Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
File: Pn1HTATkiliTr3HDWnfN1oJv0zk.mft (raw, json)
Hash identifier: p+rGlA6KdLA7hoWy9XMZgi2kLhlArLZcWK6c9r+WSRs=
Subject key identifier: AE:43:B2:87:4F:FA:7E:CD:CA:97:D7:AE:AF:2B:F2:97:52:94:C4:AA
Authority key identifier: 3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
Certificate issuer: /CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Certificate serial: 01976CCFB0A917A963CAD68868339492A987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
Manifest number: 043A
Signing time: Sat 14 Jun 2025 05:00:39 +0000
Manifest this update: Sat 14 Jun 2025 05:00:39 +0000
Manifest next update: Sun 15 Jun 2025 05:00:39 +0000
Files and hashes: 1: Pn1HTATkiliTr3HDWnfN1oJv0zk.crl (hash: spsk5Cx8MZwNhN/bAhFZTXq7eaW3aZZcz3i7NO/RVP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:b0:a9:17:a9:63:ca:d6:88:68:33:94:92:a9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Validity
Not Before: Jun 14 05:00:39 2025 GMT
Not After : Jun 15 05:00:39 2025 GMT
Subject: CN=ae43b2874ffa7ecdca97d7aeaf2bf2975294c4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8b:8d:10:5c:17:ae:94:ba:70:47:f3:1b:5d:
55:4d:6a:0a:5f:05:56:86:f0:c9:78:80:7e:f8:bc:
19:ee:01:0e:c0:de:e5:31:86:bd:73:45:5c:0c:51:
01:7e:a5:64:06:9e:23:e3:2b:50:00:59:4c:1a:ac:
29:66:aa:aa:43:04:3c:f6:71:5c:47:2a:94:d1:84:
64:4d:04:73:c1:1b:a4:98:06:8f:61:fe:d2:04:a3:
98:45:ef:e1:0c:6a:c3:1a:14:de:5b:e9:31:63:47:
60:ad:33:eb:ae:b2:16:81:63:3d:b8:af:13:76:9c:
74:74:19:fd:e0:30:ed:d9:11:41:70:cc:25:69:26:
7d:17:ee:59:5a:47:3b:d9:57:a3:91:d9:00:47:32:
89:e5:3a:d3:79:32:68:c8:ef:6d:cf:39:f1:db:da:
2a:7b:79:a7:92:25:78:f3:e8:2a:7f:ab:48:e5:bd:
1e:8f:ee:4d:9b:14:33:60:8d:d3:be:61:04:07:09:
7f:09:c4:a4:f8:da:60:cc:64:d0:c1:3b:46:eb:1a:
ea:67:fb:cf:92:5a:e3:e7:0a:a1:64:b3:03:bd:ca:
4b:77:0d:4d:18:bc:ca:1c:36:91:6c:7b:30:75:c3:
6e:15:1f:f0:61:81:d8:2b:24:bc:7b:30:7f:0c:72:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:43:B2:87:4F:FA:7E:CD:CA:97:D7:AE:AF:2B:F2:97:52:94:C4:AA
X509v3 Authority Key Identifier:
keyid:3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e5:c9:07:3d:78:48:d3:45:35:5a:42:d9:dc:24:b5:85:b4:
d4:6e:70:31:4f:43:44:7d:d1:fe:02:a0:ec:cf:85:c2:f4:06:
d8:c5:fc:94:6e:b1:68:15:04:7d:3d:16:e2:c3:0d:c0:27:00:
82:07:28:40:ef:6b:5b:60:0f:1c:de:cc:a2:cd:a3:e9:76:22:
90:0c:a5:e9:7b:0c:16:e7:05:fd:23:3a:8e:c4:24:99:09:3f:
13:c6:d5:8e:8f:2b:cb:2b:ec:7a:f3:44:ff:1a:31:5c:26:78:
cb:ae:f6:7e:4d:c0:3f:7b:82:97:7c:cb:43:58:da:83:00:2d:
29:50:c5:6a:27:41:2e:a5:d5:f9:b1:82:78:60:4d:9b:4a:60:
a3:82:12:24:3b:df:37:00:ae:42:19:86:34:75:92:64:65:89:
ff:cb:c6:70:f1:49:92:09:9c:43:0e:6d:dd:f2:10:c6:68:cf:
67:7a:ca:4d:eb:8f:85:aa:0f:25:a3:c4:0c:42:2f:13:f1:bf:
76:b3:a9:2f:73:40:12:5e:34:18:4c:23:cc:6e:4c:b8:01:4c:
ef:0a:c2:04:30:36:d8:40:8a:4e:a5:17:42:e6:b4:cd:c6:a8:
96:c2:07:ba:a5:d0:44:e9:b1:10:71:c0:fb:ec:21:a8:92:0d:
06:b1:d0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:25:03 2025 by rpki-client