Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
File: pKgNKvhhtwo37AUOAT5t-6lMiz0.mft (raw, json)
Hash identifier: tHXPXvaLjoZAoV39AortF4MjWeM2HLObK5RO38vtUd0=
Subject key identifier: D7:C1:BD:3F:6A:8D:64:F8:3F:77:51:0F:6E:EB:20:30:37:6A:57:8F
Authority key identifier: A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
Certificate issuer: /CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Certificate serial: 019778D3AB6773B3AED8A0E3B6D4C6D26E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
Manifest number: 0E39
Signing time: Mon 16 Jun 2025 13:00:27 +0000
Manifest this update: Mon 16 Jun 2025 13:00:27 +0000
Manifest next update: Tue 17 Jun 2025 13:00:27 +0000
Files and hashes: 1: pKgNKvhhtwo37AUOAT5t-6lMiz0.crl (hash: LKs15IRml0clEY31ur963/5xkpUQjJ70olAPELDMZ7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:ab:67:73:b3:ae:d8:a0:e3:b6:d4:c6:d2:6e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Validity
Not Before: Jun 16 13:00:27 2025 GMT
Not After : Jun 17 13:00:27 2025 GMT
Subject: CN=d7c1bd3f6a8d64f83f77510f6eeb2030376a578f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:32:00:08:1a:65:f8:f2:54:c3:d7:a0:d2:
e8:f4:50:80:dc:a8:f3:7f:1f:57:73:d1:dd:60:d5:
d8:db:2f:b6:64:cb:5d:c5:33:87:fd:4f:f1:88:53:
8e:65:b9:97:60:22:14:68:99:84:c1:36:5b:10:7d:
93:a6:d8:f4:3d:2b:e5:57:9c:87:ce:28:c8:31:bf:
e8:83:f4:5b:7b:98:e9:16:ae:ed:ca:85:9a:0d:a6:
4f:c5:72:5b:99:88:bd:b3:38:41:1c:a3:d6:88:14:
5f:cc:0e:34:7a:b7:2c:e5:ee:7b:53:38:16:eb:43:
79:5d:57:70:08:f1:e6:fc:0e:86:83:19:c6:be:42:
2f:9a:82:0d:32:52:74:fd:9c:2c:08:37:aa:24:27:
80:21:73:d6:d2:fe:94:78:de:53:90:c6:81:38:da:
72:a3:74:a7:32:6d:f2:98:49:85:44:3a:e9:81:3c:
08:1d:e5:cc:d4:ce:9d:7e:8e:f3:a3:47:ef:fd:f8:
b7:3b:da:87:c7:d6:a5:05:fc:d3:20:dc:66:5f:b7:
26:4a:65:41:c9:5a:13:a7:62:ee:ab:d6:15:35:6f:
5a:ed:4c:33:b2:ac:12:24:6d:72:a4:22:59:f1:c8:
cc:e6:a8:18:ea:0e:49:8f:77:2f:ac:d7:3a:ea:e6:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C1:BD:3F:6A:8D:64:F8:3F:77:51:0F:6E:EB:20:30:37:6A:57:8F
X509v3 Authority Key Identifier:
keyid:A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4e:3c:ee:8a:6b:17:79:a9:24:a3:d4:72:38:d5:08:54:99:
98:a8:e6:a7:73:9c:79:a9:da:48:e3:a6:a9:4a:98:4b:bb:2e:
18:c2:f7:40:8e:77:6b:b9:5a:77:e3:08:91:8f:ae:83:f4:44:
f2:15:09:a0:d6:86:b7:24:2e:a8:9a:e7:cc:33:8f:d0:92:c2:
a0:46:3a:19:98:8a:6e:f8:3b:cd:8f:17:c4:1b:09:39:8b:4b:
40:7b:17:7e:a0:54:8b:58:8a:b8:13:f8:18:ba:e2:65:18:db:
12:29:7a:ef:2b:90:88:ff:fc:a0:dd:b0:48:49:ba:f5:7f:fa:
ec:54:48:81:3a:fb:8e:93:75:8d:1b:b7:6f:11:f6:9b:5c:b2:
26:2f:1c:4a:97:93:9f:bc:4c:de:8c:00:f0:94:91:bd:7c:9e:
ce:ec:8d:b5:28:d5:d6:9b:68:3f:99:74:2e:b5:1d:45:09:2d:
9d:4f:f4:28:a4:b5:df:54:13:a9:f8:bb:15:07:d6:ed:3a:8b:
74:b5:f3:51:1a:2b:f1:31:93:bb:b8:da:71:1c:1c:43:f9:54:
17:b5:db:27:13:69:63:c9:4d:a6:13:cb:03:1f:d1:71:b3:52:
d2:b6:fd:67:fe:1e:80:ff:70:63:1f:86:5e:3f:26:cf:47:7c:
5c:c5:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:42:44 2025 by rpki-client