Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
File: PI0Z2SQBkcNql0ti35PCIUNtm90.mft (raw, json)
Hash identifier: 0Na1SgVCOylYBAmCT8Sps3Emyc8sXo+D5JrnOlHqqgw=
Subject key identifier: B2:2F:75:0A:71:A5:8D:32:E1:F8:48:35:3A:6B:52:16:43:36:4C:30
Authority key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
Certificate issuer: /CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Certificate serial: 0197711A9E017A80D338BB103F475C847D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
Manifest number: 09CB
Signing time: Sun 15 Jun 2025 01:00:59 +0000
Manifest this update: Sun 15 Jun 2025 01:00:59 +0000
Manifest next update: Mon 16 Jun 2025 01:00:59 +0000
Files and hashes: 1: PI0Z2SQBkcNql0ti35PCIUNtm90.crl (hash: tFExKHUCi2F18gnx8nF5/L9JvQcJRxWHSVrmcKQBfKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:9e:01:7a:80:d3:38:bb:10:3f:47:5c:84:7d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Validity
Not Before: Jun 15 01:00:59 2025 GMT
Not After : Jun 16 01:00:59 2025 GMT
Subject: CN=b22f750a71a58d32e1f848353a6b521643364c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e1:88:8f:7a:f6:39:9f:89:28:66:eb:79:5b:
6d:32:cd:f4:af:a5:ea:ca:76:0d:22:45:28:c0:52:
5c:94:4f:80:6a:ec:b4:93:29:ac:58:e4:91:5f:01:
a5:25:07:91:51:f7:e9:a9:22:1a:22:44:70:a7:0a:
b4:86:6c:78:27:41:f8:96:3b:ce:d5:49:20:ba:20:
eb:f4:d8:e2:62:97:ab:b0:5d:28:58:f1:2f:76:b3:
74:43:0c:94:d6:e3:a5:3c:85:1f:b5:0e:ae:4c:24:
88:d7:30:2d:60:8b:ea:7f:a2:6e:48:8a:bd:f4:b7:
e0:08:a3:90:f8:8e:70:64:88:56:b6:15:9c:ef:a4:
b9:e1:ae:d0:34:8b:f4:12:66:aa:59:35:94:b7:10:
27:74:3d:7a:d5:49:f0:9b:7a:30:6f:5a:dd:4a:53:
74:ba:c0:32:df:7f:ed:2e:34:4b:fe:4f:1c:60:22:
f1:28:6b:2d:16:04:e2:50:ff:0c:6e:d5:00:01:31:
81:13:c0:f7:a5:b7:ff:06:57:0a:c5:f6:99:d2:31:
6c:2f:07:83:f4:cb:f5:d4:a2:7f:cb:fa:b8:99:48:
cf:92:76:8c:b2:4a:11:8b:15:6c:d7:60:a5:5c:09:
39:a9:db:0e:ba:9a:cf:da:93:06:df:39:ca:eb:c9:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2F:75:0A:71:A5:8D:32:E1:F8:48:35:3A:6B:52:16:43:36:4C:30
X509v3 Authority Key Identifier:
keyid:3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:91:eb:2e:0e:db:02:f2:54:ef:fe:a8:0e:c4:22:d9:72:92:
1a:f0:55:9a:11:24:16:eb:36:38:7e:e1:71:3d:27:30:eb:9e:
e7:05:c1:66:e9:43:73:65:6c:70:cb:24:59:98:10:c4:f2:78:
01:66:38:f1:a5:55:14:c5:0a:aa:ef:52:71:71:a9:6a:15:ed:
46:e8:57:f7:fe:9c:83:a6:c2:70:22:0a:15:28:dd:d6:ca:f3:
90:1c:1e:87:52:ad:20:95:09:d3:67:cb:ac:be:9f:d6:10:bb:
e4:09:42:17:ff:fe:55:92:ce:f2:79:a1:b5:64:e7:f4:cc:1b:
bc:c2:2b:28:d2:90:ee:df:5d:bb:58:e8:1e:d6:b8:37:a4:d9:
dc:57:dc:ea:e1:21:93:2e:fd:1b:93:cd:c0:ab:e9:2b:80:3c:
c0:ef:ff:fd:4d:02:f9:c0:48:9a:95:db:b5:0e:33:5b:fa:17:
3d:ac:93:34:08:e1:e5:a4:24:1d:f8:a6:20:4d:60:25:df:38:
71:fc:cc:c2:6f:c2:9b:90:6d:4b:2c:fd:17:13:32:90:27:5f:
11:2e:27:d8:14:41:ce:8e:5f:34:52:c3:47:ab:f5:97:4f:c8:
95:a7:72:d1:10:0e:14:5e:12:24:e1:22:b4:ac:71:8b:38:df:
03:d0:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:31:23 2025 by rpki-client