Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
File: pPwscnotINbRTRyACqzbLfEJPcQ.mft (raw, json)
Hash identifier: CODOtYrmUa0yZnOI1Lbx7KjjmeUW6w5EUaZMQ5L27U8=
Subject key identifier: DD:5A:DE:C3:34:8E:9E:54:BC:FC:90:12:47:68:83:5F:AE:57:71:C5
Authority key identifier: A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4
Certificate issuer: /CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
Certificate serial: 0196D408737426B899BA614C884B7CECFE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
Manifest number: AB
Signing time: Thu 15 May 2025 13:00:45 +0000
Manifest this update: Thu 15 May 2025 13:00:45 +0000
Manifest next update: Fri 16 May 2025 13:00:45 +0000
Files and hashes: 1: pPwscnotINbRTRyACqzbLfEJPcQ.crl (hash: 9LPji9veyQr1mtBSdL2xnsNNuqXBSs3HjGQ/U/VaBlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:08:73:74:26:b8:99:ba:61:4c:88:4b:7c:ec:fe:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
Validity
Not Before: May 15 13:00:45 2025 GMT
Not After : May 16 13:00:45 2025 GMT
Subject: CN=dd5adec3348e9e54bcfc90124768835fae5771c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:14:77:9a:3f:c2:4e:55:88:f0:e8:13:e3:
23:dd:1d:5e:7f:57:8b:26:76:f1:57:e1:a8:16:a9:
85:6e:9a:ca:ab:83:5b:13:57:de:6f:d2:98:95:16:
2c:2f:f1:da:49:40:87:d7:53:e0:0b:65:0c:8e:69:
52:26:7f:9f:8c:0c:dc:87:1f:55:62:b2:e3:75:f1:
bb:c3:20:7c:1b:61:9b:62:d4:0f:3d:c8:fd:b5:b4:
16:cb:4d:07:ab:84:62:56:f0:06:bb:e3:8d:a5:58:
ad:1c:88:64:d9:ae:79:61:3b:d1:d4:ad:f4:8a:11:
58:69:e0:09:42:d5:5c:50:75:01:13:e1:73:05:60:
b7:aa:b5:54:bf:93:b2:f2:0f:3a:30:67:6c:5a:52:
a9:42:1f:41:20:ab:74:ff:9f:a2:0a:48:e0:a8:9e:
5e:16:84:d8:8e:e4:6f:32:22:ca:2e:c7:8c:b6:8a:
1f:6e:58:c4:38:db:00:ac:47:93:c6:eb:b8:e6:98:
6f:f6:e2:26:b7:11:0f:60:90:24:8a:48:4c:8b:75:
a7:d0:c2:4f:b0:67:51:41:56:2d:fc:f6:1b:ff:d6:
e2:80:9d:1b:49:86:b3:d9:89:19:21:fc:21:64:12:
8e:63:f8:68:05:a0:08:a8:66:69:04:b1:54:e2:5e:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5A:DE:C3:34:8E:9E:54:BC:FC:90:12:47:68:83:5F:AE:57:71:C5
X509v3 Authority Key Identifier:
keyid:A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:dd:16:29:7c:d3:f1:ca:6a:40:9d:7e:9c:fc:0a:41:51:07:
e4:41:fe:a7:bf:d0:9e:05:05:e9:b6:89:b1:c7:0c:09:ab:81:
8d:fb:27:bd:52:4d:ec:36:6d:70:11:45:70:d9:b3:cc:36:9e:
5d:f1:19:37:85:43:52:37:4c:22:9e:32:e1:dc:57:55:da:d4:
7f:2c:68:56:10:31:88:ca:34:08:82:b5:63:a0:e2:e2:1e:3d:
b5:bd:e2:4b:db:2d:6c:aa:b9:8a:ce:e0:af:ee:61:4a:91:db:
19:90:eb:00:52:9b:da:e9:4d:ae:ba:64:a3:23:1f:2d:a1:cf:
72:0d:03:72:d1:bc:ee:07:1b:65:b6:56:f6:7f:db:54:ec:94:
e3:96:ee:34:a0:04:71:c0:17:28:84:ba:76:9c:4f:17:28:49:
1a:3c:44:93:35:2b:ea:90:b6:29:ed:14:17:d0:be:09:1c:47:
dc:32:1d:00:f1:92:f0:57:78:de:6b:8a:eb:42:ab:78:20:24:
21:44:28:85:5c:ce:57:e3:fe:97:3a:06:2c:11:00:d2:ec:0b:
a2:96:67:46:83:98:d5:78:3d:d2:34:47:87:4b:af:08:8f:41:
87:2d:f5:7b:eb:7d:c0:25:b9:82:0b:40:94:0d:a5:6c:ce:dd:
5c:c0:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:51:18 2025 by rpki-client