Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
File: PKE4ItxLDjEIGkhX_QQHDW2svgw.mft (raw, json)
Hash identifier: VyWQ2kuZrtGnmWKAbERqXBCuIY79PUH9E7Lg5VmpCtE=
Subject key identifier: FE:28:A3:DF:89:C1:8C:DD:4D:5C:3A:E9:2B:36:2E:ED:CF:DC:8F:68
Authority key identifier: 3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
Certificate issuer: /CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Certificate serial: 019768BC3747E4F05BA711C9E95AA154888F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 10:00:54 +0000
Manifest this update: Fri 13 Jun 2025 10:00:54 +0000
Manifest next update: Sat 14 Jun 2025 10:00:54 +0000
Files and hashes: 1: PKE4ItxLDjEIGkhX_QQHDW2svgw.crl (hash: V2kWyeT/rW+HOu5PeKjlwaqM7Tpk5fEEgTk9KW2eups=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:37:47:e4:f0:5b:a7:11:c9:e9:5a:a1:54:88:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Validity
Not Before: Jun 13 10:00:54 2025 GMT
Not After : Jun 14 10:00:54 2025 GMT
Subject: CN=fe28a3df89c18cdd4d5c3ae92b362eedcfdc8f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:02:c5:67:d0:b0:36:98:64:5c:0c:2a:9c:
a3:7b:2c:d6:87:00:41:cf:14:c4:93:ca:60:00:7c:
ec:e4:d4:6d:2b:0c:77:f6:5a:b1:36:66:72:e6:84:
56:d3:f3:19:33:df:1f:59:ce:9f:f1:22:57:5a:18:
d8:85:59:67:07:a4:8b:36:d6:8f:2e:fe:f3:87:49:
b7:5f:1c:8b:95:a2:14:d3:ba:f2:87:31:44:9d:69:
79:00:cd:78:45:4a:3b:52:2f:1a:70:04:5c:f2:d0:
26:ec:cf:91:f3:e2:51:9d:7e:c5:ba:af:bc:59:94:
7b:3e:73:17:e8:e5:44:ed:80:a0:05:ea:4c:31:cc:
35:32:46:d1:67:1b:ad:9f:e3:d7:7c:f4:39:c6:7d:
3f:7f:7a:a3:56:f2:d9:0e:93:72:10:49:a1:32:cb:
20:6a:92:b0:0c:76:d2:34:b3:b9:6d:29:a7:ce:e8:
08:ab:64:c1:79:61:90:9d:23:a4:6e:56:ca:12:9c:
01:0b:f4:e2:7b:85:82:b5:23:22:29:9e:08:28:e1:
08:c8:88:85:8f:56:0e:c4:8f:18:cd:bd:a1:b3:9b:
60:61:f6:35:b8:6a:59:c6:6c:86:49:3a:f3:1c:cb:
3f:ed:82:b1:f2:7b:6a:ec:12:6b:20:44:ca:54:e6:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:28:A3:DF:89:C1:8C:DD:4D:5C:3A:E9:2B:36:2E:ED:CF:DC:8F:68
X509v3 Authority Key Identifier:
keyid:3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:22:49:71:e4:8e:e6:5c:e3:6a:70:41:14:7d:0c:6e:e8:dd:
86:e3:ab:57:db:71:09:70:ec:2d:f3:10:1b:75:bc:66:8f:0c:
2b:a9:a5:17:72:ad:fb:16:d0:de:0f:b5:20:05:eb:f2:90:d2:
bf:da:ff:a4:21:cb:e9:9c:ef:65:16:4e:3c:77:b2:ac:08:fb:
80:a3:21:88:d1:53:b4:ec:3c:ce:ac:74:70:89:28:8a:a5:3e:
58:a7:dc:b5:04:55:86:4c:c3:8f:1b:17:6e:19:6a:a7:15:2a:
67:8e:3a:13:6d:91:f5:bf:a1:a9:4e:3f:ee:c2:e8:31:61:22:
8b:a7:b5:e8:fc:e9:3d:33:d0:b4:21:5a:b5:11:36:ae:f0:2c:
3d:ce:d3:d5:94:20:aa:d0:0e:54:f6:25:ce:0a:13:28:30:2f:
51:c7:5b:22:78:fb:46:61:ad:66:29:6c:ca:e5:7f:47:aa:48:
62:b2:df:aa:b4:07:29:f0:25:0a:38:1d:5f:f8:6b:05:65:45:
ee:28:2d:31:92:75:f7:6f:94:95:45:b2:56:03:e8:46:c4:d1:
23:2a:ee:f8:1f:83:5d:31:e0:2c:7e:9b:6e:94:2e:42:dc:a3:
da:2f:8e:49:fb:90:e4:5a:c3:46:49:c0:57:b2:8f:30:d3:50:
6e:05:71:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovDdH5PBbpxHJ6VqhVIiPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTEzODIyZGM0YjBlMzEwODFhNDg1N2ZkMDQwNzBkNmRh
Y2JlMGMwHhcNMjUwNjEzMTAwMDU0WhcNMjUwNjE0MTAwMDU0WjAzMTEwLwYDVQQD
EyhmZTI4YTNkZjg5YzE4Y2RkNGQ1YzNhZTkyYjM2MmVlZGNmZGM4ZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WICxWfQsDaYZFwMKpyjeyzWhwBB
zxTEk8pgAHzs5NRtKwx39lqxNmZy5oRW0/MZM98fWc6f8SJXWhjYhVlnB6SLNtaP
Lv7zh0m3XxyLlaIU07ryhzFEnWl5AM14RUo7Ui8acARc8tAm7M+R8+JRnX7Fuq+8
WZR7PnMX6OVE7YCgBepMMcw1MkbRZxutn+PXfPQ5xn0/f3qjVvLZDpNyEEmhMssg
apKwDHbSNLO5bSmnzugIq2TBeWGQnSOkblbKEpwBC/Tie4WCtSMiKZ4IKOEIyIiF
j1YOxI8Yzb2hs5tgYfY1uGpZxmyGSTrzHMs/7YKx8ntq7BJrIETKVOY55wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4oo9+JwYzdTVw66Ss2Lu3P3I9oMB8GA1UdIwQY
MBaAFDyhOCLcSw4xCBpIV/0EBw1trL4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEtFNEl0eExEakVJR2toWF9RUUhEVzJzdmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zN2YwYmQtYWQxYS00MmY5LWI5NDgt
YjI5NGY2YmY4MTM3LzEvUEtFNEl0eExEakVJR2toWF9RUUhEVzJzdmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zN2YwYmQtYWQxYS00MmY5LWI5NDgtYjI5NGY2YmY4MTM3
LzEvUEtFNEl0eExEakVJR2toWF9RUUhEVzJzdmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxSJJceSO
5lzjanBBFH0MbujdhuOrV9txCXDsLfMQG3W8Zo8MK6mlF3Kt+xbQ3g+1IAXr8pDS
v9r/pCHL6ZzvZRZOPHeyrAj7gKMhiNFTtOw8zqx0cIkoiqU+WKfctQRVhkzDjxsX
bhlqpxUqZ446E22R9b+hqU4/7sLoMWEii6e16PzpPTPQtCFatRE2rvAsPc7T1ZQg
qtAOVPYlzgoTKDAvUcdbInj7RmGtZilsyuV/R6pIYrLfqrQHKfAlCjgdX/hrBWVF
7igtMZJ192+UlUWyVgPoRsTRIyru+B+DXTHgLH6bbpQuQtyj2i+OSfuQ5FrDRknA
V7KPMNNQbgVxYg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:32 2025 by rpki-client