Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: 6huJEcpnc860JoOkJMMjZ2n3aS6ZZIEQwdUNYMGHTb0=
Subject key identifier: C8:DB:D1:BC:81:2A:65:D7:B2:8B:D5:9D:4A:24:4F:96:25:3F:15:D7
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 0197B7EAB98AE245E8387E047936C6C40ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 0312
Signing time: Sat 28 Jun 2025 19:01:42 +0000
Manifest this update: Sat 28 Jun 2025 19:01:42 +0000
Manifest next update: Sun 29 Jun 2025 19:01:42 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: SG0LbbZPh9CG135TdttUajH7pR9IaXG5FLchvcPDlLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b9:8a:e2:45:e8:38:7e:04:79:36:c6:c4:0e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Jun 28 19:01:42 2025 GMT
Not After : Jun 29 19:01:42 2025 GMT
Subject: CN=c8dbd1bc812a65d7b28bd59d4a244f96253f15d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:12:c7:05:c4:c2:74:f9:1c:d3:99:7c:c1:
18:d3:77:61:d5:6a:f6:f9:84:5b:8e:d1:67:c7:21:
e9:d3:6c:dd:12:f5:00:67:a6:a0:1b:ca:83:de:e9:
36:af:7b:a7:fc:66:8d:36:b3:5b:e8:ee:40:ce:1f:
97:fc:06:24:bc:df:a9:80:25:17:c8:5d:8a:af:97:
ec:44:7a:42:fa:96:66:41:08:50:ce:06:e9:de:88:
40:5c:5a:ec:3f:8c:01:e6:06:fd:df:99:16:65:d4:
8f:10:68:4f:01:69:c0:b7:e4:70:de:25:43:2a:72:
00:64:5a:ab:f4:1e:8b:4f:d5:c8:f5:0e:0d:08:1a:
e3:4a:0b:51:bb:7b:e9:02:cc:42:4b:a5:68:5c:6d:
cd:61:c8:d7:87:0b:d9:08:b5:9d:6b:2c:24:fd:cf:
28:6f:a6:cd:53:4b:8f:4d:36:ce:86:1a:4c:3b:61:
10:02:33:85:af:ce:e6:33:92:8a:68:1d:d1:8f:fc:
19:69:d0:f1:4d:73:ef:9d:b8:c7:45:b8:6b:89:ee:
f2:09:8d:ad:19:5b:d1:b4:2f:f9:0d:56:d9:d9:05:
d8:56:19:c8:ef:23:ce:7c:20:91:da:f5:61:34:8d:
56:4f:06:e1:e8:f1:00:b5:eb:4c:05:ed:9b:90:c5:
15:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DB:D1:BC:81:2A:65:D7:B2:8B:D5:9D:4A:24:4F:96:25:3F:15:D7
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3b:1c:80:e6:c5:c2:1c:ea:28:25:63:c0:df:4e:3e:40:d9:
ac:5f:34:45:67:89:e1:36:a2:0f:81:7d:69:37:1c:4f:12:20:
14:24:ee:aa:23:bf:6c:fe:98:24:b8:5b:c1:bd:d9:5c:f6:80:
b7:80:c9:f8:a6:36:07:84:9c:4c:c4:05:54:6a:37:e3:9f:9c:
b9:03:a1:3a:39:07:03:6c:eb:22:54:bf:7f:b3:99:40:56:50:
3d:11:62:c3:65:a3:2c:dc:f7:5f:6d:e3:5f:37:7f:76:1b:db:
ab:70:14:07:09:f1:9a:5a:e7:4f:69:d2:60:6d:b7:64:83:81:
f6:bc:a6:5f:10:cf:71:a7:b8:24:e4:b1:e0:8a:99:d9:51:41:
53:e3:3a:29:c2:e5:fc:23:0c:6b:b3:b7:ef:dc:7e:77:41:34:
a2:89:a2:84:6d:95:35:6b:eb:ba:91:81:8c:57:65:10:b6:30:
97:f8:f4:ff:fe:cd:4a:94:d9:c9:02:5e:f8:3e:02:98:0a:25:
af:77:52:cf:9d:5b:e1:19:23:90:cf:56:01:4e:54:7e:ee:2e:
c5:60:0d:67:b1:02:20:68:ae:69:7b:1b:eb:e8:71:66:be:92:
c7:bf:2d:c1:0c:ac:1e:31:51:08:25:39:af:83:b4:c4:75:3c:
1f:32:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:28 2025 by rpki-client