Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
File: PQJjyVdcvQESY66Ig5p4iLdPoHY.mft (raw, json)
Hash identifier: 94HP0YLW+2waeyX6KeE6IsWUAnrNcMD0KApAucljwRg=
Subject key identifier: 76:48:F8:F2:2A:1F:F0:AF:B5:87:D8:BA:3A:1C:DF:79:11:0D:47:42
Authority key identifier: 3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
Certificate issuer: /CN=3d0263c9575cbd011263ae88839a7888b74fa076
Certificate serial: 01987B9B69CB746D0487D231F24A27D0C88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
Manifest number: 1146
Signing time: Tue 05 Aug 2025 19:00:39 +0000
Manifest this update: Tue 05 Aug 2025 19:00:39 +0000
Manifest next update: Wed 06 Aug 2025 19:00:39 +0000
Files and hashes: 1: PQJjyVdcvQESY66Ig5p4iLdPoHY.crl (hash: V6eB6Enwz0Pi3DEAfiHQ/7ih9f088UYFdU8zuo+PybA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:69:cb:74:6d:04:87:d2:31:f2:4a:27:d0:c8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0263c9575cbd011263ae88839a7888b74fa076
Validity
Not Before: Aug 5 19:00:39 2025 GMT
Not After : Aug 6 19:00:39 2025 GMT
Subject: CN=7648f8f22a1ff0afb587d8ba3a1cdf79110d4742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:89:0a:3b:50:29:cb:e5:9a:60:c3:c9:36:
04:c3:e3:03:7e:48:1d:df:73:51:65:d0:ea:ea:90:
6f:0a:6f:a7:af:a7:83:1f:b6:1f:26:e8:50:9b:fb:
5f:53:12:ca:4a:db:36:0f:7e:37:e2:47:c9:42:30:
0f:8d:62:07:6d:ac:3a:f5:51:66:86:ef:29:57:57:
34:bb:29:2a:c4:3d:23:d0:9b:cd:5f:1e:27:99:d6:
51:2c:af:f9:64:6c:5f:03:10:38:9f:dc:19:0d:63:
69:74:ce:55:a3:e2:23:8e:d3:e6:22:4f:ba:b7:0d:
5f:27:ce:24:bc:35:56:fd:8e:1a:7c:f2:e4:cc:fe:
93:e7:81:89:c7:9a:7b:34:75:5b:dc:c7:98:61:92:
6d:1c:07:7c:05:da:e2:86:aa:7a:47:f0:1a:c8:62:
84:15:80:6f:de:ff:af:7f:df:d5:e2:f6:1d:fd:a1:
91:63:8f:30:d4:8b:92:76:fc:14:fa:6f:3d:fc:55:
ee:fa:fd:b6:6b:71:8a:8f:f7:ef:a6:8e:6d:16:c7:
30:df:de:2a:ac:05:34:59:98:01:ec:97:4b:60:72:
2a:b8:fc:cb:11:80:02:c2:34:a2:88:af:b4:36:ac:
86:22:43:af:14:22:ce:50:1c:8b:ea:cd:d7:54:d1:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:48:F8:F2:2A:1F:F0:AF:B5:87:D8:BA:3A:1C:DF:79:11:0D:47:42
X509v3 Authority Key Identifier:
keyid:3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b5:8e:8b:f4:08:5f:59:ac:9f:03:15:18:19:4f:5a:f1:4b:
23:10:4d:90:e1:1a:7a:c1:9e:8b:da:9e:f7:45:11:20:84:fa:
3b:fa:fa:e4:4b:e8:a5:5a:d0:e4:63:58:32:f0:0b:3c:fe:b5:
9b:38:09:7b:73:9b:8d:e9:f7:77:de:d1:5f:1f:d6:89:3a:63:
82:81:88:1c:f6:5d:74:8d:ba:a1:00:f8:13:ad:9a:d7:36:ad:
93:ff:78:ff:b3:13:cb:44:ab:ff:55:4d:73:42:f7:de:d5:34:
a8:03:51:55:c3:ef:08:68:bf:17:85:f9:56:81:3d:18:a5:af:
56:63:30:d0:5b:18:88:57:8f:a1:e0:b6:79:a7:9f:a8:80:66:
ca:c2:87:1e:e5:bf:bc:36:c2:3a:b4:eb:bf:f6:6c:c6:77:54:
8a:96:d8:ec:ba:df:4d:63:8f:14:1a:b5:a9:c1:8e:ab:4e:41:
7f:31:5a:9f:40:11:58:b8:0a:7e:21:34:28:7d:4c:97:98:1a:
ff:cb:96:86:cf:72:a2:e1:37:e5:09:b3:e0:63:52:03:40:d4:
0e:c6:02:4a:ed:40:f3:6c:2d:90:f3:71:b7:9c:2f:96:8e:aa:
43:3c:4e:30:6c:33:68:f9:4f:9e:38:a5:1c:72:79:67:3e:17:
85:1a:43:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:33:29 2025 by rpki-client