Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File: PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier: WVMPngjkwtvFHgiQz1Q1zX2u91GvgVcEGbMtmXSp8bg=
Subject key identifier: 36:43:AA:A4:14:88:10:DD:7D:81:82:10:5C:3B:62:6F:6D:2C:A6:7D
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer: /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial: 0196BE5C36E64FC64B28FC26B9697D3E02EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number: 110A
Signing time: Sun 11 May 2025 08:00:36 +0000
Manifest this update: Sun 11 May 2025 08:00:36 +0000
Manifest next update: Mon 12 May 2025 08:00:36 +0000
Files and hashes: 1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: omixy60Ro3gy0z4Ga5xJKdmkZJvAWZh/QDBvjbd6of8=)
2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:36:e6:4f:c6:4b:28:fc:26:b9:69:7d:3e:02:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Validity
Not Before: May 11 08:00:36 2025 GMT
Not After : May 12 08:00:36 2025 GMT
Subject: CN=3643aaa4148810dd7d8182105c3b626f6d2ca67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:88:78:34:a7:f7:01:c1:65:d6:75:ad:9d:
be:0d:53:b1:85:0c:2f:f6:c1:f0:0b:58:47:ea:a1:
94:a4:bd:07:60:ee:5b:7d:08:74:1e:f5:05:db:75:
8d:ce:9e:cf:71:fe:83:d9:a3:13:eb:94:87:0f:5b:
40:14:ec:cc:06:b5:b6:a7:99:e7:04:67:1c:cf:2a:
22:39:33:bb:c9:91:5e:53:e9:dd:f6:6c:58:bc:30:
63:fb:13:15:cd:8b:fe:7c:d5:6e:f6:b9:ee:4c:17:
2f:ac:c5:fc:00:1c:2d:7c:fc:cd:12:a5:59:a7:86:
46:b5:ef:5e:2a:af:d2:03:cd:5b:e8:34:b0:7f:e2:
04:f7:4d:ac:d5:6c:63:96:4b:98:56:05:b8:6e:b8:
70:02:9a:8b:29:b7:e6:7a:5e:be:12:11:ba:47:9f:
72:db:b4:fd:3f:99:de:1a:72:b2:0d:53:2c:c9:55:
62:12:e3:91:be:3d:9a:56:9d:5e:5f:01:b6:f9:d0:
f7:c6:7d:12:3b:be:19:3b:07:8a:d7:d0:03:bf:1d:
6b:14:d4:85:c3:5d:98:06:30:20:0d:03:c7:71:ba:
7d:ca:bf:e8:a0:dd:a8:62:d1:6f:d2:5e:f2:48:2a:
1e:06:d9:8a:33:6c:1d:83:d5:39:e7:82:e0:a1:d3:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:43:AA:A4:14:88:10:DD:7D:81:82:10:5C:3B:62:6F:6D:2C:A6:7D
X509v3 Authority Key Identifier:
keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7c:63:6e:73:95:51:6a:46:a4:29:af:a9:e4:d9:32:fd:37:
96:7b:11:df:22:7a:cf:05:0a:6d:d1:88:91:6b:95:e5:7e:65:
43:bf:d4:b2:42:af:a2:2e:08:25:7d:74:d2:54:47:97:c7:e7:
5d:87:40:9a:48:19:8e:00:3c:34:62:63:e0:81:2c:73:e6:03:
ee:58:4e:17:6a:db:5a:e6:3f:5b:21:72:79:b0:80:20:0f:0a:
81:0f:02:55:23:33:45:9e:82:aa:4b:12:16:33:2d:8f:83:18:
a2:70:da:d8:9a:71:ef:16:b8:df:b6:dd:94:ac:70:fd:46:9c:
2a:cc:c3:e1:21:fe:3a:af:ab:bf:b4:2d:e3:80:56:69:4c:e5:
c2:cf:af:e6:25:42:57:ff:ae:17:d0:5e:fd:59:e7:48:04:79:
c0:4b:ab:e4:55:4c:66:88:f9:73:63:87:c3:86:01:83:77:b5:
b5:53:73:e9:ee:3a:76:e6:49:ed:0c:6d:9a:de:95:16:ee:c0:
6b:ff:67:3a:ff:e8:b8:28:7b:92:cd:3c:12:8d:99:e8:29:87:
f3:c6:a2:c7:39:9f:9b:7a:5f:59:43:5f:13:6f:4c:33:ff:05:
1b:52:ba:c5:92:53:10:54:94:95:cf:04:a4:0f:b6:56:2b:47:
95:cd:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:08:36 2025 by rpki-client