Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
File: PxP6dbPOiUzEZAQaipX4WffBxNI.mft (raw, json)
Hash identifier: F6NSWEZSWACKc6Z67MLUdAcVqMNfT5zsovWvuutAsHw=
Subject key identifier: C8:6F:9E:0F:28:96:64:1D:B6:AE:2D:5C:66:71:43:95:24:04:F2:BF
Authority key identifier: 3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
Certificate issuer: /CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Certificate serial: 019771F608D9CD6CCF5322BC4E99DA297C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
Manifest number: 0116
Signing time: Sun 15 Jun 2025 05:00:38 +0000
Manifest this update: Sun 15 Jun 2025 05:00:38 +0000
Manifest next update: Mon 16 Jun 2025 05:00:38 +0000
Files and hashes: 1: PxP6dbPOiUzEZAQaipX4WffBxNI.crl (hash: AUEeNtoDHSO8xYwNbH1B1vvYCu0vFqKpFaSmLfRQ154=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:08:d9:cd:6c:cf:53:22:bc:4e:99:da:29:7c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Validity
Not Before: Jun 15 05:00:38 2025 GMT
Not After : Jun 16 05:00:38 2025 GMT
Subject: CN=c86f9e0f2896641db6ae2d5c667143952404f2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:54:6a:6b:e1:4c:58:bd:a1:58:c5:0a:ea:
74:3c:ff:1c:4c:e7:fc:2e:7f:ef:c4:08:43:01:b5:
1d:bc:d6:cb:e4:25:5f:a0:a5:62:df:ee:67:90:db:
7d:df:a7:8d:aa:bb:bf:ee:f2:f9:87:e9:d6:1c:ce:
58:93:30:6f:2b:fd:8d:92:1e:70:66:1f:0c:45:a6:
43:20:2e:7e:58:2d:3f:39:75:eb:8d:5c:43:bb:7c:
b0:e5:f5:f5:e9:59:41:0a:2d:d9:57:ad:24:3f:77:
66:34:0f:c1:31:e4:5a:25:e0:f3:71:21:ca:78:3a:
1b:a5:a4:06:a3:26:5e:2b:1b:1c:a0:7a:4f:65:b0:
46:b1:f6:b9:ac:c4:98:56:a9:96:25:e8:a0:ac:09:
04:91:aa:11:00:da:5c:72:0f:91:c5:bf:86:b5:a1:
82:ee:d7:19:64:2a:5b:e6:5a:ef:b2:8c:c8:76:11:
69:99:e2:6e:ac:36:46:de:f8:c8:b0:66:30:f6:75:
0f:0e:ac:9d:52:bf:e0:0d:ff:90:52:d4:cd:ff:ff:
c2:56:4f:20:c3:08:17:c1:90:50:0e:0e:b6:37:2e:
06:b0:b3:39:ca:97:8e:cd:27:bf:ec:d3:9d:c2:de:
d9:83:e1:a6:38:4a:69:a9:7c:da:fa:f1:4a:d3:1b:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6F:9E:0F:28:96:64:1D:B6:AE:2D:5C:66:71:43:95:24:04:F2:BF
X509v3 Authority Key Identifier:
keyid:3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1f:19:7d:27:94:4c:e6:72:b4:0d:c9:1a:15:56:98:06:16:
ca:cd:77:68:7b:86:6c:b4:ae:df:c6:f8:ea:57:c7:03:5f:3d:
a4:b7:d7:be:5d:66:9a:8b:a4:a7:ce:26:b5:8c:9c:60:16:d3:
6c:04:27:be:ab:2d:27:ad:08:e7:eb:0c:94:c7:87:41:b1:7f:
c7:07:67:1f:52:58:a3:29:56:e2:97:20:f2:9f:c9:09:cc:af:
cf:3a:11:76:ec:7c:c1:73:ec:bc:03:38:74:70:95:e8:7e:4a:
18:b8:53:33:b1:e6:23:0e:ba:62:17:3f:e7:28:12:6f:15:06:
16:33:e5:58:52:ce:8a:eb:00:08:83:08:80:30:29:59:0d:1c:
53:e5:41:29:b3:c3:cc:d4:dd:cd:c0:de:34:02:dc:df:32:18:
f1:ff:7d:be:a6:63:40:6e:d1:bd:17:c8:e2:b4:52:51:bc:8e:
60:88:b2:87:b6:ef:4f:3a:a3:75:07:3e:5a:4c:fc:87:80:2a:
62:40:82:1a:d8:23:9f:db:9d:3d:e4:2e:54:d8:93:0b:a7:5b:
58:88:3e:c1:9e:23:5a:92:48:c8:bd:44:71:3c:fe:70:7b:1f:
09:b1:3d:b7:00:99:12:c9:b2:4e:63:4a:cd:69:ea:28:e7:82:
44:45:49:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:48:54 2025 by rpki-client