Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
File: pnyqBsCo91QBbmFEgLuzh35AiR0.mft (raw, json)
Hash identifier: OOTbgJ8V0+T2FcFG8Rj/mnKoLgu9xItkZQc15lRYDUo=
Subject key identifier: E3:70:4D:EC:6F:D0:04:8F:6E:A3:C8:69:03:18:C8:89:D0:6D:79:59
Authority key identifier: A6:7C:AA:06:C0:A8:F7:54:01:6E:61:44:80:BB:B3:87:7E:40:89:1D
Certificate issuer: /CN=a67caa06c0a8f754016e614480bbb3877e40891d
Certificate serial: 01976884D3A040AE387331985A810359867C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
Manifest number: 02B6
Signing time: Fri 13 Jun 2025 09:00:24 +0000
Manifest this update: Fri 13 Jun 2025 09:00:24 +0000
Manifest next update: Sat 14 Jun 2025 09:00:24 +0000
Files and hashes: 1: pnyqBsCo91QBbmFEgLuzh35AiR0.crl (hash: LyiEP1fhR4qLGbWfdIIvP0JsxqkstjxszIHjJYcpaIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:d3:a0:40:ae:38:73:31:98:5a:81:03:59:86:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67caa06c0a8f754016e614480bbb3877e40891d
Validity
Not Before: Jun 13 09:00:24 2025 GMT
Not After : Jun 14 09:00:24 2025 GMT
Subject: CN=e3704dec6fd0048f6ea3c8690318c889d06d7959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:ed:c7:b3:96:d2:8e:f7:24:3a:95:e2:c0:
ec:ad:03:66:81:01:19:7e:84:f7:41:7f:5d:cd:e7:
73:a7:83:bc:3b:1f:e3:78:d1:3e:b0:2b:07:69:2a:
c8:10:cb:4a:36:1a:14:87:ab:7a:21:45:ae:fc:0e:
7f:c5:00:2d:e3:b1:eb:02:ea:40:57:6e:16:89:21:
c5:7a:93:1b:20:1a:3b:cd:bb:60:4b:11:27:8f:6b:
33:f2:f7:31:62:5a:7e:fc:2d:96:6f:02:f4:a6:64:
bb:94:f4:32:5c:e9:1f:e5:df:d8:b3:63:ed:8e:12:
48:39:1e:99:e0:d1:b9:7b:11:87:64:57:2b:45:df:
fe:84:60:6b:69:d1:dc:c2:16:bf:dd:b3:2b:e5:5d:
93:7a:65:9f:c3:2d:56:6c:c9:9a:32:fe:58:e2:f6:
87:b4:73:99:6d:2c:9f:9c:91:24:50:e7:b8:4e:a1:
f6:89:83:27:5b:dd:99:df:d7:c0:b0:3e:de:43:b7:
19:e9:c2:f3:80:67:f5:e7:16:f2:12:b6:5a:95:39:
fa:5a:5b:97:d2:32:c3:5c:b0:3f:f8:5a:83:f2:37:
e7:fe:ba:5e:ab:d2:33:8e:87:a7:55:e5:01:62:bc:
7b:cb:a1:fc:a0:44:2f:13:41:21:b0:ab:3f:36:5e:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:70:4D:EC:6F:D0:04:8F:6E:A3:C8:69:03:18:C8:89:D0:6D:79:59
X509v3 Authority Key Identifier:
keyid:A6:7C:AA:06:C0:A8:F7:54:01:6E:61:44:80:BB:B3:87:7E:40:89:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnyqBsCo91QBbmFEgLuzh35AiR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e9407e-a58e-4941-8cce-2be501feed3d/1/pnyqBsCo91QBbmFEgLuzh35AiR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:37:30:be:38:76:1f:86:e7:eb:49:d5:f9:b1:88:f7:82:c7:
40:ec:32:52:98:fe:41:2d:e7:03:76:5e:eb:66:86:a2:0c:47:
30:a1:bf:92:54:58:9b:78:25:74:8b:75:e2:99:43:26:d4:91:
1a:9a:86:d3:6e:7f:dc:8c:52:62:86:11:44:c5:ce:43:7f:01:
03:68:f3:1a:ca:7f:00:dc:ef:e7:03:42:83:b7:c1:2f:ac:e9:
88:0f:cf:92:52:86:6f:b4:d3:8c:36:c9:15:31:9d:0c:6f:59:
f8:ec:b9:00:83:70:d1:92:aa:3e:36:30:62:9f:27:22:cf:70:
86:f3:fe:9f:22:d7:9c:98:8d:02:df:b3:ee:83:dd:16:bb:52:
f4:a8:15:d9:d3:e0:d3:ac:13:88:2a:5c:cd:84:9e:eb:e9:38:
50:b5:b2:42:76:69:64:39:eb:aa:ee:a4:c1:51:25:c8:11:fd:
a6:9b:c4:34:61:af:17:02:f8:4d:b4:ce:4c:ca:5b:b3:15:fa:
19:a6:e8:1b:17:3e:0f:3f:b1:a2:d6:fe:f3:a0:11:11:b1:03:
21:26:df:d6:6e:ad:b7:dd:93:3e:67:75:94:7d:19:f2:0a:e0:
1b:17:d2:cc:43:52:dd:9b:d2:3c:d9:95:e2:18:85:ec:b4:f4:
a1:15:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:08 2025 by rpki-client