Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
File: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft (raw, json)
Hash identifier: MnAH8nxIHjftclzlV32KbA2MuamajGVxJV9VKT1Nv/I=
Subject key identifier: 41:DB:30:14:AD:AE:BC:E2:96:CD:DF:0F:55:60:7B:C1:1E:38:91:28
Authority key identifier: A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
Certificate issuer: /CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Certificate serial: 01976FD1290B43C1607B7D01E5706AA820CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
Manifest number: 01E8
Signing time: Sat 14 Jun 2025 19:01:07 +0000
Manifest this update: Sat 14 Jun 2025 19:01:07 +0000
Manifest next update: Sun 15 Jun 2025 19:01:07 +0000
Files and hashes: 1: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl (hash: uUDWJBPh7OPpSwp/pburnyd9A2G8dLcqkwWiphaPTjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:29:0b:43:c1:60:7b:7d:01:e5:70:6a:a8:20:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Validity
Not Before: Jun 14 19:01:07 2025 GMT
Not After : Jun 15 19:01:07 2025 GMT
Subject: CN=41db3014adaebce296cddf0f55607bc11e389128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:8f:fb:c0:da:b7:22:e2:d3:c0:fc:ce:17:
0a:d1:65:cb:87:fa:3f:f4:28:55:16:95:4a:75:bb:
fc:23:f8:3a:cc:f1:fb:77:44:6e:6d:a8:0a:a8:d6:
34:a2:bc:1d:26:c6:9c:0e:29:f9:60:64:52:38:70:
ca:81:f2:b2:90:62:23:f7:91:f7:5b:fb:48:56:81:
f6:98:ee:e4:38:8f:b7:d0:05:ca:f3:3d:0b:18:38:
cb:b0:85:66:79:40:3e:b4:6b:1a:84:9c:37:0b:be:
7a:f9:0b:9c:d2:58:f3:f7:82:40:2f:46:72:a1:c8:
8c:e3:6d:5b:5f:e8:e9:2b:2a:32:e6:47:f6:2f:6e:
e2:af:f9:69:d8:86:d8:bd:31:17:4f:e4:de:ca:8a:
b5:0c:2d:86:55:38:a5:83:5f:88:d7:31:7e:c4:57:
9e:89:ac:55:18:3a:4f:05:ee:0a:67:12:b9:ca:57:
f0:70:61:8f:d6:94:a7:b7:30:c5:d4:6c:36:ed:90:
d1:d6:31:a9:1c:ea:82:67:e7:61:df:74:c4:1b:90:
19:42:b9:83:b8:45:a4:0b:2c:c1:31:34:e7:e5:b1:
15:e2:be:f8:f5:5d:00:4a:0c:6d:ff:42:f9:5b:39:
d8:7f:f3:d4:2f:f9:7b:c4:7d:76:56:42:d6:dc:57:
0f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DB:30:14:AD:AE:BC:E2:96:CD:DF:0F:55:60:7B:C1:1E:38:91:28
X509v3 Authority Key Identifier:
keyid:A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e0:77:91:a3:38:c6:0e:ae:ac:14:03:97:d9:e9:52:c8:9b:
4e:dd:24:c8:94:85:93:f4:78:20:a6:af:4b:d2:de:16:a9:3c:
46:99:88:0f:89:c6:f4:ea:a1:d4:07:98:ca:b3:03:6a:1c:0b:
10:cf:32:03:e1:4e:a7:ef:f3:0d:75:07:aa:a3:72:be:05:71:
8d:54:9f:11:eb:2b:a5:81:a9:69:50:a3:10:3d:68:2f:2c:8b:
cb:78:04:07:81:1c:36:2e:92:95:c0:17:47:fb:27:7d:3b:b8:
b5:36:6c:99:c9:95:4f:d1:bb:a2:e8:bd:69:5f:9c:a8:a2:f7:
7b:65:85:a5:7a:31:1d:a0:ff:db:f6:27:fc:27:9c:d1:39:e1:
15:70:c5:36:f7:c6:b0:e0:c4:ac:04:b1:68:ea:fd:e6:4e:45:
1d:56:e6:7f:6e:5d:79:b7:cf:54:c1:12:c4:f1:d2:c2:09:a2:
c5:67:0e:03:a3:70:27:f2:09:bb:7c:0c:a9:95:53:aa:8e:a4:
86:a8:c6:2c:40:ce:1f:af:0f:d5:cb:b4:81:6f:01:0f:98:2e:
19:b2:60:25:64:cf:68:22:0c:c9:83:d9:6d:9a:9b:d1:c0:cd:
92:2e:03:6f:a9:84:29:2f:5a:b4:5c:ff:fb:2d:64:9d:d4:1d:
60:ea:d8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:21:00 2025 by rpki-client