Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
File: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft (raw, json)
Hash identifier: KDDmeknrcV/GRvn2kb3kHOhqJEGvpTSKG4V61RH9mv8=
Subject key identifier: 7B:73:F7:B6:08:5E:CF:FE:7A:2A:E7:68:A1:4C:27:47:43:11:CC:82
Authority key identifier: 3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
Certificate issuer: /CN=3edd1cf4370085b6d25714091436f6686028d558
Certificate serial: 019875D1144CC7FCAADD219355A0D3BDE26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
Manifest number: CC
Signing time: Mon 04 Aug 2025 16:01:33 +0000
Manifest this update: Mon 04 Aug 2025 16:01:33 +0000
Manifest next update: Tue 05 Aug 2025 16:01:33 +0000
Files and hashes: 1: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl (hash: 4zomxYeUYISKGr93PHwai41VVPchFDPnjFZMFCFp3RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:14:4c:c7:fc:aa:dd:21:93:55:a0:d3:bd:e2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd1cf4370085b6d25714091436f6686028d558
Validity
Not Before: Aug 4 16:01:33 2025 GMT
Not After : Aug 5 16:01:33 2025 GMT
Subject: CN=7b73f7b6085ecffe7a2ae768a14c27474311cc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a2:55:91:c3:43:c4:56:1d:c8:9e:f7:e3:df:
e0:9d:e2:a2:9a:e5:a0:8e:85:4b:26:c8:81:3e:49:
1d:cc:87:bd:c0:83:a6:df:94:ed:b5:b4:4b:ee:8f:
0c:5d:7d:1c:9a:c0:1e:ad:e0:e9:db:7d:30:22:d6:
93:14:b1:f0:c3:2e:48:e9:d9:d6:77:05:a8:13:b9:
19:f0:b1:ff:87:ce:29:a4:2e:2d:41:48:6b:e8:a7:
61:38:13:9c:8e:9f:bf:2e:dc:2e:80:cf:77:68:05:
8d:fe:f4:54:67:3b:06:b0:a1:c2:19:d0:ed:9b:6f:
16:bd:ea:42:08:c9:9a:fe:fd:4b:08:9d:bc:ef:8a:
c8:5d:09:07:eb:8b:2b:f3:da:6c:70:3a:79:c1:21:
e8:16:25:d0:5b:de:60:33:ba:10:1d:e8:f5:72:23:
a8:2d:86:5a:b3:b4:96:0a:a7:a7:43:7b:e6:a6:b7:
51:b4:5b:7b:6a:62:43:4b:40:3c:90:83:71:92:90:
64:00:7c:2e:18:26:90:68:30:ba:e0:7f:55:29:17:
35:5e:5e:f4:7a:3b:58:bf:4c:26:9d:61:ab:9c:09:
bd:a0:c2:12:fa:ee:41:12:99:d7:72:0f:1c:8e:2d:
c9:cf:42:ab:15:02:9f:a9:81:0f:3f:06:bc:ed:87:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:73:F7:B6:08:5E:CF:FE:7A:2A:E7:68:A1:4C:27:47:43:11:CC:82
X509v3 Authority Key Identifier:
keyid:3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ba:52:93:1f:ad:3b:8c:ed:de:e0:4b:6d:8e:0d:80:8b:bb:
2c:e5:4b:f3:70:25:d7:ff:90:33:8c:ef:b7:59:c0:f5:4f:92:
4a:03:8e:67:0f:6d:b5:58:d0:5a:60:b2:dd:08:47:3d:c6:d7:
ed:08:e8:94:b5:15:f2:f9:20:8b:77:17:5a:c6:1b:6b:aa:ae:
fe:1c:d4:46:ff:b8:97:ed:e2:75:b8:ed:3e:58:b0:69:06:52:
72:24:09:d2:94:b6:f5:88:79:3a:ae:3b:bc:ad:79:d3:f6:da:
fe:1a:4a:c6:f7:de:24:e5:31:9c:e5:88:2f:e0:f6:ff:4b:9b:
88:cc:44:af:ae:86:97:86:6d:89:c5:cd:b0:b9:c5:36:cf:74:
e8:0a:67:96:69:86:37:97:5c:99:6f:81:f9:f8:51:cf:b4:4f:
0a:1b:ae:8a:3a:c0:57:f0:36:4a:82:cd:62:b0:41:85:30:d2:
a1:02:cd:fc:e1:84:58:00:b3:3f:63:09:45:03:1f:4f:b3:3e:
12:b9:62:48:ee:2e:68:6f:bc:84:13:2e:7a:4a:63:10:23:13:
a3:47:0c:6f:97:78:17:3b:9e:77:c6:85:39:b4:5e:16:8c:1f:
25:a4:e2:a8:47:a5:61:22:2c:cf:2e:bc:f9:ac:8c:d5:02:1d:
b2:2b:1f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:10 2025 by rpki-client