Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
File: PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft (raw, json)
Hash identifier: GaaidVPkK4lcv3efRKflc8q+gxVt4D7WXNgrZKqVMOg=
Subject key identifier: FF:89:E5:AA:AF:CC:BD:85:DD:0D:A0:3D:6B:34:4E:E7:4B:10:60:42
Authority key identifier: 3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E
Certificate issuer: /CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e
Certificate serial: 0196BCDB8CDFDA7868459603EBBA6E93F654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
Manifest number: 0201
Signing time: Sun 11 May 2025 01:00:27 +0000
Manifest this update: Sun 11 May 2025 01:00:27 +0000
Manifest next update: Mon 12 May 2025 01:00:27 +0000
Files and hashes: 1: PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl (hash: /KUp1OxSzSWOB0bKqwFEgVUjvHTfYi1oVh0LS6P7JLo=)
2: vEaUcgTOmvxT4RwiTozd0tA5mdY.roa (hash: NlBiID9/yPQCEPkEu0Pfr8aESCT+/QAEDOmwYhde0qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:8c:df:da:78:68:45:96:03:eb:ba:6e:93:f6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e
Validity
Not Before: May 11 01:00:27 2025 GMT
Not After : May 12 01:00:27 2025 GMT
Subject: CN=ff89e5aaafccbd85dd0da03d6b344ee74b106042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:27:29:a0:67:f7:5f:90:28:3c:a3:41:43:
09:e6:79:f3:f5:f9:95:39:24:26:f6:ef:6b:d8:6b:
df:f5:46:50:53:1d:28:f7:17:7b:b4:41:53:5d:ff:
43:e6:2c:ae:03:24:4b:b5:7a:4c:ff:0e:0e:51:08:
fd:21:c8:3b:7c:76:2d:f3:57:1d:e8:ad:79:ad:28:
13:8d:54:06:c6:e8:bb:01:06:70:f7:e7:ca:4f:2e:
bf:90:da:06:96:5c:b9:04:32:85:83:cc:fc:a5:b6:
90:2f:d1:df:e5:9c:b0:82:cf:6b:77:c8:53:77:09:
fe:f2:d0:a4:47:68:89:a0:dd:3d:9d:7f:ed:fa:dc:
7c:c7:ef:50:3f:50:8d:57:d6:15:92:5f:61:85:b6:
cf:a7:95:05:9f:8e:e3:1f:c7:9e:a3:3a:52:52:b5:
57:02:1a:74:ec:c9:a2:11:83:1d:37:b8:fa:e8:eb:
c1:8c:5c:98:da:54:6e:32:fe:8c:05:82:59:b0:68:
ad:1e:10:79:2c:a0:16:58:4e:2b:06:11:f3:d7:28:
ba:5b:c3:56:ba:5d:be:5a:f5:f6:80:22:e1:ce:72:
7a:bb:08:5f:fa:e6:fb:b6:9f:b3:c7:46:b7:e8:19:
5c:70:cb:df:2d:e8:26:42:e6:ee:52:4c:88:3b:bf:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:E5:AA:AF:CC:BD:85:DD:0D:A0:3D:6B:34:4E:E7:4B:10:60:42
X509v3 Authority Key Identifier:
keyid:3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f6:52:8b:10:ec:99:7c:20:58:bf:e1:c5:77:71:76:65:a3:
f4:7e:e0:0c:b1:b7:27:89:13:36:bf:b6:17:e6:1c:bc:a2:97:
77:26:b2:50:f0:ae:5c:7d:e1:be:ca:d7:2f:a2:50:28:d6:6d:
02:c2:25:00:46:11:cb:6f:85:a1:46:d0:d7:ea:13:09:ad:f4:
e5:25:70:87:a3:a8:a1:d5:e3:be:8c:a6:39:05:a9:6e:0c:7a:
9f:09:2b:4e:17:73:d1:81:76:1a:b6:df:07:83:20:71:9f:ab:
83:cf:c1:eb:5d:ee:cd:61:35:2e:05:00:e4:93:ef:d7:ed:d2:
94:ae:a6:58:32:a1:d3:80:03:86:6d:3a:d2:a2:ea:70:35:aa:
cd:4d:53:5e:c6:f4:80:c4:5a:11:c2:2c:9b:74:61:00:63:aa:
90:f4:9b:ea:43:78:d8:3b:8d:5c:3f:e1:9a:59:bf:eb:a3:08:
57:31:5e:3e:a9:1a:d2:9e:6c:8f:4f:b2:c3:71:28:fd:22:6b:
f3:10:82:e4:d6:a1:d5:db:58:68:49:44:c3:e4:c2:06:4a:d5:
0f:d6:3c:51:0e:c4:63:e4:1b:47:c7:64:cd:d4:61:1e:0d:5c:
53:5c:fe:ea:21:99:42:71:cc:8e:f1:1a:dd:91:0e:d2:d4:43:
fd:5c:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:24:47 2025 by rpki-client