Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
File: PnpcKTN0JfqBOVVRcmyMK35MUIc.mft (raw, json)
Hash identifier: 43JBemykpux5ssVnzKxiGxZe2No4+ZAeOYN4xTy2Ts8=
Subject key identifier: F3:8C:43:11:CF:2E:4A:88:D8:AF:6F:E2:E8:03:BA:9F:6B:7D:37:F5
Authority key identifier: 3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87
Certificate issuer: /CN=3e7a5c29337425fa81395551726c8c2b7e4c5087
Certificate serial: 0198744F9F5848D4C6DE731333594492ED0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
Manifest number: 035F
Signing time: Mon 04 Aug 2025 09:00:31 +0000
Manifest this update: Mon 04 Aug 2025 09:00:31 +0000
Manifest next update: Tue 05 Aug 2025 09:00:31 +0000
Files and hashes: 1: PnpcKTN0JfqBOVVRcmyMK35MUIc.crl (hash: oL0ji3E3i63PNj9oD8U+mOFz0LdQZP+Kb5QHqc1I0HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:9f:58:48:d4:c6:de:73:13:33:59:44:92:ed:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7a5c29337425fa81395551726c8c2b7e4c5087
Validity
Not Before: Aug 4 09:00:31 2025 GMT
Not After : Aug 5 09:00:31 2025 GMT
Subject: CN=f38c4311cf2e4a88d8af6fe2e803ba9f6b7d37f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:6e:45:f1:6c:19:43:54:d5:8e:ef:59:e9:
d7:a6:b7:97:0d:04:08:9a:ff:be:0a:b5:3b:88:5e:
f7:fe:b3:1a:c0:40:80:0f:e5:1d:3e:69:e8:38:d0:
f3:e6:5c:fe:78:f3:5d:a8:dc:c3:b2:90:30:31:fb:
20:8d:01:f9:a6:41:26:67:a8:e4:44:25:d8:ec:4c:
0c:44:cf:89:42:60:ca:b3:65:83:8d:77:41:91:db:
3e:14:35:09:a1:64:f2:85:d8:bb:8a:52:80:3b:cb:
0d:ef:1a:eb:58:a5:1f:c4:57:c8:5f:57:d4:e7:75:
a4:05:b5:66:f3:5e:d4:03:88:91:b2:81:7c:bc:cf:
8f:c1:0b:19:62:52:5a:0d:39:00:22:5d:98:ab:67:
73:50:05:ee:35:b0:d0:c4:95:f4:ec:87:84:8d:45:
67:e9:2e:37:2b:8b:98:cf:6f:73:6e:6b:13:1b:91:
9e:53:b6:3f:fd:bc:15:43:3f:4e:60:0c:2c:da:af:
f8:4d:b9:df:30:0d:33:e9:d4:18:b1:84:67:98:fa:
32:dd:96:5b:9e:27:d5:c7:5b:87:a3:6d:52:bf:85:
14:4b:dc:93:ac:86:ae:e7:a6:c4:85:f7:c8:f5:f0:
0a:00:ba:b5:5b:74:bb:a5:01:b3:0c:f2:24:02:c3:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:43:11:CF:2E:4A:88:D8:AF:6F:E2:E8:03:BA:9F:6B:7D:37:F5
X509v3 Authority Key Identifier:
keyid:3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1b:37:f3:7e:78:81:c6:2e:d0:e2:89:d2:b7:f6:4c:ab:1f:
94:1b:63:62:8d:3a:0f:3d:75:bb:ec:75:a9:47:98:f7:5c:32:
e5:90:14:66:dd:bc:39:cf:a2:41:20:51:b5:01:fe:c5:99:ec:
0d:99:7c:34:b0:29:cf:f2:64:00:1e:30:87:65:93:a5:a1:7f:
16:09:89:fb:07:02:6a:f7:ed:d8:ee:b9:fc:4d:cb:b8:13:fb:
31:29:c4:eb:cd:42:b2:0e:29:82:3a:78:06:19:52:00:08:25:
0e:4d:73:61:c0:79:52:c9:fb:27:96:e1:48:fd:f9:b4:00:8a:
4f:98:18:f2:6c:97:09:15:76:56:3a:8e:f8:15:55:79:d9:77:
6f:94:84:66:8c:50:f7:97:37:83:86:8d:83:a2:62:31:98:57:
fb:06:0b:42:06:76:7f:51:20:ee:ae:43:7b:df:e5:f4:92:8c:
29:1d:52:38:0f:20:ea:79:74:35:44:4a:37:31:e0:04:fc:17:
00:b4:e3:da:fd:04:5f:1a:0b:a0:60:46:66:8a:8c:7d:4b:ea:
e6:4f:fb:4e:91:db:db:63:07:40:e3:3c:6f:15:45:97:58:4d:
a4:4b:76:5e:04:27:a3:bd:70:c7:84:9a:19:27:bf:9b:22:d1:
1b:08:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:32 2025 by rpki-client