Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: 3zOYWgGsIU+pi6zbf1U9cT+MrWhuu8lg8CXwoPNvgUY=
Subject key identifier: 11:0A:01:55:16:EF:04:DC:87:5D:4F:25:B7:48:AD:F2:BC:49:58:22
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 019786C6B188DCE0686AAB7240C46A35B0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 03C9
Signing time: Thu 19 Jun 2025 06:00:57 +0000
Manifest this update: Thu 19 Jun 2025 06:00:57 +0000
Manifest next update: Fri 20 Jun 2025 06:00:57 +0000
Files and hashes: 1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: ln7jQCBH0F92aLMsUc1TL1TFR/Vf7TxrJ4rba5VDqEg=)
2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c6:b1:88:dc:e0:68:6a:ab:72:40:c4:6a:35:b0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Jun 19 06:00:57 2025 GMT
Not After : Jun 20 06:00:57 2025 GMT
Subject: CN=110a015516ef04dc875d4f25b748adf2bc495822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:4d:c7:c4:f5:a1:4b:ab:81:21:57:8d:63:
90:14:0e:5c:14:50:bc:a0:77:04:11:23:c2:92:f4:
d2:a9:18:58:3a:fe:35:2a:34:a5:a5:b2:a1:95:4f:
45:60:5c:03:cd:f9:98:71:c4:38:14:97:ed:9e:b3:
ec:e9:61:d1:13:31:48:64:6f:a1:2e:2f:16:56:88:
00:7e:5a:8a:65:9b:cb:32:78:91:59:3f:8c:84:9a:
94:09:54:8a:63:38:da:70:16:23:60:13:8e:0e:95:
30:20:97:ae:ff:40:95:78:17:83:00:bf:d8:ac:11:
0f:cf:ad:ec:c6:aa:05:f3:07:b9:5c:73:ff:00:44:
ec:d5:44:d1:49:f2:05:e4:b3:b0:f0:bd:24:e0:e2:
06:53:00:c8:ab:32:9e:8f:7e:0c:b7:01:c1:71:91:
45:31:d3:9b:50:12:48:57:63:0b:e5:41:a4:fc:00:
13:d8:94:5c:42:cd:c6:cd:1f:51:ea:14:fa:ec:70:
b9:4b:ce:43:51:99:42:f4:93:2e:42:bd:0d:fc:6d:
d6:1d:65:68:85:c9:25:5c:15:a3:0c:ef:31:2c:03:
e3:7b:7a:05:fc:b2:7b:1c:3c:d8:91:05:78:04:48:
5c:c6:f8:85:cc:b3:92:ca:9e:14:25:8e:bd:5a:7b:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0A:01:55:16:EF:04:DC:87:5D:4F:25:B7:48:AD:F2:BC:49:58:22
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b8:1b:75:61:55:a1:c0:9c:20:d7:e4:9d:86:90:2a:92:71:
2b:97:89:eb:ac:9f:37:05:c4:2a:24:4e:ad:6d:d4:31:2c:c5:
08:93:ab:bc:53:f8:c2:38:dd:39:56:23:78:b9:4c:59:a5:64:
00:80:05:38:b7:fa:49:15:04:14:73:40:58:68:81:0e:ed:e5:
71:a9:74:70:37:91:d9:2e:3d:0a:57:85:78:5c:8f:34:d1:50:
59:44:d3:da:d7:d3:43:7e:8a:c8:72:51:7e:6f:b9:6d:6e:86:
93:8f:98:10:51:88:2a:7b:d0:95:63:c5:90:08:d9:f0:f3:56:
7c:2b:a6:0e:3a:0a:8f:21:de:df:af:f4:bf:8d:e3:50:45:40:
0c:96:66:06:80:ad:03:62:f6:fa:1c:6c:12:94:94:b1:10:8c:
8c:f1:a9:32:b0:ea:a2:df:bf:24:07:a9:20:73:8c:21:ad:38:
08:46:31:5b:e1:12:d7:97:c6:74:1a:42:71:01:c1:8b:65:0d:
4b:87:63:0c:68:19:bd:d2:01:eb:07:5f:27:35:4b:ba:0f:d6:
87:db:60:e5:f7:a2:94:9d:41:ea:c9:af:11:b4:13:04:b4:fb:
e6:39:f4:fa:11:3a:d9:19:52:e0:b8:ef:61:94:f2:c3:e8:61:
58:dc:0d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:03:28 2025 by rpki-client