Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: Cjvz/vMF7QIP8TKHSfH1e/jV8dmvYwvCBBuEB9DVoH8=
Subject key identifier: 70:11:F5:4F:1F:75:73:F5:48:81:7A:E9:23:5C:8F:96:B8:00:87:3D
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 0196CE3CE7006F334EEC188FF56DE7A60A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0C56
Signing time: Wed 14 May 2025 10:00:19 +0000
Manifest this update: Wed 14 May 2025 10:00:19 +0000
Manifest next update: Thu 15 May 2025 10:00:19 +0000
Files and hashes: 1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: OAs6bv/ZCGM2c4B/ElnN1k/Ep7QHCVr1JMgl0nn8V2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:3c:e7:00:6f:33:4e:ec:18:8f:f5:6d:e7:a6:0a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: May 14 10:00:19 2025 GMT
Not After : May 15 10:00:19 2025 GMT
Subject: CN=7011f54f1f7573f548817ae9235c8f96b800873d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:9f:89:30:82:d4:bc:bb:05:73:93:c0:0a:
a5:25:13:6e:4f:87:ae:01:76:39:69:30:c7:41:c3:
98:4d:8c:e9:e2:32:5f:8e:6a:25:79:8d:8b:92:ec:
fa:f1:a9:b4:54:87:5b:64:92:4d:83:bf:4d:94:b0:
91:c5:19:9e:a2:4f:bc:87:5d:22:52:31:a0:5e:bf:
1c:83:5f:b3:2a:85:81:73:76:a4:2c:c4:47:83:f8:
0e:b7:7c:4d:17:19:56:98:09:8f:52:dd:1c:f3:5b:
76:ad:c0:c1:e3:ff:de:d6:69:97:77:0c:8d:08:f7:
d9:5d:a2:3c:01:2e:b9:09:7c:a1:c1:6c:8a:ce:c0:
e3:25:e9:25:66:90:06:2b:f2:13:a5:27:b8:8f:60:
b8:53:9e:2b:9f:6f:39:cb:50:19:a5:aa:f0:22:9e:
b0:6f:92:a6:57:90:d6:6c:95:cc:c6:67:5c:1d:b7:
52:6c:01:b0:63:8b:7f:6c:e6:54:e4:80:93:84:74:
6e:2b:92:8e:2c:1c:af:3d:8a:ec:81:d0:6e:13:cf:
27:4e:d7:15:17:47:1b:9e:05:48:9a:2d:d1:f6:77:
1d:c9:13:9e:fb:d9:49:a5:aa:11:7f:7b:5c:6b:b4:
65:ea:b8:4b:79:f2:c4:d4:5a:84:78:fd:4b:c0:97:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:11:F5:4F:1F:75:73:F5:48:81:7A:E9:23:5C:8F:96:B8:00:87:3D
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5f:50:b4:1e:3d:f0:01:42:59:39:27:a7:97:ec:b5:26:85:
03:54:1d:54:45:ee:a5:e1:75:ed:10:0c:1d:47:71:ab:3a:9e:
1b:ab:1a:ab:12:cd:54:b1:12:65:ff:5a:0d:5f:2f:3d:57:1b:
df:19:65:2f:a0:d7:f2:25:67:ac:ad:a6:d0:d7:aa:26:c4:e5:
bf:c1:f1:b1:28:2e:77:a8:ef:dd:ad:95:af:be:1f:25:91:3a:
78:c8:af:40:44:51:a1:7e:e2:37:cf:11:56:a3:09:ab:2d:5f:
ad:b4:80:84:ad:2a:9d:fd:78:ea:ea:84:80:a2:4c:e6:f3:78:
b3:43:32:2c:1c:a5:ca:dd:90:67:60:e7:2d:76:98:22:e7:62:
10:27:20:0c:c1:09:b2:6e:ae:14:90:a4:37:44:b2:b0:2b:c0:
63:2a:50:33:c8:38:98:16:b9:c0:a5:53:19:a7:9f:29:9b:68:
8d:6f:ec:fe:26:a4:50:69:0d:2b:cb:4c:51:7b:d0:08:f4:3d:
60:54:75:e0:65:36:9f:93:be:0f:8c:63:38:fb:27:b3:9f:d8:
10:f8:f8:27:f4:6c:ea:80:bb:67:b7:ca:79:f2:75:20:29:4c:
c1:e1:b1:8b:62:d2:de:e5:71:c0:9b:e2:79:17:2c:e7:6d:b3:
58:e7:bd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:42:26 2025 by rpki-client