Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File: PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier: E/JZ9NlQJXAx4Wee2TQLs/SClTl5x0sowGHiqw3XC1M=
Subject key identifier: F0:89:53:DB:2E:AF:7D:14:2B:7F:AA:CE:99:B7:B0:2B:0D:79:B2:1E
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer: /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial: 0196B66C01C8D80BCEFD6D42008D5BF92966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number: 1057
Signing time: Fri 09 May 2025 19:00:53 +0000
Manifest this update: Fri 09 May 2025 19:00:53 +0000
Manifest next update: Sat 10 May 2025 19:00:53 +0000
Files and hashes: 1: IFYqWjpdJxRaG3uyQLqw79JLTGo.roa (hash: alQatZzeYH3fzwBxC+QNB+5aLjO5V+OfKBsHgM/Tlv8=)
2: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: 2SDbt+Dj+tfv+whM27Ei7VHc0l6Hx466h2vF//Giog0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6c:01:c8:d8:0b:ce:fd:6d:42:00:8d:5b:f9:29:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Validity
Not Before: May 9 19:00:53 2025 GMT
Not After : May 10 19:00:53 2025 GMT
Subject: CN=f08953db2eaf7d142b7faace99b7b02b0d79b21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:2c:d1:0d:1e:c1:77:5d:48:a0:e0:61:3a:
f3:68:01:eb:73:87:43:cb:a9:a5:53:d1:75:48:ea:
e3:1e:d0:a1:f4:5f:19:dc:18:b3:84:46:2b:e5:d8:
a2:8d:ac:00:f3:5a:52:f2:d5:d0:6e:95:d3:8f:ef:
df:f9:95:58:a2:a8:5c:0b:96:fd:42:82:99:e0:91:
bb:bc:88:5b:e0:3e:36:37:a6:cd:f7:6d:a8:e9:0e:
ff:4c:da:34:eb:29:7f:5a:36:c8:c8:f6:c7:be:65:
0b:46:8b:24:79:42:b3:5a:fa:eb:a8:a3:e4:88:fd:
e0:ea:e5:67:0a:78:33:e0:e1:10:69:fa:62:c9:d7:
e9:a5:d3:c9:53:4b:e5:c4:1a:8d:77:41:b0:a1:bc:
72:3e:1f:9b:12:af:a0:5c:b0:46:a0:3d:d3:ac:cd:
45:85:12:1c:ef:74:a0:55:06:fe:3f:17:b6:f7:a6:
4d:a7:35:0f:52:82:b1:2f:dc:d6:79:7f:d2:50:2f:
4d:23:50:42:1f:e5:45:cb:57:23:c0:1b:c2:4e:db:
e7:0c:ec:5e:2f:9b:2e:df:55:46:30:67:08:2f:3d:
4b:a9:4f:b6:08:f6:63:8a:7a:4f:dd:45:6e:0b:8a:
ac:d7:29:45:19:bd:85:29:d4:04:ed:6a:ec:e1:84:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:53:DB:2E:AF:7D:14:2B:7F:AA:CE:99:B7:B0:2B:0D:79:B2:1E
X509v3 Authority Key Identifier:
keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d2:d2:85:e8:a1:05:68:a2:27:3d:0e:84:cd:d2:a4:25:9d:
eb:c6:63:33:72:bf:c4:bf:0c:59:84:ff:74:e9:da:6b:0a:e3:
9b:dc:7e:7e:8a:93:09:15:03:09:bf:6b:5c:93:05:7c:e8:47:
ba:e3:f5:21:54:bd:c3:a2:37:85:52:03:65:23:61:1d:c2:3e:
f1:8d:0d:82:ee:d9:a7:1c:f3:fa:15:bd:62:e3:a4:8e:9a:c6:
a4:f6:59:b6:dc:e5:13:df:24:da:83:e2:bc:a4:8f:e1:5a:eb:
b9:67:7a:53:32:91:43:97:0a:f2:5c:81:01:8e:04:cd:d8:51:
9f:ab:2d:11:f0:c9:49:4c:aa:50:21:09:1d:3b:2d:f0:ea:fe:
97:bb:0a:4d:03:c5:c6:7d:69:7b:e9:aa:7c:c9:0c:99:48:49:
d1:00:f7:cc:e5:68:8d:b7:69:d7:f7:f2:bc:a9:ae:42:8c:b1:
f0:70:02:15:de:e1:d2:18:6e:5c:43:7a:fd:39:e7:cc:7f:e0:
c4:da:cb:aa:cd:20:86:e5:01:a8:35:41:1c:92:06:4a:29:4a:
8e:2c:e6:65:1d:79:ef:be:f0:6c:c4:14:a9:68:b9:80:b9:87:
c7:03:4d:50:78:ca:ba:e9:42:3c:a1:4a:d0:68:34:a3:91:35:
cc:53:89:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:06:07 2025 by rpki-client