Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
File: PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json)
Hash identifier: LXqD0REoNQaXD/XSZx1jbLDfZeK7l4TAyTSyRzkiX5Y=
Subject key identifier: 28:E6:45:0E:65:08:01:A2:AC:79:C3:44:17:B6:27:78:B5:0B:C9:47
Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
Certificate issuer: /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Certificate serial: 01976F2C8E7C03164628713D60C1B6172114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
Manifest number: 08B8
Signing time: Sat 14 Jun 2025 16:01:20 +0000
Manifest this update: Sat 14 Jun 2025 16:01:20 +0000
Manifest next update: Sun 15 Jun 2025 16:01:20 +0000
Files and hashes: 1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: If+Dw7whHOIVPDnHzRLMV3m4qlV4j4Lk/CKOimoXS5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:8e:7c:03:16:46:28:71:3d:60:c1:b6:17:21:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Validity
Not Before: Jun 14 16:01:20 2025 GMT
Not After : Jun 15 16:01:20 2025 GMT
Subject: CN=28e6450e650801a2ac79c34417b62778b50bc947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:96:e6:c0:0c:85:e5:04:8c:7a:a5:37:48:
6d:8c:0a:9f:e1:aa:ac:bb:74:71:2d:4e:33:1f:4e:
05:54:3a:f8:c4:7b:c6:a4:be:50:52:e0:55:f4:af:
3c:c7:f9:60:cb:fc:e7:6f:d8:d3:1c:30:5e:5e:f9:
9c:56:26:3e:35:50:66:3a:8b:db:2a:bd:f5:d8:bf:
a5:72:a2:8d:d0:3f:32:f6:73:d5:3f:4c:fd:a6:e8:
41:7f:9e:a1:9f:8a:4a:69:ce:f2:49:91:05:b9:f9:
df:0b:63:f8:ef:d4:ac:c8:a4:90:b5:d3:27:e9:4d:
bd:b3:ff:fd:7f:fe:4d:36:87:47:2c:81:b6:c7:23:
53:e7:ce:d0:51:6d:e8:30:67:cc:2b:50:0e:9b:8e:
3e:68:76:fd:83:a6:5a:34:15:ed:2f:d5:aa:32:79:
cd:7c:41:93:b0:ae:8c:63:2b:23:fe:d8:be:7c:c3:
d2:7f:dc:c0:ec:81:68:33:0d:e2:50:11:56:52:15:
e3:a1:21:55:75:b4:3c:cb:76:f1:52:02:7b:5a:fb:
68:7f:82:2f:2d:b6:53:1f:e5:7d:78:b8:b7:48:55:
9b:7b:d1:99:fd:01:d1:7b:2f:9e:6d:7c:e5:34:61:
9e:ee:ab:7d:0c:3e:9d:3b:c4:cd:7a:7e:23:b5:8a:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E6:45:0E:65:08:01:A2:AC:79:C3:44:17:B6:27:78:B5:0B:C9:47
X509v3 Authority Key Identifier:
keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f4:ae:34:53:5c:a0:f2:12:a3:dc:c6:87:5e:06:9d:a7:7e:
b6:a1:96:0d:84:7a:ac:9d:45:cb:d9:07:b1:fa:fa:3d:52:9f:
7c:6c:be:a6:e0:75:bb:69:e6:90:57:c8:36:63:af:d1:7e:f1:
c2:57:22:6b:69:3f:05:66:25:f2:92:d5:2b:88:6a:32:1b:f0:
77:8a:a7:08:08:d1:4b:a5:46:a4:2f:ba:ab:93:15:06:30:ef:
76:72:0c:b7:ab:5d:c0:ef:3a:cc:5e:87:d7:00:e7:98:15:bd:
55:3d:88:35:01:4a:f6:a7:c7:7d:67:88:99:30:43:7e:10:6d:
07:cb:3e:4a:3f:30:d9:48:e7:a5:8a:ed:cb:22:f4:5b:02:41:
27:e2:34:a7:4f:43:cd:23:b4:b6:33:a0:39:bd:eb:a8:54:92:
5e:71:79:4a:2f:a3:af:5f:42:d2:55:ca:71:06:cb:2e:c4:5a:
10:d4:25:cc:8f:68:28:f8:c5:03:0c:28:30:3c:57:d5:7d:22:
ef:01:fd:27:5f:0e:ff:8a:46:6e:b6:e1:f0:91:83:8e:54:03:
6f:0e:73:a2:06:fa:fa:34:e8:e5:67:07:10:70:ab:ba:f4:92:
18:4a:75:1a:20:13:11:20:2c:f8:53:df:8c:19:fd:b2:e3:00:
8a:6e:37:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:23:38 2025 by rpki-client