Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: tZ3CfOm2coVsCN7HIvLczjQUo+FCzd/HWDYCyzuH234=
Subject key identifier: 42:EB:F5:D8:AA:9C:76:CF:E2:9E:15:FF:2D:43:4F:CC:55:D6:C4:2B
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 0196BC36C982A5BF0A8377518E59CEE99EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 0782
Signing time: Sat 10 May 2025 22:00:29 +0000
Manifest this update: Sat 10 May 2025 22:00:29 +0000
Manifest next update: Sun 11 May 2025 22:00:29 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: lM6oKd6xRQD6qUUmjzqcj3GjVIBf/vktfS+BrMTAa00=)
2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:36:c9:82:a5:bf:0a:83:77:51:8e:59:ce:e9:9e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: May 10 22:00:29 2025 GMT
Not After : May 11 22:00:29 2025 GMT
Subject: CN=42ebf5d8aa9c76cfe29e15ff2d434fcc55d6c42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:51:dd:a1:2d:e7:47:7d:f0:db:29:26:d4:
53:89:af:9a:e6:36:4c:10:b1:eb:0d:19:72:d2:d2:
80:51:5c:7d:4f:3b:f0:3e:a9:57:57:68:0d:eb:0b:
54:a6:8f:49:49:4f:05:64:0b:f0:31:da:57:18:e7:
3d:2f:85:74:e0:86:ec:67:61:b0:34:a2:a7:2e:a2:
ca:72:0d:82:3c:7d:81:5e:2d:82:82:4c:9f:2d:04:
d3:9d:3d:73:94:c0:72:e9:14:80:22:43:82:5c:bf:
1c:e8:7f:ec:b5:c5:c6:50:0f:a2:e7:cf:9d:e2:0c:
26:db:e7:35:51:1f:5e:5f:ab:16:ff:c5:2e:b4:4b:
3e:3f:31:b1:aa:26:6f:81:0d:15:b2:81:ec:6f:99:
fd:b3:5c:ec:cc:ac:a6:b1:97:91:56:a6:20:9a:2e:
5e:a4:b1:f0:e5:b0:e0:d7:6c:17:f6:a5:aa:4c:2b:
06:8f:69:e8:53:97:b6:45:41:84:86:72:99:a8:70:
42:c6:60:f1:36:ba:18:2f:d1:36:0c:d4:4f:a7:aa:
cc:76:c0:7e:7b:86:ca:a2:3b:35:30:9a:f3:db:06:
89:e6:81:ee:1d:9f:65:9d:f8:07:15:0f:02:ed:01:
48:ae:bf:4c:0b:54:ec:ab:74:59:2a:10:79:6a:45:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EB:F5:D8:AA:9C:76:CF:E2:9E:15:FF:2D:43:4F:CC:55:D6:C4:2B
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7a:2e:07:95:95:b6:93:ff:69:d8:8c:e4:7b:94:2c:b2:d6:
ba:a1:ad:85:92:35:88:bd:52:5b:7b:77:f4:18:b3:5c:d2:34:
11:39:6f:7a:ca:c6:ab:3b:17:ac:a6:ef:eb:0a:22:b5:98:80:
72:fb:da:d4:d8:19:cd:45:f6:56:ac:d9:cb:a4:a8:0c:88:12:
06:94:70:37:3a:50:1e:1f:a9:89:7e:82:c7:c9:36:c8:72:e5:
4e:be:db:85:72:3c:52:86:14:9c:65:29:71:6f:e5:42:eb:f9:
62:de:79:e7:53:30:ff:18:e0:1b:85:d4:c1:d8:77:6d:ef:61:
69:7a:f6:84:ed:4d:cf:86:62:bc:27:bc:af:05:72:75:55:ba:
7c:95:23:31:ef:15:8c:a8:70:39:7a:af:8a:9a:7d:6f:91:24:
69:2b:18:28:41:c8:4a:e4:33:24:d9:79:6f:a0:e1:26:9b:94:
bf:9a:a4:d0:b6:9c:68:bf:35:b9:51:12:e3:1a:c6:19:b2:20:
76:20:e2:60:ae:41:70:7b:86:50:ea:02:30:3c:ad:26:27:cb:
43:5d:4b:f7:50:ef:e3:54:3c:7e:46:71:3a:66:a7:cb:91:f0:
1f:2c:d2:54:49:b8:4a:87:18:59:f8:36:57:04:b6:d7:e8:a6:
2e:b1:53:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:15:14 2025 by rpki-client