Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
File: PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json)
Hash identifier: xhrIbccu5AFQL6mjd1Y+2R5Ivqk06furlalFVDThS7g=
Subject key identifier: 1F:E6:F5:17:1B:E0:91:AB:58:25:27:53:14:DC:9B:90:47:C1:47:53
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial: 019872D011AE6185022AE9AC1D9023868EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
Manifest number: A3
Signing time: Mon 04 Aug 2025 02:01:35 +0000
Manifest this update: Mon 04 Aug 2025 02:01:35 +0000
Manifest next update: Tue 05 Aug 2025 02:01:35 +0000
Files and hashes: 1: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: wOTO6Px/mLDLZqJxcrRRhxBln+beE2tXtfr/3++4n44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:11:ae:61:85:02:2a:e9:ac:1d:90:23:86:8e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Validity
Not Before: Aug 4 02:01:35 2025 GMT
Not After : Aug 5 02:01:35 2025 GMT
Subject: CN=1fe6f5171be091ab5825275314dc9b9047c14753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:62:c1:a2:88:25:c2:fa:34:99:10:fc:4f:
ee:18:4f:ec:84:e1:80:64:f6:ee:ca:ec:c6:34:68:
dd:ad:aa:85:ed:2a:f6:67:f3:1b:02:62:cf:2a:85:
87:dc:5e:60:e6:da:9d:5a:cd:5d:e5:7e:6d:bf:3c:
6c:41:8b:59:e2:9e:67:46:7d:d6:1d:f0:6d:e0:2d:
f8:51:a6:7b:05:c9:17:2c:36:5a:7b:99:b9:1f:18:
47:20:75:29:9b:b0:c4:c4:75:34:71:d1:d8:60:8f:
af:c3:9a:50:df:1c:f9:37:3e:a7:c0:47:5c:0c:79:
2d:fd:85:a0:fe:55:b7:8a:60:9b:bb:c4:66:ab:75:
e1:b6:bd:08:d8:84:0e:88:b8:cc:34:65:63:03:95:
cd:b7:91:0f:b1:62:b1:6e:a1:c5:30:a5:2f:f7:cc:
61:7f:ba:5c:eb:b9:60:5d:50:e4:ae:20:33:4c:da:
4d:fb:d6:1e:e7:16:ce:83:68:80:ec:3c:16:b5:2d:
67:f7:4c:89:39:3a:10:97:6a:26:fb:18:b7:cd:56:
f8:53:e0:7d:92:66:58:e8:6a:59:54:27:f4:33:9d:
cb:ee:9c:fb:7f:71:a3:b7:6b:49:29:ee:0b:4e:6c:
5a:7c:b7:83:8b:5a:5b:ec:90:01:29:ea:00:d7:16:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E6:F5:17:1B:E0:91:AB:58:25:27:53:14:DC:9B:90:47:C1:47:53
X509v3 Authority Key Identifier:
keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8c:76:be:9d:b5:9e:56:cb:7a:b5:85:2d:68:ed:68:49:46:
f6:af:00:33:17:7d:a3:57:f1:3a:ac:ba:25:78:74:bf:6f:49:
82:30:75:d1:a6:87:67:41:81:df:aa:8e:e4:6d:4c:10:ad:ee:
a1:3f:be:bf:b4:31:7e:c5:00:02:c6:d3:af:f2:be:53:e1:3b:
70:8d:4b:11:8d:14:ea:f2:d4:97:0e:06:ac:9f:ee:29:54:57:
4f:33:eb:49:ae:20:24:82:c4:cd:15:53:c8:22:4a:ea:76:34:
2a:c5:c2:4b:49:40:6c:ca:40:79:88:0e:3d:13:22:e6:cf:f7:
c2:2f:8d:1a:06:c3:10:0a:de:8d:69:8d:bc:4e:7d:24:d6:3e:
a7:69:44:f4:32:af:df:b1:81:fe:ae:fb:91:28:b9:31:6d:f7:
2a:15:46:b0:ec:e9:de:e3:2b:35:f8:49:16:5a:7a:c2:1f:a5:
f6:54:25:48:8a:17:c2:3b:40:35:a1:ec:dd:95:2b:31:ce:15:
05:87:b1:cb:9d:08:29:ed:bd:de:5d:95:5e:22:63:69:67:33:
be:f6:1c:03:b2:ba:b4:57:90:c5:fc:ab:1f:e3:e1:b0:54:5e:
62:1e:ee:c9:21:18:be:15:91:7c:73:cc:c3:d0:b3:02:ed:b2:
07:88:b5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:36 2025 by rpki-client