Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
File: pnyqBsCo91QBbmFEgLuzh35AiR0.mft (raw, json)
Hash identifier: 7/KBeQqeO+0TnSaE6TuAARS6EkAJx0HUNM7zFtrGhAk=
Subject key identifier: 26:A2:7C:03:1D:49:EA:29:C0:E7:B7:C2:7D:4F:4B:1A:25:64:A8:8C
Authority key identifier: A6:7C:AA:06:C0:A8:F7:54:01:6E:61:44:80:BB:B3:87:7E:40:89:1D
Certificate issuer: /CN=a67caa06c0a8f754016e614480bbb3877e40891d
Certificate serial: 0196CA297C06FAA77F2740AFFC0253B8201B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
Manifest number: 0264
Signing time: Tue 13 May 2025 15:00:38 +0000
Manifest this update: Tue 13 May 2025 15:00:38 +0000
Manifest next update: Wed 14 May 2025 15:00:38 +0000
Files and hashes: 1: pnyqBsCo91QBbmFEgLuzh35AiR0.crl (hash: RXQV30RgfHt7rZsUuQN5s+D6nYuedlB84Zh1Bvmd2uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:7c:06:fa:a7:7f:27:40:af:fc:02:53:b8:20:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67caa06c0a8f754016e614480bbb3877e40891d
Validity
Not Before: May 13 15:00:38 2025 GMT
Not After : May 14 15:00:38 2025 GMT
Subject: CN=26a27c031d49ea29c0e7b7c27d4f4b1a2564a88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:ab:c5:ef:2d:90:28:dc:13:d0:34:4f:6b:
56:30:41:7b:55:fc:07:de:b9:29:df:c2:e9:d5:21:
b9:3e:63:0e:36:74:cc:fb:69:65:2a:8e:cb:81:c4:
0f:6c:4c:a9:b4:94:b2:18:4a:aa:9c:05:95:78:7d:
df:91:36:85:a1:7a:83:f8:a1:ae:0c:46:bd:49:48:
c0:9f:10:1d:56:7f:14:ab:e4:23:c7:6d:78:58:06:
bd:6d:ff:5d:09:b5:56:1c:11:76:67:e5:49:c4:eb:
ca:37:f2:05:19:ee:f1:48:ec:73:e0:e3:a4:c4:ce:
51:40:6f:d6:ea:59:33:87:0e:8d:6d:4c:7c:d5:dd:
7d:9c:48:26:bc:1e:e7:6b:7c:2f:9e:b5:d4:50:2c:
ea:11:b6:fd:dd:b7:c1:b5:08:ea:a6:63:61:dc:17:
62:85:ba:5f:7c:17:b5:ea:73:4a:33:da:f8:ac:cf:
cd:3d:e4:82:3d:c1:6b:d9:5a:fd:40:d9:dd:b3:9c:
f9:6b:b5:68:49:47:8f:65:38:27:51:da:9d:c4:75:
4d:be:9d:36:3a:74:65:e6:df:c1:6c:ae:7b:f5:1f:
f4:88:46:a6:77:6f:88:96:46:9c:25:4e:e2:f4:a1:
4e:cc:5b:3a:8b:0f:d5:66:9d:13:58:b8:ad:6a:b2:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A2:7C:03:1D:49:EA:29:C0:E7:B7:C2:7D:4F:4B:1A:25:64:A8:8C
X509v3 Authority Key Identifier:
keyid:A6:7C:AA:06:C0:A8:F7:54:01:6E:61:44:80:BB:B3:87:7E:40:89:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f4:9a:f4:e0:53:df:10:c8:2e:93:5b:a3:f2:7f:89:23:b8:
53:89:d6:6f:06:ca:d3:e8:62:05:17:04:8c:b7:7f:19:2f:72:
