Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
File: PQJjyVdcvQESY66Ig5p4iLdPoHY.mft (raw, json)
Hash identifier: uAHxRDUAe0be/AGKIGrOzb6u4zKd1aO13LmBEaS4xqM=
Subject key identifier: 3E:8D:BC:6A:B7:DC:CF:8E:7C:94:35:2E:89:EB:31:DB:71:AC:E0:22
Authority key identifier: 3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
Certificate issuer: /CN=3d0263c9575cbd011263ae88839a7888b74fa076
Certificate serial: 019773087636E63954522AF6E15FD90A1C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
Manifest number: 10BD
Signing time: Sun 15 Jun 2025 10:00:23 +0000
Manifest this update: Sun 15 Jun 2025 10:00:23 +0000
Manifest next update: Mon 16 Jun 2025 10:00:23 +0000
Files and hashes: 1: PQJjyVdcvQESY66Ig5p4iLdPoHY.crl (hash: AKkXCCrro7Q37ezv4Y3XNRhP2nDN/Msi/NxoAk8u9u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:76:36:e6:39:54:52:2a:f6:e1:5f:d9:0a:1c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0263c9575cbd011263ae88839a7888b74fa076
Validity
Not Before: Jun 15 10:00:23 2025 GMT
Not After : Jun 16 10:00:23 2025 GMT
Subject: CN=3e8dbc6ab7dccf8e7c94352e89eb31db71ace022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fa:07:26:be:6f:38:ce:38:d9:9f:69:59:7e:
a4:a3:68:5f:89:88:dd:ea:e9:38:6e:ea:16:6f:7c:
b1:ce:c4:03:df:79:92:80:b7:39:23:b5:38:6a:7b:
af:77:b7:04:33:5d:ca:3c:00:45:12:ae:d9:59:85:
5f:53:4d:80:d1:10:a4:d8:bf:f0:a9:d7:d9:78:b9:
09:ab:5c:5a:de:3c:78:71:ba:e7:1c:03:c2:20:43:
74:13:79:44:a3:4b:29:38:7a:0f:31:90:9e:dc:b1:
b2:da:73:55:39:37:09:1a:36:e4:2e:f6:5d:5e:82:
30:34:d4:bc:a1:1a:93:73:ee:1a:86:01:42:67:ae:
a7:61:d6:ff:fd:a9:73:89:a6:a9:cd:85:1c:00:da:
d2:37:41:cc:16:aa:02:d4:70:da:22:9d:f8:39:4e:
1e:1b:c5:e5:b4:b2:66:5c:63:8c:47:94:59:fb:22:
90:2a:5b:c4:dd:7a:2a:e1:bc:4d:f1:e1:95:fa:f2:
61:8d:ae:5f:23:68:a6:5f:76:f5:36:bc:66:ae:89:
ba:07:b9:77:3d:9f:80:08:df:03:50:dc:0f:7e:fd:
5e:79:ae:3b:8d:d9:15:ee:d7:4b:4a:b8:5c:c8:01:
a5:7e:9e:fa:7d:fe:c6:5e:87:b0:98:29:fb:70:86:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8D:BC:6A:B7:DC:CF:8E:7C:94:35:2E:89:EB:31:DB:71:AC:E0:22
X509v3 Authority Key Identifier:
keyid:3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:56:61:3a:6a:83:72:f0:25:30:d8:8b:cc:70:68:4c:e8:1f:
ab:41:47:b0:19:5c:cf:2b:ae:d6:17:10:71:4a:18:10:66:3d:
02:18:68:95:db:91:59:11:cc:83:b1:42:76:92:2e:79:1f:02:
93:71:50:23:73:00:90:8d:39:47:76:19:4b:e7:08:e9:b0:e6:
1b:7c:fc:8e:05:1b:d6:72:5a:b9:b0:1c:60:a0:63:89:40:5f:
60:ee:ce:28:15:e9:c3:77:4f:1c:53:5e:33:a8:14:05:86:3b:
3f:e8:1d:8c:10:da:01:ed:c3:58:29:28:f8:42:16:e8:cd:dc:
b0:c6:73:1d:79:92:74:9d:79:76:fc:b2:53:c6:4b:af:5e:45:
1d:2e:a0:f8:ad:1c:19:66:7e:ff:5a:ae:14:40:87:aa:c9:a0:
93:9d:74:07:55:f8:17:2f:b8:40:93:7b:ca:4b:99:19:4a:e3:
f8:59:26:1b:b8:13:39:51:46:b2:b9:78:b8:89:23:62:f5:d5:
c7:56:5a:42:01:c5:8e:89:ab:50:c2:b9:14:5d:16:a5:f7:00:
97:88:7f:7d:77:d6:ad:cf:37:a6:dd:82:1f:70:5f:21:a9:2c:
a0:86:92:fd:45:b9:97:65:41:0a:0a:08:df:fd:72:ed:f8:09:
c3:39:6d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:43:15 2025 by rpki-client