Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: Ry/pdOg3Qvz1Fkpqrz9A0XraVqGTDCkAJizD3AeDp6k=
Subject key identifier: DD:CD:70:5C:F4:47:44:5F:17:94:5C:9A:49:30:89:E4:EA:D3:2E:CE
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 0196BCDB549B3062B74102E715BD1397E720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 01:00:12 +0000
Manifest this update: Sun 11 May 2025 01:00:12 +0000
Manifest next update: Mon 12 May 2025 01:00:12 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: 6Tl26Eh8z8FlOYtCm66zKQGWUTD+oo9PhuUcBOOtCE8=)
2: Ygud2H3mQvpplx2m1ZwaXdOogYA.roa (hash: /wnaFbQu+otS41ERWGG+1dFZ6eGw9L5BsokLI2OTM5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:54:9b:30:62:b7:41:02:e7:15:bd:13:97:e7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: May 11 01:00:12 2025 GMT
Not After : May 12 01:00:12 2025 GMT
Subject: CN=ddcd705cf447445f17945c9a493089e4ead32ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:55:60:2a:7f:4e:4e:dd:35:3b:22:f5:0e:
38:87:d9:2c:61:5a:52:36:7a:cc:31:14:75:f5:61:
b9:77:37:25:46:9b:a4:74:7c:6e:24:0c:2b:e2:e4:
76:13:21:f6:a9:ea:ab:43:8e:cf:e2:36:82:bf:a3:
93:f7:c1:13:f8:78:70:d0:60:47:92:9e:44:3c:7e:
05:3b:60:cb:06:0c:12:f5:f2:05:7d:f6:7b:9f:e3:
80:bc:75:ef:5b:63:87:56:42:e7:33:d1:3d:af:e3:
6a:29:f2:26:45:02:ab:1e:d3:74:c4:f9:7c:8f:3f:
e0:14:be:5f:8f:79:a7:b0:ff:e1:6d:85:a1:8c:e5:
13:c6:63:1b:74:50:f3:46:32:9e:a1:c7:0f:55:e5:
de:f5:c3:a4:4d:9d:8e:26:2b:ff:49:0f:b0:72:9c:
3a:bb:f9:e0:3c:f3:35:44:6f:4f:ee:0b:6a:84:37:
d4:d3:60:87:cd:8a:86:af:a5:f7:1e:f1:23:fb:bf:
f8:c2:c1:7f:a3:7e:cb:73:83:d6:b2:b1:35:56:a9:
86:e4:b6:f5:b5:8a:af:71:50:95:65:dc:1e:f5:d7:
f9:ca:e6:f6:7d:b4:fe:2e:3e:f7:55:fc:cc:19:ba:
18:cd:8e:10:28:32:ae:57:b2:7a:d0:1a:20:1c:3b:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CD:70:5C:F4:47:44:5F:17:94:5C:9A:49:30:89:E4:EA:D3:2E:CE
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:47:f7:a5:a9:53:c9:f4:b8:38:9c:71:7e:04:20:9e:42:e1:
d3:e4:ac:e2:69:8f:27:6b:cc:f4:f7:95:4e:18:02:ea:2e:65:
8a:d8:b0:8c:3c:fd:bf:b9:95:58:59:cf:30:de:54:24:92:5d:
44:16:e6:06:03:5d:3a:2c:3f:60:fc:10:73:45:df:bd:99:a9:
b0:62:e5:d2:5c:e3:12:05:cf:e1:a8:1e:c3:24:a7:a8:92:40:
47:3c:d2:33:e1:11:5a:ba:4c:90:8a:67:1b:81:73:10:72:93:
b4:32:08:0e:d0:f9:d6:7c:93:05:c7:60:6e:e8:80:c1:1e:ca:
83:7c:5c:35:56:e8:67:c1:df:f4:aa:9a:88:2e:f0:38:ce:d4:
ab:7a:22:ad:8a:2d:46:b0:31:f1:7b:ad:c3:c5:1a:09:7e:03:
10:0b:09:03:51:64:fc:44:21:28:08:3a:8b:16:a1:d0:fc:41:
a4:cc:6e:3e:ad:35:64:e1:a1:23:2e:ec:e0:80:d4:90:dc:1d:
63:4e:5a:d8:6d:61:10:1e:5e:85:09:84:13:83:4c:de:a3:02:
08:62:2f:1c:ab:bd:f3:46:7a:1b:bb:a8:fa:25:38:69:75:bb:
19:24:40:28:2b:d7:8d:b2:e8:8c:a5:13:d1:0b:70:f1:6a:3a:
22:cc:8d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:27:00 2025 by rpki-client