Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
File: PP7M1r9kBrDPRPaCuTzYbjNGUko.mft (raw, json)
Hash identifier: rCopW/TL05sQJ4033UU5fq7WVjmRZgNb+Ehm08XaGOA=
Subject key identifier: 37:6B:CC:EF:D0:B4:1A:19:C5:85:C2:A2:86:0B:60:FA:33:03:7E:7C
Authority key identifier: 3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
Certificate issuer: /CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Certificate serial: 0196C917349C5E6699D3B226CA9E8A2A1661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
Manifest number: 10B0
Signing time: Tue 13 May 2025 10:01:03 +0000
Manifest this update: Tue 13 May 2025 10:01:03 +0000
Manifest next update: Wed 14 May 2025 10:01:03 +0000
Files and hashes: 1: PP7M1r9kBrDPRPaCuTzYbjNGUko.crl (hash: O6PZBxaKwNiBdl9/cNn2HAg6OqVL4O3AGV1BEIP+KU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:34:9c:5e:66:99:d3:b2:26:ca:9e:8a:2a:16:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Validity
Not Before: May 13 10:01:03 2025 GMT
Not After : May 14 10:01:03 2025 GMT
Subject: CN=376bccefd0b41a19c585c2a2860b60fa33037e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2a:17:2f:2a:55:cb:05:e7:df:d1:e5:b2:40:
c5:73:bc:b7:ed:8b:69:10:f0:ae:a6:2b:c0:48:ba:
02:cf:71:e2:b8:9f:64:96:f4:3b:2c:e7:60:56:45:
c8:bd:4a:9a:58:64:83:e3:5b:95:a1:b1:08:4e:cb:
80:aa:b2:c7:4a:44:41:0e:89:ba:a6:1e:7a:ab:d9:
e0:8c:d3:65:49:c1:56:8a:b4:5e:a5:8f:07:41:2f:
21:52:4a:94:4e:55:b6:00:6d:da:f4:00:27:55:55:
98:2e:be:ba:d7:f7:f1:d0:86:46:c1:bd:6c:bf:f2:
57:90:c6:67:9a:f5:ae:d0:4b:74:20:43:0d:56:94:
08:ca:80:b5:ab:c0:ce:9a:72:84:a9:39:28:c2:92:
b8:28:eb:2c:26:b7:f4:2a:2f:ca:ee:6d:5b:24:fb:
04:d8:73:f3:1a:4d:7d:7a:50:e3:73:8e:28:75:f0:
12:d1:6f:88:5c:aa:01:5b:c4:47:41:ce:04:cb:ef:
dc:ce:0a:d5:dc:5b:bf:e2:e2:7f:11:18:a4:6b:ee:
0d:b0:4b:1d:3c:2d:4e:b6:43:c1:c9:f1:79:42:7f:
9f:50:22:e1:10:4a:b1:b6:dc:a4:ba:de:b9:2b:e7:
43:7c:8e:96:20:90:8b:0d:27:d5:5a:85:47:9d:6f:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6B:CC:EF:D0:B4:1A:19:C5:85:C2:A2:86:0B:60:FA:33:03:7E:7C
X509v3 Authority Key Identifier:
keyid:3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:03:4d:df:2b:10:f1:4b:50:cb:41:ff:28:81:d4:1b:28:2a:
b3:b2:74:20:53:f7:16:bf:04:79:64:e2:02:e7:0c:9f:ea:61:
4d:39:49:ee:15:e1:f9:6e:f4:a5:77:62:55:da:ef:6b:51:e4:
ae:72:9b:05:73:92:bb:92:46:ae:a6:a6:ea:85:5b:a0:aa:0f:
ba:81:01:25:33:08:85:50:9f:4f:19:63:cc:af:00:00:a9:20:
6b:d3:2d:62:1f:9d:80:b6:b8:53:ac:36:87:cd:19:16:e5:4c:
28:9d:b3:19:20:55:48:18:de:5c:a7:22:ed:b6:56:7b:21:19:
fc:92:af:3b:dd:81:5c:39:19:b2:80:b8:d6:4c:4a:a5:16:13:
39:cb:dc:c0:90:f2:1e:5b:ea:ee:89:de:e6:3d:d4:da:9f:2d:
d9:9d:32:55:83:df:cd:5c:d8:be:3e:69:a2:66:61:3b:91:0d:
b6:87:c3:e6:81:8d:fd:2f:3a:a4:b6:a7:35:b9:63:69:32:54:
0a:b3:ca:c8:fd:bd:0f:5c:95:9f:59:2a:f9:18:46:13:ce:ea:
24:39:c4:28:c1:73:22:b9:a2:77:75:54:92:05:01:6e:b5:9c:
4d:1d:74:9a:09:4d:4a:0a:a0:78:65:a1:5e:2d:c7:6b:a9:10:
40:fa:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:21:02 2025 by rpki-client