Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
File: PFlVXsIygmx91tmpJrU2AoN5SfY.mft (raw, json)
Hash identifier: t6NnehqAjrR9u+VVUu94ttELqromDfy94LSWvcf52/0=
Subject key identifier: 15:CA:B7:63:B9:8D:20:1D:53:26:7F:ED:E4:6B:85:FA:CA:E2:16:92
Authority key identifier: 3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
Certificate issuer: /CN=3c59555ec232826c7dd6d9a926b53602837949f6
Certificate serial: 01976CCF78171E1415D6499D23D1AB310749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
Manifest number: 0143
Signing time: Sat 14 Jun 2025 05:00:25 +0000
Manifest this update: Sat 14 Jun 2025 05:00:25 +0000
Manifest next update: Sun 15 Jun 2025 05:00:25 +0000
Files and hashes: 1: PFlVXsIygmx91tmpJrU2AoN5SfY.crl (hash: wTmzKrRbArOGFLvs68Um/8SuCRm/hrrlXXhTyslVWZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:78:17:1e:14:15:d6:49:9d:23:d1:ab:31:07:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c59555ec232826c7dd6d9a926b53602837949f6
Validity
Not Before: Jun 14 05:00:25 2025 GMT
Not After : Jun 15 05:00:25 2025 GMT
Subject: CN=15cab763b98d201d53267fede46b85facae21692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:4a:4c:d3:66:53:59:59:f0:d0:57:4b:1d:
ae:96:49:3a:d7:e8:fc:50:1e:26:47:80:9a:a2:6b:
e1:c9:c3:b9:31:a1:34:9e:f6:b3:1d:6e:02:7d:c9:
bc:9c:91:a8:e0:5c:bb:91:ef:ef:7a:37:4e:04:6a:
85:6d:65:5e:bc:e2:31:e6:4b:e2:8c:cb:29:5b:9a:
cf:6b:8e:03:7f:f0:7d:7e:dd:50:9e:c5:5d:39:e0:
c6:45:30:c6:ec:74:ae:2e:ba:f8:ce:d3:7c:98:04:
41:01:b3:9f:29:35:58:cf:a9:55:57:ce:3b:2b:df:
70:d3:4c:ae:7c:c0:c4:77:32:8a:7d:9a:42:af:0a:
d1:56:cc:d1:59:d9:8f:08:46:c7:47:f2:52:83:7b:
09:a9:3f:ea:ca:60:a8:dc:1a:7f:ed:2b:99:31:dd:
29:45:69:6f:2b:fd:d8:e9:6e:b8:c5:a4:96:19:2e:
0a:e5:6c:78:9f:11:ae:64:e9:a8:55:d9:1e:a1:bd:
08:20:94:2b:b5:1e:13:a6:71:fd:f2:10:f2:3f:77:
ae:65:6d:57:49:ce:b3:da:f9:e8:76:8f:00:5a:db:
23:8c:41:a0:8e:d7:18:4d:e9:7e:86:6c:ad:48:4b:
4a:90:e3:ae:f2:6e:35:49:44:55:20:1b:25:f2:5e:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CA:B7:63:B9:8D:20:1D:53:26:7F:ED:E4:6B:85:FA:CA:E2:16:92
X509v3 Authority Key Identifier:
keyid:3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:80:e8:5a:95:cc:53:f6:fa:2b:0c:b7:2d:1c:2d:b0:0a:c3:
3c:01:19:d4:9d:84:2f:13:46:28:08:a0:89:92:a4:ca:4a:e7:
df:90:22:4e:a3:85:f6:7d:2f:b9:bd:80:a5:db:84:24:0f:6b:
d0:bc:c0:b5:00:41:dc:20:4e:a9:b0:67:e0:df:54:75:fd:dd:
ed:b3:76:b6:24:cb:fe:1d:1f:af:49:83:dc:27:67:01:76:d9:
9d:08:ee:6e:31:2d:e9:90:38:39:f3:26:0b:c8:45:4e:d5:68:
3e:60:96:23:3b:4a:fe:99:81:03:52:65:a7:02:03:2d:42:43:
96:26:5b:c9:e6:19:8b:f5:b8:cb:29:1e:8e:22:f7:cc:d3:04:
7a:48:09:ae:f0:7e:c2:22:0c:a6:46:25:8f:a5:67:b4:54:af:
31:69:62:9a:68:33:62:df:86:d4:fa:1d:46:12:24:ef:80:1b:
55:13:20:62:af:07:9c:af:45:7b:9e:1b:25:d9:6e:f4:05:08:
16:32:1d:63:96:67:4f:b3:e8:96:ed:d6:f8:ab:9a:48:05:db:
b0:6d:e2:6c:7e:7e:00:a2:c6:28:77:22:d4:57:de:70:56:6c:
bb:9a:69:c5:06:e8:68:2c:f9:3d:b7:f0:44:6d:99:47:d0:73:
1b:0c:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:05:14 2025 by rpki-client