Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
File: PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json)
Hash identifier: 6BNOlymhBvRQdtRdaG89WQQNEcUu6ZC/bw34BP4vk4U=
Subject key identifier: DE:C6:C6:F3:D3:D6:63:54:47:0B:FA:DD:92:F6:6B:40:5B:AF:44:FD
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial: 01976C2AA8706403E4116D4DAF1013FE8C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
Manifest number: 1B
Signing time: Sat 14 Jun 2025 02:00:24 +0000
Manifest this update: Sat 14 Jun 2025 02:00:24 +0000
Manifest next update: Sun 15 Jun 2025 02:00:24 +0000
Files and hashes: 1: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: ggnNcDHfQMHXy46iUB7sjuQprR4W3SJhvW+u01L735k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:a8:70:64:03:e4:11:6d:4d:af:10:13:fe:8c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Validity
Not Before: Jun 14 02:00:24 2025 GMT
Not After : Jun 15 02:00:24 2025 GMT
Subject: CN=dec6c6f3d3d66354470bfadd92f66b405baf44fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:44:b8:b9:f3:2f:22:40:f0:1d:c6:0b:3c:
c6:6b:77:c8:25:1c:73:36:da:be:06:69:09:80:8b:
17:56:16:a8:c8:ac:26:29:5d:61:01:10:55:d2:de:
e8:1b:59:2e:9a:75:d2:8e:33:ea:e6:dc:d3:dd:da:
12:8f:f3:c5:48:94:91:d5:2a:4e:a7:e0:10:03:70:
94:80:f3:81:6e:a5:f9:98:eb:ae:f9:4f:c9:5c:2e:
88:f9:f5:75:53:f5:14:87:9d:a2:b3:58:f7:2a:c8:
03:2c:4c:4b:5d:8f:6b:31:db:07:eb:3a:41:6f:05:
50:8e:78:dd:6c:1e:e6:95:be:47:84:a1:dc:c2:4d:
ae:4b:2a:0b:95:d8:10:cf:23:7d:c7:e0:8f:b7:56:
86:47:1f:3e:43:a9:5b:7b:93:d6:5a:b4:4a:7e:8c:
25:66:f3:10:68:fd:8f:79:1c:43:16:c2:6a:fa:8b:
91:da:43:da:65:48:0d:23:5d:74:ee:76:4d:f4:5f:
48:2e:e0:08:c8:ee:d1:33:4a:11:33:fc:75:ea:c1:
52:a1:bf:1b:f8:e1:83:29:50:bf:56:df:90:1f:b2:
4f:08:f2:bc:3d:5b:eb:30:67:62:bb:38:f3:cf:8b:
ca:9e:f9:d4:ea:b8:44:45:4d:61:5f:63:19:ef:93:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C6:C6:F3:D3:D6:63:54:47:0B:FA:DD:92:F6:6B:40:5B:AF:44:FD
X509v3 Authority Key Identifier:
keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:73:25:93:81:9c:45:f3:5f:c8:8a:a9:df:aa:35:46:50:89:
21:2c:c1:1b:28:e8:08:5a:71:3f:db:52:72:b7:1d:6c:45:76:
ee:16:38:e0:2f:14:7a:f8:2f:ea:90:88:b9:0b:14:06:17:5d:
fa:c3:ca:92:16:d4:8e:c7:10:08:18:c3:46:48:5a:8e:2f:65:
31:04:08:39:32:92:92:a6:ff:0a:82:a5:50:8b:13:4a:0d:1c:
44:38:1e:cf:16:93:86:e7:92:3f:ed:97:22:bc:e4:40:6a:ae:
cd:78:c7:d7:84:f8:63:8e:db:bb:70:be:d2:a5:57:35:2f:ad:
cb:c0:1f:01:90:35:e5:b8:c5:fa:f3:41:1d:61:28:e4:b5:f3:
53:f2:e7:ce:cd:ec:f3:b5:92:c0:7d:e7:b5:c3:f5:a8:9d:34:
2b:5f:0c:f2:c2:97:ad:97:b1:e6:63:b0:0b:ec:4f:34:b2:1a:
2b:98:27:7f:37:47:84:6f:9d:16:31:2b:12:3e:78:5e:45:61:
70:40:d3:86:a1:71:c0:c8:65:db:57:03:f3:25:2c:61:d2:3e:
d4:52:0c:24:6f:d2:15:15:06:e3:67:a7:87:7d:2d:a5:d7:b0:
fa:83:59:d9:87:71:48:a0:d4:46:e3:95:10:91:47:07:ea:8a:
91:00:65:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:45 2025 by rpki-client