6:
7b:18:3f:28:f9:ec:37:04:9e:0b:90:ed:ba:bd:26:bb:48:b0:
71:bb:9f:ef:9c:28:e8:e7:dc:e8:c0:38:28:7b:79:be:69:d7:
6a:d8:97:a0:7e:6f:d5:47:68:39:5e:41:3c:dd:db:6f:32:45:
06:23:b3:c2:34:24:25:3f:6a:3f:c0:3d:69:d9:52:e8:4b:e3:
c4:cf:55:28:87:66:6b:9e:dd:0e:cd:ef:01:c8:a2:a0:61:4e:
63:a3:98:68:fb:ae:f6:d8:95:6e:58:75:67:b6:f8:e0:79:c1:
b9:1e:5a:05:4a:45:c6:0b:9c:be:25:b9:85:98:69:1e:c9:47:
68:21:86:41:54:4e:0c:21:77:ef:d1:39:f0:a5:2d:23:ae:d7:
4f:ab:0b:d3:05:85:22:77:28:83:1d:c6:cb:b3:30:42:3a:f1:
32:9b:aa:51:ea:a0:21:41:43:7e:12:f7:e1:72:7b:f1:90:59:
aa:49:d7:a0:00:2d:6d:38:e9:f3:bc:65:15:92:28:17:49:f7:
28:4a:28:9d:fe:ab:64:2c:49:e8:9a:5f:c0:53:fe:d3:dc:d9:
a4:61:3a:68:b0:f8:f4:bd:dc:7c:5e:8b:c8:cf:34:83:1d:cb:
a3:b7:9f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:41:07 2025 by rpki-client