Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json)
Hash identifier: GdHkm64YebX6X8qMfz0qVP81OuTinUmyJKobPsE1xrw=
Subject key identifier: E3:9B:7E:44:50:EA:2F:C4:BA:23:9E:4C:E3:7E:87:65:3C:14:3C:83
Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Certificate serial: 019779AFFF1B2EACAE9923FEADB330E053D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
Manifest number: 067A
Signing time: Mon 16 Jun 2025 17:01:06 +0000
Manifest this update: Mon 16 Jun 2025 17:01:06 +0000
Manifest next update: Tue 17 Jun 2025 17:01:06 +0000
Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: vJVKMP2EBEkPbvwuxbwppJ3bSeTxAPoEgKueSuqC5Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:ff:1b:2e:ac:ae:99:23:fe:ad:b3:30:e0:53:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Validity
Not Before: Jun 16 17:01:06 2025 GMT
Not After : Jun 17 17:01:06 2025 GMT
Subject: CN=e39b7e4450ea2fc4ba239e4ce37e87653c143c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:95:44:96:b1:38:15:35:4d:3d:84:46:da:
2c:6f:cd:30:67:36:b7:19:64:76:2b:d1:0d:2c:ad:
e2:98:e8:9c:2d:64:de:8a:fe:b4:e9:67:dd:53:8e:
15:c5:1e:78:58:9e:d5:87:f8:e4:61:27:e7:71:c8:
31:59:7d:40:8e:e1:e8:fe:df:dc:9b:11:d8:df:19:
3c:9e:a3:56:26:bd:39:16:f2:08:2b:ea:a7:5b:17:
8a:bb:47:74:3d:1e:59:f7:9a:77:12:10:d7:67:f4:
86:1c:e0:f1:4e:78:e4:45:49:db:0f:b5:80:fe:f0:
e0:62:80:7f:a6:f9:2e:6d:a2:44:65:7e:9f:fb:29:
83:62:7d:01:c6:a4:16:a4:4a:8d:a1:68:97:50:8f:
57:fd:a4:b6:56:da:bd:25:2c:ed:15:7c:30:4d:ce:
28:d8:8d:97:22:5f:e3:a9:c2:37:ad:76:22:9c:0a:
f9:d4:b7:45:eb:f8:bb:31:b7:7b:89:cc:f1:f9:c6:
b5:15:3b:eb:3f:5d:c7:ea:b1:95:32:be:62:02:18:
1f:0b:f4:8d:ae:80:3c:51:9a:e9:61:c8:34:e0:fb:
8c:0e:27:b8:ff:5d:57:5d:7c:09:55:14:b2:bc:d8:
45:1c:f9:c2:61:f0:ef:2d:7b:a2:dc:8a:d3:da:6e:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9B:7E:44:50:EA:2F:C4:BA:23:9E:4C:E3:7E:87:65:3C:14:3C:83
X509v3 Authority Key Identifier:
keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fb:fb:8d:fe:30:fe:1d:e2:12:ce:63:68:b8:b7:32:e5:a0:
59:cb:47:67:2a:65:fa:eb:e7:03:31:d5:d0:1c:94:f2:d5:0c:
51:06:c7:06:75:86:cd:fd:8d:00:bc:f7:14:1e:c7:35:e7:05:
60:a1:4a:27:59:cc:55:a0:5b:a7:ee:da:47:08:f6:2d:94:10:
39:53:fb:b7:6d:b9:3d:71:de:9a:b6:73:32:52:bb:b2:fa:c5:
d0:83:c0:ef:d9:a5:e9:9f:2c:b2:2c:b8:97:05:b4:ad:c6:7b:
8c:8f:98:f1:5e:d4:9b:49:7f:47:32:5b:c5:ed:c1:9f:bb:ee:
f5:b5:28:2a:64:5a:04:05:b3:19:c0:ea:8f:9f:7d:c4:81:12:
b1:a1:a2:54:18:83:6f:34:80:12:1d:ab:09:10:82:b1:91:fb:
b4:c5:74:28:36:a5:0c:a6:1b:c4:bc:b6:bc:6d:1d:1f:84:75:
9a:45:b3:ff:97:99:0d:b1:07:39:35:d0:58:2b:07:b8:8d:ac:
b9:61:ab:17:c0:d3:17:c4:37:cd:19:ab:b9:6c:b1:0a:5a:1a:
5a:b4:6e:eb:23:5f:39:4d:00:27:9d:c4:ad:b8:16:94:c0:c7:
0e:2f:f6:cf:65:ad:02:7e:17:bb:8c:40:02:c4:f8:2a:e6:83:
56:5f:f7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:17:24 2025 by rpki-client