Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
File: PqFIQth34nvEBouYH-dK64vufnM.mft (raw, json)
Hash identifier: GG7jHc4X4O52wyxzc188NPNbxnbYvDz5lU07fKuinxc=
Subject key identifier: 72:10:C2:D6:F4:11:1A:87:1C:06:87:6A:E0:F0:6F:0D:9B:E8:92:26
Authority key identifier: 3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
Certificate issuer: /CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Certificate serial: 0196C12627012822181005202CCF435FAC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 21:00:24 +0000
Manifest this update: Sun 11 May 2025 21:00:24 +0000
Manifest next update: Mon 12 May 2025 21:00:24 +0000
Files and hashes: 1: PqFIQth34nvEBouYH-dK64vufnM.crl (hash: Q0RBr5y6yG93VrJW9SSyHsOwZPavgunZjvjrGCzSc2c=)
2: h5AoEy-X54Db83-jTlFH2Y1fCVw.roa (hash: HOh3C7TWeQ0O5hO+1P91yiEiZozSeSnp7F1/q290vZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:27:01:28:22:18:10:05:20:2c:cf:43:5f:ac:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Validity
Not Before: May 11 21:00:24 2025 GMT
Not After : May 12 21:00:24 2025 GMT
Subject: CN=7210c2d6f4111a871c06876ae0f06f0d9be89226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:41:2b:27:8f:aa:c1:58:11:d6:f4:02:34:29:
ee:ef:c8:61:d2:c9:24:6f:69:97:ba:1d:e1:d6:53:
c0:7f:81:0a:d0:80:50:50:a9:41:dd:d8:ae:20:b2:
6f:b5:a9:e8:da:4a:68:0c:53:98:45:18:10:8f:d3:
ba:52:80:5d:00:07:11:08:25:e1:ed:5f:cb:fc:55:
cc:15:ab:13:18:72:54:b0:46:16:7d:9e:35:cb:37:
8e:5f:f6:93:18:61:43:5a:ec:9e:2c:bf:2d:97:35:
bc:54:34:25:55:b3:50:71:ee:48:2d:f7:c1:c2:c8:
56:d2:dc:e2:6b:da:ce:8e:45:c7:d6:5c:95:0f:9f:
58:cb:c7:86:d7:b3:de:09:bd:e2:d8:91:0d:14:4f:
57:f8:bf:a8:8d:2d:ed:89:3b:2f:65:fd:5f:26:0c:
79:d7:ab:2f:bf:33:50:6d:ce:0c:2d:09:84:13:8f:
7d:de:8f:99:09:2b:9f:6f:e3:cf:d3:80:64:49:51:
38:07:01:2e:05:16:28:dd:1b:d5:50:d4:25:b0:16:
4b:59:8b:08:4b:3e:7f:52:92:aa:f7:5d:d5:f1:8a:
d0:0f:2e:a1:0b:4c:5e:c6:4f:dc:5e:4a:0f:87:7e:
a4:4d:18:07:b1:2d:13:1b:bd:d4:a9:a2:1f:99:18:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:10:C2:D6:F4:11:1A:87:1C:06:87:6A:E0:F0:6F:0D:9B:E8:92:26
X509v3 Authority Key Identifier:
keyid:3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:43:38:1c:e1:11:75:f8:1d:82:e6:36:c0:b0:44:51:95:07:
e8:05:66:51:58:00:7b:6a:29:fa:0e:16:e9:80:45:bb:fc:15:
64:3d:69:49:27:b7:e1:cf:4b:0d:24:c5:a3:d5:ba:ce:bb:ee:
47:08:80:8a:7d:96:6d:2e:a9:db:b9:c6:e3:8f:1e:57:c0:ba:
27:9c:e6:12:53:94:1a:7b:fe:8b:b4:58:09:f1:8a:80:d6:ac:
09:81:b2:6d:54:9e:4e:d5:29:8f:85:99:bd:d2:1c:4b:8f:41:
0b:c1:44:fc:28:4a:ae:9a:1c:36:ea:f8:d1:7a:32:55:5c:4d:
37:58:f4:49:50:20:90:05:4a:2d:b3:3e:06:a7:1e:36:e1:44:
5e:cc:17:bb:60:8b:b4:3b:55:d0:bd:13:2a:a6:63:ba:44:ca:
ad:41:13:b9:54:20:94:5b:33:1e:ce:da:01:87:c5:ed:87:eb:
31:6b:42:00:58:ca:f6:26:3f:f8:ea:99:b2:95:23:eb:c4:9c:
b5:b5:fa:76:82:c1:02:5c:de:90:27:76:68:de:7e:26:7d:d2:
33:50:f8:50:a5:98:c4:92:51:8a:27:94:c7:53:f8:38:13:ef:
1a:91:9b:94:3a:c6:57:f1:f4:c6:1a:6f:3b:85:b2:78:c7:e2:
c9:ce:34:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:26:58 2025 by rpki-client