Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier: SG/fvkzKbcqcgIsmKJdnQZWY4kNSPBmQU3m+ee4I/iI=
Subject key identifier: 24:D0:81:1D:3C:9A:57:EC:18:A4:A0:19:AC:63:7A:CD:35:11:7E:2D
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial: 01976C2B1F11C7C4484782B1BA3978F54D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 02:00:54 +0000
Manifest this update: Sat 14 Jun 2025 02:00:54 +0000
Manifest next update: Sun 15 Jun 2025 02:00:54 +0000
Files and hashes: 1: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: itQBZLrXl0cAjJAEK6AA+Akyno52DZIOAXv93kj+mdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:1f:11:c7:c4:48:47:82:b1:ba:39:78:f5:4d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Validity
Not Before: Jun 14 02:00:54 2025 GMT
Not After : Jun 15 02:00:54 2025 GMT
Subject: CN=24d0811d3c9a57ec18a4a019ac637acd35117e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:6a:23:e7:e6:f8:31:a7:c9:42:0d:f9:79:
0f:e8:60:d6:af:89:64:db:82:cd:56:d7:cf:07:cd:
bb:b2:6f:e7:62:90:33:a9:dc:bf:7b:df:6d:03:3e:
12:52:06:47:25:a0:f2:d0:7f:9b:d3:8d:31:1b:a1:
83:75:eb:1d:8b:77:9e:7f:db:bd:ea:25:23:f8:2b:
a7:5d:22:df:2b:19:a2:21:3a:13:33:e9:e8:b7:5f:
5d:b6:0e:a6:10:d0:54:d5:a8:dd:f7:3b:29:32:b1:
c9:a4:21:bc:c3:42:1c:a4:69:c9:26:b3:37:9b:64:
fe:b3:d9:bc:9f:71:dd:c1:3c:b9:af:93:1b:8e:79:
7a:d5:a7:43:a3:22:bc:c4:e0:ee:0c:2c:c4:64:c6:
83:fd:84:1d:55:80:9b:b4:34:30:f8:bc:17:26:f9:
00:3d:2a:fd:2c:9c:e5:5d:14:6f:9c:3d:c1:ba:68:
7c:75:35:39:83:22:01:cc:16:ff:bb:ec:58:c5:ee:
d2:0e:eb:68:ba:8c:73:97:3d:aa:ad:89:1f:3e:6a:
0f:76:07:43:54:31:24:28:8e:b9:ed:cb:3f:45:9f:
39:23:e5:28:3b:e9:b0:64:04:52:42:9c:d5:fe:92:
fd:ce:31:d3:4e:88:a8:eb:97:a7:f1:e0:3d:64:55:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D0:81:1D:3C:9A:57:EC:18:A4:A0:19:AC:63:7A:CD:35:11:7E:2D
X509v3 Authority Key Identifier:
keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6d:43:7f:53:90:03:53:f8:81:ba:dd:95:5c:8d:37:17:91:
d7:4e:b1:b4:2e:27:5b:cd:f4:0f:7c:3a:d2:85:c1:95:f4:14:
ff:6f:45:d4:4b:fe:33:00:b6:aa:bb:05:f7:01:3e:1f:14:3c:
37:5a:7f:dd:e2:19:cf:f3:9b:54:dd:9f:68:da:95:65:84:f6:
5d:6e:b9:cd:db:ab:78:0c:cb:66:57:ac:19:da:36:63:eb:8c:
5a:b6:b6:2c:e9:fe:2a:8d:c6:d6:2b:d6:be:c0:4b:7a:03:83:
08:45:35:55:3b:a6:d3:7c:35:77:7e:d3:20:a7:ae:cb:57:84:
81:c5:a7:8b:bd:47:e1:f5:22:e2:ba:a8:17:51:86:b9:e3:5e:
32:a4:f8:61:d4:e1:42:40:1b:45:8c:30:2c:4c:60:4f:1f:b6:
f5:f0:bf:d6:ca:73:2e:71:a8:bb:66:bd:fa:35:82:52:43:91:
ac:17:1c:31:c4:4f:db:02:dd:32:d6:f9:89:dd:c6:37:0c:f5:
32:1d:a4:f8:36:f1:09:92:0a:a6:d1:c4:5a:16:6e:b5:e6:4c:
a7:6d:0f:cd:a9:16:f2:47:db:ec:a1:d0:b3:ee:10:22:a5:3e:
54:59:3f:fd:69:d9:cb:42:42:f8:40:00:1f:2c:bb:9a:d4:77:
ee:1d:fd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:12 2025 by rpki-client