Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
File: PcJAKLjucj8XJvRZUfpc_mteQms.mft (raw, json)
Hash identifier: zyrrXBDi0K2exwOpE3Y6eBySHSrat3wfxLPeMTKbHjU=
Subject key identifier: 5B:10:D6:48:17:23:5D:59:2B:53:24:8F:EE:34:F2:64:88:C9:59:0A
Authority key identifier: 3D:C2:40:28:B8:EE:72:3F:17:26:F4:59:51:FA:5C:FE:6B:5E:42:6B
Certificate issuer: /CN=3dc24028b8ee723f1726f45951fa5cfe6b5e426b
Certificate serial: 0198733CF35EE59B1BB206560537478548E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
Manifest number: AB
Signing time: Mon 04 Aug 2025 04:00:30 +0000
Manifest this update: Mon 04 Aug 2025 04:00:30 +0000
Manifest next update: Tue 05 Aug 2025 04:00:30 +0000
Files and hashes: 1: PcJAKLjucj8XJvRZUfpc_mteQms.crl (hash: 8p8fG9PoDOHCNVZ5+rJ+ahBmY28f0LheERW0eTWEHjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:f3:5e:e5:9b:1b:b2:06:56:05:37:47:85:48:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc24028b8ee723f1726f45951fa5cfe6b5e426b
Validity
Not Before: Aug 4 04:00:30 2025 GMT
Not After : Aug 5 04:00:30 2025 GMT
Subject: CN=5b10d64817235d592b53248fee34f26488c9590a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:6a:b7:a2:85:0b:26:42:31:b8:e0:0c:f6:
ce:56:33:45:2c:a4:e3:98:d6:ff:b7:0b:c5:10:a8:
d3:02:db:3b:77:50:df:af:58:54:35:21:a1:48:71:
8e:4c:20:a1:d3:4f:a9:8d:55:a2:13:20:f6:98:ff:
50:2c:c0:e3:00:13:9e:d5:d5:fe:7a:6c:54:b4:e9:
ac:5e:cb:90:cc:9f:15:3c:c4:4a:2a:eb:0b:9a:aa:
6d:84:ea:f6:ce:82:8c:ba:e2:e0:61:b6:eb:2e:f7:
cf:2b:30:16:d8:1a:1c:d1:f5:60:e2:13:76:0e:af:
96:fc:26:4b:d5:ed:0d:ad:5d:68:da:f4:67:f9:7f:
21:40:22:ee:7e:9a:89:ba:d6:b1:e1:cf:e9:d2:78:
4d:32:a2:0f:e4:e7:01:26:aa:7d:45:6f:60:03:95:
ff:13:6f:a7:17:2c:97:67:c5:fd:4b:ee:83:3b:5d:
88:3e:51:f6:90:0c:fe:2b:f4:17:c0:81:74:da:86:
58:67:24:c8:92:37:24:80:41:41:3d:1e:51:d0:15:
6c:cf:6c:0c:48:16:84:bb:c8:35:64:7d:7a:8e:27:
c6:1a:da:be:e4:fe:e3:80:73:33:79:dd:cb:95:cb:
b9:66:d8:91:79:20:04:3d:6f:9b:ae:8e:f4:c2:a8:
f5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:10:D6:48:17:23:5D:59:2B:53:24:8F:EE:34:F2:64:88:C9:59:0A
X509v3 Authority Key Identifier:
keyid:3D:C2:40:28:B8:EE:72:3F:17:26:F4:59:51:FA:5C:FE:6B:5E:42:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ec:58:10:93:c1:03:fa:2e:22:b5:ea:1d:e4:b5:cd:7f:41:
d3:c8:99:7c:b7:bc:4c:47:93:d0:77:9b:e9:eb:9f:ee:ac:c4:
2d:d5:a8:aa:77:3b:21:2e:69:bd:b2:cb:29:16:8a:a0:5a:b2:
77:96:d7:b7:16:6d:d6:43:08:d3:96:88:c6:b5:da:e0:08:95:
34:34:3e:18:df:65:c0:07:94:59:9a:30:91:c7:0b:35:85:57:
ef:af:cb:81:3c:97:e4:7e:12:d5:de:a9:ef:b9:bb:8f:46:d4:
a4:69:d4:67:44:4e:51:db:de:27:16:a7:b7:29:b3:a3:b1:e6:
80:37:65:1b:a5:5d:02:aa:f5:94:1c:2b:85:78:41:bb:d6:c1:
37:83:f5:1b:8c:96:ac:9f:d6:ce:46:08:fc:64:60:84:c3:8f:
8e:21:44:0e:fb:a2:d4:c3:09:c4:f0:96:82:ba:dd:cc:74:88:
3c:82:66:6d:c5:b4:3d:f7:ae:5e:e8:17:c1:b1:75:76:a7:04:
9e:67:ce:ba:75:8b:7d:6b:84:94:8b:6d:c7:ea:cb:74:83:c8:
5b:67:47:f2:5d:87:95:05:dd:ca:34:6b:b5:92:8d:b4:3a:be:
b8:68:77:f3:f4:3c:26:7c:2c:c0:3b:78:24:ff:f7:a1:70:24:
12:7f:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:24 2025 by rpki-client