Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier: 56z8kYKvVwWwKrp67YW2YJRtoC7gb3y93eldsQtsGl8=
Subject key identifier: 7E:A4:C5:AF:D8:F1:00:E9:C1:9B:11:46:1D:96:11:EC:72:A8:2B:B6
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 0196A8B08FC3E8240C3D27C3E605351E801B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number: 0FE1
Signing time: Wed 07 May 2025 03:01:05 +0000
Manifest this update: Wed 07 May 2025 03:01:05 +0000
Manifest next update: Thu 08 May 2025 03:01:05 +0000
Files and hashes: 1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: NphkXCMhVoInLuKHG2Jgx8Gui1WOwXV77hgnwZJyMO8=)
2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:8f:c3:e8:24:0c:3d:27:c3:e6:05:35:1e:80:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: May 7 03:01:05 2025 GMT
Not After : May 8 03:01:05 2025 GMT
Subject: CN=7ea4c5afd8f100e9c19b11461d9611ec72a82bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:6a:c8:18:fc:20:64:c7:cd:73:0b:77:32:
b2:c4:58:d1:11:f6:bb:90:8c:a1:1d:cf:e2:5e:93:
a3:e2:1a:14:44:cb:2b:9a:22:fd:ad:af:22:89:d2:
83:94:88:f1:0e:a4:82:90:c7:ff:2d:c1:d8:4d:c4:
e7:5d:63:26:07:fd:f8:2a:48:c5:99:62:13:81:d5:
a8:b6:ce:93:f6:0a:ea:8c:91:d0:8e:8d:17:04:32:
63:32:f6:1c:6d:a2:f6:0e:4a:3c:bb:cf:dd:88:12:
66:d6:5a:42:6d:a7:ac:75:aa:f7:ee:d3:29:94:39:
96:c0:0a:53:f6:c3:1c:1c:05:3e:45:1c:74:1f:a4:
74:2f:97:c9:8a:d5:5a:d5:d7:70:13:b6:b8:56:5f:
38:b3:7c:5c:76:c4:ab:1b:d7:d5:53:7b:ab:5b:cc:
0f:ff:48:2d:f3:9b:06:ae:6f:1c:56:1a:d7:5a:9f:
76:7c:ea:eb:9f:bc:00:5e:d0:24:58:06:f0:56:59:
e3:f1:8e:8c:8e:63:bb:a9:4e:83:13:cd:e9:86:19:
f6:94:d8:2b:06:ea:03:bb:c7:dc:33:33:52:4d:f8:
6a:24:d4:4e:56:1e:eb:0a:2f:4e:44:63:ff:09:54:
ce:55:bd:94:c7:64:c3:4f:88:d0:f6:97:0f:cc:55:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:C5:AF:D8:F1:00:E9:C1:9B:11:46:1D:96:11:EC:72:A8:2B:B6
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:21:1e:a3:a4:fd:54:fb:35:94:f1:45:76:8b:6e:0f:16:ed:
7a:f2:dc:05:3a:45:8b:f1:1e:84:ab:30:08:41:ab:ce:a9:b9:
e9:86:9c:7f:ff:d7:0b:56:d3:43:71:86:d4:3f:46:08:86:6c:
66:f8:af:06:bf:92:d8:f1:51:79:eb:98:90:f9:b2:83:73:dd:
a6:53:bd:81:8e:82:3d:a7:0d:ce:98:63:f8:de:5b:7d:10:98:
30:df:95:98:4f:19:ee:03:a6:fe:c3:62:ab:63:a0:67:95:f9:
7c:b4:5d:c8:c0:17:d5:4c:8b:58:f6:b7:ed:c0:bd:fe:93:16:
16:f6:f8:31:8f:92:df:15:df:05:70:6a:19:26:46:72:2e:96:
97:90:60:14:f3:e5:7e:ae:2b:bd:97:5a:15:ae:3a:2d:36:bc:
c0:c3:f3:b1:af:a2:e5:4a:e5:a5:9b:98:ed:c4:5d:f7:b7:34:
f7:45:2a:92:c5:c7:31:44:e1:40:7b:37:0e:fe:cd:bf:01:ac:
2e:95:fb:c3:6a:eb:0c:7c:e4:b4:ec:ae:ba:8e:a9:a8:d5:65:
32:f1:d2:e8:40:51:b9:0f:3f:e9:e0:a4:de:64:a6:7d:64:af:
77:66:12:a3:ec:98:67:08:7e:04:f4:b6:1c:c6:b9:38:95:3d:
55:05:60:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:05:28 2025 by rpki-client