Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
File: Pk1h9w-8mJgzsvOA9SzulBHk26k.mft (raw, json)
Hash identifier: 8fD1QeE8Sug46iRkr75uwq4G6wuEdpA0ZPx6KyjstKw=
Subject key identifier: FF:9B:32:4E:83:A8:B6:59:8B:C5:E0:FE:70:23:E8:00:60:D2:55:6F
Authority key identifier: 3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
Certificate issuer: /CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Certificate serial: 01987487526EEE3F7D6F93CAF4AF391652F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
Manifest number: 0633
Signing time: Mon 04 Aug 2025 10:01:22 +0000
Manifest this update: Mon 04 Aug 2025 10:01:22 +0000
Manifest next update: Tue 05 Aug 2025 10:01:22 +0000
Files and hashes: 1: Pk1h9w-8mJgzsvOA9SzulBHk26k.crl (hash: AH1oyox089EZmqLe6Visu8ztFn6HV/wvxld/702bvtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:52:6e:ee:3f:7d:6f:93:ca:f4:af:39:16:52:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Validity
Not Before: Aug 4 10:01:22 2025 GMT
Not After : Aug 5 10:01:22 2025 GMT
Subject: CN=ff9b324e83a8b6598bc5e0fe7023e80060d2556f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:48:a7:f1:18:7c:6d:87:bb:6f:e4:33:a7:
8d:15:12:9b:49:4b:66:0e:41:8e:00:00:6c:89:92:
3e:6a:af:45:f5:84:7e:3f:78:cd:b0:c2:aa:a8:c1:
1d:63:d3:6a:de:fd:a9:e8:c5:b9:5b:a6:fc:9d:54:
2f:f1:12:ce:a8:4c:7f:c4:57:54:36:e9:df:d4:a1:
31:26:e7:51:2a:b3:58:d6:fc:1b:40:5c:d0:37:53:
dc:41:17:eb:57:c4:fe:80:16:85:3b:2f:a0:68:63:
3e:5f:15:4a:4b:8b:f3:91:c7:d1:60:77:c9:c3:5a:
cb:e8:b4:47:f4:6e:bc:9e:2a:dc:4e:3a:cf:62:0f:
28:10:12:5b:9f:6d:f6:0f:d0:b5:5e:9e:38:37:3d:
0e:9a:9d:56:5b:b9:8d:a0:60:38:c4:80:98:88:a5:
0a:d3:88:5f:ca:5f:af:43:d3:36:13:60:80:1a:ee:
4a:b7:5f:ea:c3:75:9e:0f:67:e1:d3:4a:b7:b3:b2:
d8:9d:a1:cb:92:95:8b:71:66:9a:dc:08:c1:be:76:
77:5d:c1:e9:06:e6:6f:d3:a9:b2:85:88:bf:dd:91:
20:8b:cc:af:82:6d:66:cf:db:ee:8e:64:73:9e:1d:
e2:20:c6:dc:8c:33:89:f5:83:78:39:00:64:c5:7f:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9B:32:4E:83:A8:B6:59:8B:C5:E0:FE:70:23:E8:00:60:D2:55:6F
X509v3 Authority Key Identifier:
keyid:3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:73:d2:3d:5d:00:59:7a:36:57:29:bc:97:95:51:97:f7:c4:
4d:a6:99:a5:d2:b1:d1:35:d9:2c:bd:a7:40:c8:07:8a:a9:b1:
96:a9:c6:b9:0d:6c:b5:51:b1:f5:00:0f:fe:07:63:d7:d8:a5:
10:fe:fb:cc:10:38:00:8f:6d:81:aa:58:fe:df:15:83:6e:ee:
30:71:ad:2d:4e:ce:b2:87:a9:76:c8:ff:ef:75:97:cd:ea:4e:
6c:0b:fd:67:50:88:77:47:0f:ab:0a:06:d8:ad:27:5a:0d:08:
66:ac:80:b8:17:d7:9c:97:d5:60:32:75:d7:6c:10:05:aa:04:
f8:35:be:64:62:76:ca:47:bc:7e:67:7e:9f:d7:d6:05:71:f4:
a2:a3:20:54:61:51:62:60:d1:a7:c6:4b:b0:f7:62:a4:e6:f7:
1f:51:b4:d1:f7:5b:3d:d9:c6:38:77:83:f6:61:e7:70:9d:75:
ab:f7:2d:0a:5d:42:17:16:d7:3b:39:e8:a2:7b:13:36:6d:1f:
56:6e:f1:19:fb:04:42:3a:e4:61:d6:32:b4:81:d6:e2:13:42:
de:21:f0:8b:12:e6:d1:95:73:e7:f6:a9:d0:76:3d:ec:b5:37:
13:9a:d7:40:ac:12:91:e2:a5:be:ab:b7:33:d8:cc:23:6a:91:
c1:2a:20:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:46 2025 by rpki-client