Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: l/9cX6hbGKXLdVwlRoGXE1q4Jt0A11mc65jTFbS9Dy0=
Subject key identifier: 2A:32:80:4D:C0:91:9C:F9:0D:D2:BD:A7:F2:C8:C7:2C:2D:26:37:A0
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 019771F60A5877448A2ED87F4DE9A2152151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0848
Signing time: Sun 15 Jun 2025 05:00:39 +0000
Manifest this update: Sun 15 Jun 2025 05:00:39 +0000
Manifest next update: Mon 16 Jun 2025 05:00:39 +0000
Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: E3PduDYfOS9k0jkmhINCm7s7Rr7yTPHB+urSTlX+C/s=)
2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:0a:58:77:44:8a:2e:d8:7f:4d:e9:a2:15:21:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Jun 15 05:00:39 2025 GMT
Not After : Jun 16 05:00:39 2025 GMT
Subject: CN=2a32804dc0919cf90dd2bda7f2c8c72c2d2637a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:3e:0e:6e:eb:2a:fa:f4:6e:80:a7:36:69:
da:c3:a8:8a:1b:c3:7a:5d:66:7c:b3:07:f4:d6:44:
be:f9:55:31:8c:0d:29:39:c8:ea:93:c0:4b:7c:cd:
fe:7c:67:c7:3e:d2:56:aa:86:5f:4a:1a:e7:fa:f4:
75:3b:8d:62:d8:f0:12:fc:38:3c:21:d5:68:54:62:
07:34:b7:5e:0c:df:92:58:04:df:38:b6:20:e1:4e:
69:21:5d:d3:bd:88:74:1e:1a:79:8e:e9:b3:e9:4f:
45:e9:c8:aa:24:04:a6:15:63:c4:c5:3a:fb:3e:81:
e8:6e:20:e8:8c:d8:a1:ad:08:e6:f9:b2:15:94:eb:
81:cf:f6:98:c6:0b:97:27:55:a6:2b:12:2b:92:69:
e4:7e:87:dd:8e:7f:53:15:60:8e:65:e2:bd:12:37:
1e:e2:09:45:af:48:7e:a2:31:d2:12:a0:8a:dc:75:
a7:e2:2f:67:6d:60:78:8e:1c:1f:b4:c7:9f:c3:26:
42:a6:7f:38:df:9f:86:f5:62:f4:6d:f3:6b:42:3e:
61:2f:fa:e4:db:02:c1:29:8d:08:ed:ec:51:7c:63:
c2:f8:a8:b2:90:d0:52:75:09:1d:6f:58:74:2e:f6:
5a:17:c0:f4:3b:14:cd:03:11:9a:ce:de:f2:4b:88:
57:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:32:80:4D:C0:91:9C:F9:0D:D2:BD:A7:F2:C8:C7:2C:2D:26:37:A0
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9c:59:20:a9:32:d5:92:96:3f:82:07:72:2c:81:20:fc:0e:
20:09:5d:60:b3:50:d1:f4:85:17:3b:74:1f:00:a2:f1:c8:f2:
21:c9:ad:12:3a:f3:76:7d:5c:8b:bb:4e:15:44:e5:03:52:96:
97:0c:95:8f:fa:d3:d4:73:bc:83:0c:f4:86:10:69:1d:52:0b:
39:86:06:9f:27:a8:4d:98:33:59:90:e8:eb:9c:13:9e:3f:a3:
90:f4:12:25:a4:7e:82:8d:c2:d0:25:61:6b:4a:c3:f3:19:f6:
3e:46:35:3a:db:06:15:30:bf:12:d1:73:b3:7b:6e:a6:c1:b1:
61:cb:60:46:30:8a:20:bc:6e:67:32:0c:f5:6f:de:68:dc:22:
d4:26:b6:a3:f8:50:9f:e0:6d:e0:3f:c3:3d:46:1e:c8:fd:79:
6c:0c:e9:c2:4b:9e:03:ac:a8:7a:1b:3f:77:e2:2b:c8:95:08:
60:26:2f:f1:fe:83:a8:78:19:cf:ea:5b:d1:51:8b:cb:c4:41:
93:31:f4:87:1b:28:3e:09:da:2f:cf:ff:f6:c5:ce:7b:8a:83:
66:17:5f:7b:3b:6a:52:30:5b:d3:cb:94:1b:5b:7e:03:91:b2:
ac:85:fe:55:96:30:a5:e8:c4:fc:62:fc:f7:36:d2:bf:31:3a:
6c:f9:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:09:09 2025 by rpki-client