
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
File: pU3VdP7HLUOUwlU2uoUyydOPQLo.mft (raw, json)
Hash identifier: 2bYJDmQCIaXIy8rIzO+rTbBgNBNlQS5f9ukgzFqVLvU=
Subject key identifier: 63:37:3D:8C:B8:A7:99:7A:AC:16:C2:CD:4C:54:9C:AB:88:68:58:B0
Authority key identifier: A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
Certificate issuer: /CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Certificate serial: 019873E1F53D8CEAE822D4384BAEF5DD5B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
Manifest number: 092C
Signing time: Mon 04 Aug 2025 07:00:44 +0000
Manifest this update: Mon 04 Aug 2025 07:00:44 +0000
Manifest next update: Tue 05 Aug 2025 07:00:44 +0000
Files and hashes: 1: pU3VdP7HLUOUwlU2uoUyydOPQLo.crl (hash: OG6Uuf5NC8ithdehmhDCmzbjmT6seG2s+q2rLLrfjas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f5:3d:8c:ea:e8:22:d4:38:4b:ae:f5:dd:5b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Validity
Not Before: Aug 4 07:00:44 2025 GMT
Not After : Aug 5 07:00:44 2025 GMT
Subject: CN=63373d8cb8a7997aac16c2cd4c549cab886858b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:d1:fd:8f:fe:aa:79:51:36:0e:90:4f:56:
7a:5c:15:56:4f:4b:39:6f:f7:28:3e:06:b2:cc:8c:
b1:d5:c6:6f:5a:03:d7:3a:5e:89:6d:17:3d:83:8f:
10:60:d7:12:4a:76:5d:31:c0:6b:da:64:91:3b:b7:
a2:a5:44:1f:1b:60:9b:20:da:ab:ef:2d:55:de:d5:
c9:38:d3:c6:a5:15:6f:ec:21:30:c7:78:9a:5d:49:
d2:52:ad:ee:b7:7b:c4:1e:a4:a1:f0:f1:47:ee:42:
04:e0:f0:25:9b:a2:91:fd:5e:b3:3c:dc:39:2f:fc:
ce:7e:04:9e:64:f2:92:66:92:40:de:80:67:e5:e9:
0b:90:48:9f:88:53:40:72:25:ae:91:fb:1e:6b:b4:
95:46:3c:c9:43:61:de:80:6d:89:bb:bf:09:cf:14:
b5:65:d7:ab:7a:7e:cc:1b:9d:4e:c6:e3:f7:5e:f1:
73:4c:d1:4b:7c:73:68:5a:b1:36:26:ab:97:9e:ab:
72:0f:f7:05:dc:df:3e:68:a4:84:85:40:44:b4:dd:
88:d4:02:fe:c1:55:49:90:67:0c:b9:4b:31:ef:d3:
86:32:93:6d:f7:b4:21:35:31:27:e5:e2:80:b9:02:
dd:e9:89:09:d5:f1:7c:88:0c:e2:b9:e1:87:db:4a:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:37:3D:8C:B8:A7:99:7A:AC:16:C2:CD:4C:54:9C:AB:88:68:58:B0
X509v3 Authority Key Identifier:
keyid:A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bf:37:1e:75:e8:71:a8:c3:60:9e:46:23:2c:aa:42:ff:13:
99:cd:b2:12:7b:e4:43:5d:5a:d5:4e:fa:e0:55:98:1a:d5:95:
e5:b5:25:cb:a3:2a:82:30:8b:11:b1:1a:ef:b7:9e:b8:41:7c:
40:91:44:e5:a8:c1:c8:de:17:31:03:50:1a:5f:93:aa:c7:45:
32:20:8b:28:2e:25:0d:d5:fc:6f:c5:b5:5e:24:51:f7:eb:74:
2f:52:de:63:3f:87:55:9e:d3:d1:a3:14:94:19:6a:67:d6:cf:
c2:ae:dd:5a:54:b5:47:17:d2:69:01:5a:35:c2:c0:62:15:a7:
79:7d:24:a9:e0:96:98:20:ca:82:3b:58:07:b9:85:fa:00:7e:
26:64:7d:87:b3:54:84:a1:09:38:0c:4f:f6:4d:18:e7:b8:1d:
0f:a2:b2:a8:29:5a:4e:33:36:d8:a3:cd:2d:4f:2e:73:8f:06:
16:bf:0f:b3:82:d5:fc:c9:53:3f:05:d4:16:a2:94:d4:2b:50:
d1:a5:09:30:19:d5:4b:d7:0e:12:f4:56:e6:47:97:6f:7c:23:
03:4a:64:ba:5b:c7:08:43:75:a1:a5:57:62:b7:0e:67:6f:ee:
e2:a2:1a:58:ce:6b:5f:9e:9a:b2:4c:fe:ef:9a:86:29:a1:4f:
36:11:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:01 2025 by rpki-client