Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
File: PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json)
Hash identifier: jgc7BEs1yxf6V5HZkRUTWVBJ1748h4vsCUoAg+YTSGg=
Subject key identifier: 30:D4:46:40:AA:0D:70:2B:1A:E5:E2:8A:89:82:57:F4:7F:A5:43:A4
Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
Certificate issuer: /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Certificate serial: 01976C6233284518710A88F20252FD57BF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
Manifest number: 117F
Signing time: Sat 14 Jun 2025 03:01:04 +0000
Manifest this update: Sat 14 Jun 2025 03:01:04 +0000
Manifest next update: Sun 15 Jun 2025 03:01:04 +0000
Files and hashes: 1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: CoZXRfAGqm8IZ0aUIF3zne1p5eoWy2vevCno2yS7z4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:33:28:45:18:71:0a:88:f2:02:52:fd:57:bf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Validity
Not Before: Jun 14 03:01:04 2025 GMT
Not After : Jun 15 03:01:04 2025 GMT
Subject: CN=30d44640aa0d702b1ae5e28a898257f47fa543a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f9:17:03:a2:c2:54:45:07:9c:da:c3:25:65:
47:17:ce:17:2b:e8:15:f9:e0:d7:f3:fc:08:db:ae:
b1:00:8a:14:e8:10:7e:dc:dc:d1:c1:22:de:6e:4b:
43:b4:2c:64:1b:ec:e4:52:2b:af:8f:1c:b2:b5:c7:
32:2b:ec:eb:10:f5:42:19:2f:3c:06:8c:25:9a:ad:
d5:2d:25:f8:ef:1d:e0:07:1d:7c:1f:b0:45:15:ac:
48:e9:c7:1b:88:99:01:4c:00:8d:62:61:14:53:6b:
c8:84:05:a9:f4:75:fc:ba:d3:40:86:2c:7c:b3:8e:
bf:ff:5d:cf:63:19:83:d6:a8:e4:00:e8:7b:d3:b6:
66:56:5e:fe:39:98:f5:74:06:eb:17:b6:a4:5c:b1:
d5:3d:9f:a8:fb:44:95:5d:9c:26:4a:44:6c:e8:46:
15:15:72:47:e8:3c:a6:74:82:6c:d2:46:c8:c6:09:
67:a9:24:1b:c0:58:29:be:ea:31:73:47:8d:61:4c:
19:67:75:a8:28:51:cb:63:79:df:0c:99:9c:5a:c3:
ca:f9:c4:52:a9:d9:0b:23:18:d8:3a:df:a0:4a:62:
81:30:eb:30:6c:08:08:80:d1:72:20:e0:22:a5:a1:
c3:01:4e:f2:39:45:15:a9:2f:95:27:78:d1:81:39:
96:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D4:46:40:AA:0D:70:2B:1A:E5:E2:8A:89:82:57:F4:7F:A5:43:A4
X509v3 Authority Key Identifier:
keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f8:3f:3d:5d:6f:12:4a:f8:65:c7:5c:db:ca:15:f4:1b:b3:
90:29:9c:2e:fa:be:35:53:4b:49:5a:3d:85:ab:02:0f:25:dd:
02:1e:aa:bd:d1:6d:57:e6:8b:f6:d7:bc:94:ac:36:fd:46:81:
53:29:cc:1c:47:93:40:be:a1:8b:04:22:c8:b2:a2:fd:9e:05:
37:29:52:a1:6f:79:78:80:01:b2:65:2b:52:32:a8:04:3c:b3:
e7:9d:cf:2e:25:ba:a3:5e:6f:99:25:2e:b5:aa:0c:4c:2d:f5:
b4:73:7d:2f:14:db:a3:4d:66:53:0b:6b:14:17:b6:74:41:cb:
d4:e0:11:a1:4e:95:4a:d3:26:e0:3d:e6:62:c9:3f:93:aa:3a:
63:d3:b2:c2:2b:5f:c8:df:18:9b:3e:c5:23:46:88:e5:91:5f:
05:6a:35:3b:b5:4c:fd:96:03:85:31:59:f6:0b:02:d4:cd:38:
d4:28:da:c0:b1:af:98:33:6e:2a:6c:d4:8f:c3:b3:d4:ad:fa:
78:6c:c4:c4:2a:93:16:8c:b1:02:ed:b8:3e:9e:d2:cb:1b:5b:
6c:89:40:85:0a:fb:a5:8f:6b:82:fc:be:fb:6a:30:a7:ea:f0:
8b:89:86:01:3b:84:5d:7f:61:ff:d5:69:8c:b9:59:fe:4e:91:
7f:04:59:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:36:46 2025 by rpki-client