15:d3:7f:2d:53:2b:05:40:1e:57:ea:a7:16:65:4a:9d:1f:91:
36:bd:73:cb:ba:1a:46:7d:89:cb:ca:ff:3f:8c:fe:a5:55:2c:
87:99:17:ba:da:cd:51:13:dc:5b:71:77:2a:46:2c:ca:d6:db:
eb:c4:5d:a4:2f:c5:f4:1f:c5:fa:51:24:e5:4c:b7:e6:8d:10:
29:31:ac:e9:f4:99:e0:ed:a8:8e:20:7e:0a:49:5d:de:8b:7b:
74:dd:be:d8:cd:be:4b:d6:23:1e:72:d2:9e:0f:ac:03:cf:e4:
13:dc:03:ca:6c:17:89:06:95:2c:1d:ff:fe:46:0a:0c:35:0c:
1b:9f:76:32:76:17:5d:d1:c2:ac:94:95:ac:ea:0d:5b:d0:c5:
d8:75:1e:8c:be:79:33:b2:6b:26:ab:8b:9e:2f:40:99:24:55:
83:eb:1f:93:bb:24:95:c0:0a:03:cf:41:7f:cf:ed:f0:d6:fd:
1d:be:1d:4f:e4:6f:4a:c1:78:39:59:0e:01:cb:e6:ab:61:b2:
12:54:bf:37:6f:26:a8:06:7a:88:19:2f:7b:21:a7:67:b6:5c:
a1:de:d8:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKKXwG+qd/J0Cv/AJTuCAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2N2NhYTA2YzBhOGY3NTQwMTZlNjE0NDgwYmJiMzg3N2U0
MDg5MWQwHhcNMjUwNTEzMTUwMDM4WhcNMjUwNTE0MTUwMDM4WjAzMTEwLwYDVQQD
EygyNmEyN2MwMzFkNDllYTI5YzBlN2I3YzI3ZDRmNGIxYTI1NjRhODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4Srxe8tkCjcE9A0T2tWMEF7VfwH
3rkp38Lp1SG5PmMONnTM+2llKo7LgcQPbEyptJSyGEqqnAWVeH3fkTaFoXqD+KGu
DEa9SUjAnxAdVn8Uq+Qjx214WAa9bf9dCbVWHBF2Z+VJxOvKN/IFGe7xSOxz4OOk
xM5RQG/W6lkzhw6NbUx81d19nEgmvB7na3wvnrXUUCzqEbb93bfBtQjqpmNh3Bdi
hbpffBe16nNKM9r4rM/NPeSCPcFr2Vr9QNnds5z5a7VoSUePZTgnUdqdxHVNvp02
OnRl5t/BbK579R/0iEamd2+IlkacJU7i9KFOzFs6iw/VZp0TWLitarK1MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaifAMdSeopwOe3wn1PSxolZKiMMB8GA1UdIwQY
MBaAFKZ8qgbAqPdUAW5hRIC7s4d+QIkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG55cUJzQ285MVFCYm1GRWdMdXpoMzVBaVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lOTQwN2UtYTU4ZS00OTQxLThjY2Ut
MmJlNTAxZmVlZDNkLzEvcG55cUJzQ285MVFCYm1GRWdMdXpoMzVBaVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lOTQwN2UtYTU4ZS00OTQxLThjY2UtMmJlNTAxZmVlZDNk
LzEvcG55cUJzQ285MVFCYm1GRWdMdXpoMzVBaVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvSa9OBT
3xDILpNbo/J/iSO4U4nWbwbK0+hiBRcEjLd/GS9yFdN/LVMrBUAeV+qnFmVKnR+R
Nr1zy7oaRn2Jy8r/P4z+pVUsh5kXutrNURPcW3F3KkYsytbb68RdpC/F9B/F+lEk
5Uy35o0QKTGs6fSZ4O2ojiB+Ckld3ot7dN2+2M2+S9YjHnLSng+sA8/kE9wDymwX
iQaVLB3//kYKDDUMG592MnYXXdHCrJSVrOoNW9DF2HUejL55M7JrJquLni9AmSRV
g+sfk7sklcAKA89Bf8/t8Nb9Hb4dT+RvSsF4OVkOAcvmq2GyElS/N28mqAZ6iBkv
eyGnZ7Zcod7Yhg==
-----END CERTIFICATE-----
Generated at Tue May 13 23:49:19 2025 by rpki-client