Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier: cIIN6XEweynlgSogK76ZCdEI54PBpvYNUEsilkcoXso=
Subject key identifier: 57:D6:A3:75:4E:90:EE:4D:5D:5A:A6:6B:CF:06:CD:43:33:DB:36:48
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial: 01976F2C8872DA65597B25351C6927761F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 16:01:18 +0000
Manifest this update: Sat 14 Jun 2025 16:01:18 +0000
Manifest next update: Sun 15 Jun 2025 16:01:18 +0000
Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: yspQp+xwtHFyi+zDDR7oXiEi+VeqIsziyeXPGOgkoOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:88:72:da:65:59:7b:25:35:1c:69:27:76:1f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Validity
Not Before: Jun 14 16:01:18 2025 GMT
Not After : Jun 15 16:01:18 2025 GMT
Subject: CN=57d6a3754e90ee4d5d5aa66bcf06cd4333db3648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:17:11:a4:7a:ff:06:14:02:6d:01:d9:52:
cf:69:9d:64:ee:9e:dd:bf:53:3e:7d:99:ab:e0:c2:
c3:01:d3:1e:58:be:c5:ff:d8:57:55:c4:2e:42:9d:
d1:9f:9b:8b:bc:24:03:64:c7:c2:3c:15:ca:83:be:
1a:25:33:26:73:ee:8c:ea:de:fd:d4:b1:d7:cc:29:
4d:eb:ac:93:c9:a4:74:36:42:23:3b:6a:5b:5b:e5:
31:50:6c:ed:77:53:48:5d:56:bc:aa:58:48:84:16:
ac:6e:fb:e5:d2:db:45:40:cf:74:2a:69:81:f5:3a:
7b:27:e7:1e:c7:5e:07:44:d1:4f:3d:ab:33:d4:e0:
9e:04:a6:ab:63:91:c9:54:7b:ec:e6:e3:50:69:e4:
da:01:ac:a1:2a:e2:c9:c2:17:27:89:ce:57:fa:34:
dd:2e:9e:b7:99:cd:aa:1b:07:24:1f:f4:99:97:3f:
3b:66:80:66:4e:33:e5:4f:8f:05:90:28:fb:0e:a6:
af:7e:a1:4c:5f:f3:80:9c:7d:6a:96:0c:7d:d3:92:
50:e1:de:95:bb:81:45:f3:22:3d:6c:29:9a:33:d4:
70:1a:f1:9f:39:dc:b8:56:7f:7e:c0:09:85:ec:3d:
52:e0:06:35:25:6a:71:2a:b5:f9:c3:03:0d:d6:e5:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D6:A3:75:4E:90:EE:4D:5D:5A:A6:6B:CF:06:CD:43:33:DB:36:48
X509v3 Authority Key Identifier:
keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3d:a3:fc:cd:e0:16:ef:89:eb:b7:62:c4:86:8f:b7:12:41:
14:9d:2b:05:2e:ae:58:7f:08:7d:4f:e1:93:d2:77:f3:48:74:
0a:a5:80:99:5e:73:fb:66:d3:1b:a7:1c:f7:8e:6d:60:12:dc:
09:75:0e:7c:1e:81:4b:44:7a:8a:b2:b1:b0:69:9c:1f:85:53:
8e:4c:d2:e8:d5:8b:ca:77:94:e6:60:3a:ae:df:43:fc:01:43:
06:ea:20:60:4e:b5:06:fd:0d:3f:02:15:75:a2:88:d9:7b:f3:
bc:b2:69:47:86:d2:25:a3:29:40:bf:b1:f8:73:06:f5:9c:cb:
2a:7c:1d:1a:aa:9b:e2:61:8d:94:b5:ba:ca:6e:74:2b:d2:e3:
64:80:2a:9a:1e:e5:69:28:fb:2a:91:bc:38:e8:c2:96:78:0b:
dc:9b:e5:ad:0f:b7:40:f5:11:66:c5:7c:40:52:68:5e:94:96:
87:5d:6f:d1:87:ad:cc:46:14:0b:a2:6b:27:14:fe:3b:ff:44:
e4:98:70:68:c4:96:79:c9:c9:1c:00:62:d3:49:8a:45:76:92:
f3:63:5e:59:5a:9b:63:88:d9:12:a9:37:69:a0:9c:a3:d4:15:
eb:cc:38:15:c2:7b:50:53:51:3d:85:0a:4d:8e:7a:68:e6:8d:
cd:c6:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:26:18 2025 by rpki-client