Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File: pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier: RsrX+jm85Z6CUzdosAaHhZ7KLLXF8WDtAuEDsOpIukk=
Subject key identifier: FD:69:A8:ED:E2:6B:A9:B8:7B:21:6D:3D:6F:D3:1A:E8:55:EB:80:65
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial: 01976961A4F433B4753BACB4335517AC89E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 13:01:36 +0000
Manifest this update: Fri 13 Jun 2025 13:01:36 +0000
Manifest next update: Sat 14 Jun 2025 13:01:36 +0000
Files and hashes: 1: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: e/3SY1kpD70SvJpn9RtWmnT26ChMJrxK1xELgwoYRco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:a4:f4:33:b4:75:3b:ac:b4:33:55:17:ac:89:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Validity
Not Before: Jun 13 13:01:36 2025 GMT
Not After : Jun 14 13:01:36 2025 GMT
Subject: CN=fd69a8ede26ba9b87b216d3d6fd31ae855eb8065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7c:c8:cf:7b:29:39:3b:11:b5:b6:97:95:02:
66:61:f5:14:ce:30:ee:bd:aa:4f:6f:7d:12:c9:6a:
39:e5:8f:1d:f3:28:99:42:98:49:ce:be:7a:f9:e9:
fb:be:3d:0c:b6:eb:2c:76:6f:ee:99:a7:cc:20:98:
b2:45:81:11:3b:9c:b2:7e:e3:32:c1:1d:8b:40:a8:
4b:4d:4c:f5:ed:91:ee:90:6b:ad:56:92:19:2a:0e:
ce:3a:12:55:b2:cb:fa:ae:99:dc:b8:d3:1a:62:40:
c2:c7:1c:af:e2:76:03:6a:0e:65:bb:b3:97:47:ad:
a9:b4:a8:03:62:7e:9d:d9:61:33:dc:e0:e2:fb:55:
bb:ba:20:12:2c:fa:b8:fe:a3:a7:25:92:f8:11:30:
83:7a:0f:cd:d8:21:cc:18:4f:17:2c:f2:0d:b0:10:
d2:73:54:a6:7e:f2:4d:1a:a0:14:ef:6f:68:26:a3:
d3:a0:6d:64:75:64:58:37:45:c6:6b:42:a2:85:c0:
9e:e4:b4:e0:19:77:e5:6d:c4:13:24:6f:72:e0:6d:
a0:85:19:68:3e:1a:66:dd:cd:d4:26:0f:8d:46:3c:
f0:fc:94:66:5f:3c:2b:04:66:b2:b2:19:02:29:64:
ac:40:e3:71:2d:78:53:b5:08:3b:3c:7c:b3:8c:ff:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:69:A8:ED:E2:6B:A9:B8:7B:21:6D:3D:6F:D3:1A:E8:55:EB:80:65
X509v3 Authority Key Identifier:
keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:47:20:4e:5f:df:61:ff:a6:61:5b:ec:0e:d2:b3:df:18:c6:
e3:4e:c1:36:a0:14:37:67:f8:17:93:5f:b2:db:5c:63:13:d3:
32:0a:b5:31:7a:f5:81:4e:12:12:8b:ab:7f:57:bc:0e:c6:30:
78:1d:11:e7:73:65:b7:11:95:39:f9:97:f5:fd:6e:f7:59:8a:
1f:ab:d8:d7:08:8f:a9:8b:66:a4:a2:af:f5:d4:e8:37:68:00:
75:94:de:68:69:e1:37:7c:70:b7:d2:14:67:d1:66:d8:df:f4:
19:d3:6d:b6:28:54:45:62:f8:42:03:cb:7b:b7:77:8a:10:88:
17:13:96:ac:49:69:94:ab:23:37:1c:7e:65:9c:4f:0f:02:aa:
13:8b:1e:d6:ce:e9:7f:ad:5b:a9:20:86:98:47:ff:21:90:33:
70:cf:ac:3f:5a:68:61:a6:5d:7b:40:a3:2d:ae:b9:5d:42:fe:
00:b0:8d:67:6f:9a:c7:7c:f7:cd:fd:e3:71:99:95:73:98:dd:
1d:68:1b:84:8e:47:33:e9:1b:f6:9f:bf:57:4c:b4:ee:b6:1a:
08:ff:6f:05:82:bc:62:38:b2:8a:d5:55:9d:17:1d:a0:54:52:
34:a0:ac:2f:77:65:17:7a:ea:9d:e7:d4:c7:05:78:44:73:04:
9c:af:41:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:13 2025 by rpki-client