Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json)
Hash identifier: 8UgQ/WiKep8EOrHPdBzndlEyJtvBCYmf//hLVrDxjBI=
Subject key identifier: FF:19:0A:A2:29:20:48:46:C6:D1:E5:A5:8F:C6:AB:8C:72:EF:3C:56
Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Certificate serial: 01989592CEDE5CC384430AAFEE9BFBCFC94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
Manifest number: 070D
Signing time: Sun 10 Aug 2025 20:01:22 +0000
Manifest this update: Sun 10 Aug 2025 20:01:22 +0000
Manifest next update: Mon 11 Aug 2025 20:01:22 +0000
Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: 310r9bgXb+plWZmwp9SFHfJSHlNHN3zGk8gzjDMizEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:ce:de:5c:c3:84:43:0a:af:ee:9b:fb:cf:c9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Validity
Not Before: Aug 10 20:01:22 2025 GMT
Not After : Aug 11 20:01:22 2025 GMT
Subject: CN=ff190aa229204846c6d1e5a58fc6ab8c72ef3c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:43:c7:1e:83:e2:34:ba:9f:2a:bf:e1:f6:
49:a8:a8:c8:07:10:8c:d0:da:d9:f7:f2:93:cb:0a:
19:4f:69:40:8a:19:57:b2:6c:6d:59:1a:6e:51:0b:
68:4b:1e:c2:28:1c:35:a2:1b:32:7b:0c:49:d8:ed:
4b:44:cb:a8:e5:84:7d:4f:11:d5:5c:f2:c9:77:80:
67:16:e9:c6:ac:d4:bd:33:39:9b:90:b0:73:73:e6:
89:75:d1:9a:5d:06:8f:c2:a4:82:0c:93:cc:6f:09:
a3:8a:7d:e1:7a:49:63:15:cf:af:34:ea:9e:25:42:
45:36:c2:4d:9f:b9:c8:b5:94:6e:73:86:97:13:7a:
1e:89:12:42:06:db:de:ba:d0:cc:e8:52:d3:05:e8:
62:39:06:3d:d3:75:d1:d2:7e:e9:c6:f9:49:50:de:
fa:5b:18:ef:99:0b:83:55:fc:d8:fb:5f:7f:51:e4:
e3:77:79:cb:d2:61:70:59:aa:54:f1:ee:98:2c:06:
af:ac:7f:18:78:30:fc:8f:04:a6:08:9f:4c:b4:f1:
c8:57:11:67:a0:af:d9:e8:3c:a7:87:f8:18:5b:35:
06:e8:f0:59:2a:72:32:e4:d9:71:22:0e:38:f0:75:
5b:a7:a2:f0:05:cd:e4:a1:eb:ab:7d:78:2c:d0:74:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:19:0A:A2:29:20:48:46:C6:D1:E5:A5:8F:C6:AB:8C:72:EF:3C:56
X509v3 Authority Key Identifier:
keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5e:be:dd:90:ff:99:44:21:96:86:36:ea:10:45:dc:44:00:
a5:ad:7f:31:41:74:d4:24:b1:e8:5f:83:4e:3c:a2:d2:bb:b4:
52:80:dd:47:d2:24:ee:f8:76:9b:78:1e:7d:62:c5:fd:1a:43:
b0:e9:65:f2:3e:53:d9:8e:ee:19:74:3c:b6:a7:16:2d:80:81:
03:22:b4:b2:35:f8:97:c5:da:32:11:67:54:73:a2:52:f5:39:
bd:1d:29:d3:a5:de:03:05:1d:ca:4c:a0:82:01:63:05:fd:28:
09:be:62:ae:75:4b:a2:cb:0c:04:6e:e9:05:a6:f2:c0:6f:13:
83:01:8e:ff:51:03:f0:6e:1d:81:28:db:b5:8b:7f:02:21:45:
87:9c:a3:6f:85:47:bb:15:d7:7a:9a:9c:4a:82:22:37:77:ba:
90:70:22:cb:9c:03:86:06:64:6c:92:70:eb:bb:b7:ae:d1:26:
a8:95:83:c0:3f:e7:44:62:7f:b1:96:3d:87:b8:3c:21:70:5b:
d4:54:e9:e4:f1:99:5b:07:95:19:de:b6:0a:3b:4e:02:2b:9e:
2c:e7:8a:d7:1c:62:c4:ed:8d:89:7f:2c:f6:b6:27:0a:dc:84:
5a:5b:04:d6:64:c9:7d:02:c6:e9:df:11:8c:99:5a:46:a0:16:
6a:d3:25:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:57 2025 by rpki-client