Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: yT+VtTiuXhEfzX3TNou42oxTeCs4TY4ZzoJyRv5NjC8=
Subject key identifier: 10:EC:A1:80:EE:9F:4C:44:31:50:2A:6E:0D:1B:59:50:41:CB:4E:41
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 01977264152A73B5105140C24135B1C6AC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 14CA
Signing time: Sun 15 Jun 2025 07:00:50 +0000
Manifest this update: Sun 15 Jun 2025 07:00:50 +0000
Manifest next update: Mon 16 Jun 2025 07:00:50 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: eMromT2SDN2NRHu+rYXDObR6hPdRdLeDdNy3qmQoQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:15:2a:73:b5:10:51:40:c2:41:35:b1:c6:ac:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Jun 15 07:00:50 2025 GMT
Not After : Jun 16 07:00:50 2025 GMT
Subject: CN=10eca180ee9f4c4431502a6e0d1b595041cb4e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:7e:bf:6a:7a:35:cf:cd:5b:d4:1f:7f:43:
3a:5a:5c:6b:f1:0d:63:da:63:7e:de:57:e6:00:0f:
36:59:6d:88:e1:54:de:f0:77:af:12:0a:eb:f4:ed:
50:70:34:2e:bf:28:c7:61:0b:16:d1:c7:d5:b1:73:
cd:11:a7:49:a3:47:9c:f0:73:d8:ed:9e:16:78:59:
8a:b0:72:a8:b2:b2:d4:2d:39:7f:82:13:b5:96:b4:
83:38:7f:82:17:45:76:28:b9:64:d9:4b:77:f5:fc:
9e:55:39:1f:fe:4e:40:65:5d:79:08:be:37:35:bc:
01:ae:5e:3b:99:b4:2c:ec:cc:84:34:7c:8d:31:30:
80:92:9c:e8:e2:23:00:ad:26:1d:88:30:21:13:d0:
e2:a5:e6:dd:c1:c7:50:84:bb:6e:82:90:08:4d:5e:
74:fe:cc:53:3c:c3:df:57:b5:7e:5f:9d:1a:eb:f1:
1c:0f:8b:b2:b1:80:2c:d7:e7:31:1b:c5:ba:0d:05:
a4:19:b5:60:a7:5e:19:5c:ac:bc:ed:0e:91:63:00:
4d:5e:5e:0b:8f:2f:82:04:8c:18:21:bc:24:10:22:
08:27:38:34:94:2a:3b:f3:98:06:45:b9:b4:57:30:
89:44:10:47:f9:62:98:75:d9:96:e2:c3:76:ae:9e:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EC:A1:80:EE:9F:4C:44:31:50:2A:6E:0D:1B:59:50:41:CB:4E:41
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d3:17:ec:17:39:fe:93:dc:76:01:09:8d:49:97:54:76:f6:
dc:5b:09:da:18:74:7f:01:c0:69:cc:8e:19:6f:87:6f:a8:20:
e0:44:7e:82:82:06:e0:32:c9:1c:d2:f6:f0:ad:3a:10:44:87:
56:47:91:3e:48:eb:c0:5e:02:32:d5:ae:ca:63:95:4a:8e:ff:
95:7f:0a:a4:5c:be:b6:80:23:f6:90:ab:3f:83:dd:01:0d:17:
4a:3a:b2:be:76:dc:ea:4f:5b:53:c8:20:71:6f:71:bc:1b:24:
8c:71:b0:0f:39:76:8f:7d:dd:2f:3f:c7:d0:7f:8e:37:14:3e:
60:8a:ee:84:e7:df:2f:e3:51:96:3f:d8:4e:35:7c:35:8d:87:
89:88:44:1a:6d:96:90:81:c9:9c:65:36:f6:6e:1f:cc:36:fa:
e4:d2:b9:1c:15:aa:4f:cb:44:09:5b:77:78:bd:85:a2:99:b9:
bf:1a:36:6b:32:72:01:8f:54:15:6c:a3:51:1c:3a:ce:cf:50:
53:e7:96:10:b3:45:f2:e8:01:35:af:60:62:38:70:58:b4:48:
fd:a4:51:f9:1d:06:e9:1e:25:91:08:ba:bc:a7:4f:69:54:5e:
58:4b:90:1f:0f:c5:f1:53:df:dc:cd:36:a4:16:6a:cd:c7:62:
f3:ba:73:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:16:22 2025 by rpki-client