Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
File: pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json)
Hash identifier: GoNeEes0vkHH0SEslmBIS/rIfl8iYTt/s8/mriP+cbs=
Subject key identifier: DA:5D:78:14:82:5B:85:16:E2:95:AD:C3:A2:4F:90:D1:A8:4C:95:CD
Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
Certificate issuer: /CN=a5b2654e432b74dc8da66d816b260cffc8173175
Certificate serial: 0197B77CBF8B3156164D1FDFF217D4D01829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: k7TDYBcaotTCUoGNzhsSzHOUUhSx7BdP7/yEDv31APA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bf:8b:31:56:16:4d:1f:df:f2:17:d4:d0:18:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=da5d7814825b8516e295adc3a24f90d1a84c95cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:82:27:e0:70:c4:87:5d:6b:10:00:2c:b9:
df:30:61:04:1a:4f:7c:7b:d6:71:40:1b:a0:22:d0:
4f:10:32:57:8f:09:15:b2:74:f7:db:57:36:46:79:
18:c8:fa:55:cd:5a:de:ed:f9:6d:ce:57:82:35:e8:
af:8e:e6:0d:05:87:7f:69:83:84:ad:12:37:bd:30:
35:5d:97:ab:2d:fb:30:53:e8:20:a6:a8:d3:3a:db:
f6:90:a4:5a:05:a6:a1:ff:66:04:02:c0:77:18:42:
01:f7:73:6d:14:0f:5a:49:98:87:d3:32:e2:f9:23:
46:92:62:49:51:93:17:cb:de:a7:c0:ff:e6:22:47:
0e:9c:66:33:53:ec:5d:27:08:b4:6e:6a:85:90:b6:
8b:7c:bc:18:1f:2b:d9:2c:cc:f3:fb:19:0c:33:5e:
1b:ad:43:9d:56:ff:1a:8e:fa:86:2c:39:f5:f9:43:
25:cd:7b:77:d9:e9:57:64:ce:c2:9e:81:48:1c:cc:
ee:7e:c2:1e:35:6d:9d:f7:3d:a0:b9:eb:40:4f:b7:
be:d8:a9:ac:0b:b7:7b:46:db:e8:f9:50:b9:ba:e3:
fa:26:ce:94:f4:3d:85:58:62:56:75:22:7c:d7:d9:
ae:12:3f:cf:bf:8a:dd:9d:88:b2:4a:6d:4c:e4:a4:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5D:78:14:82:5B:85:16:E2:95:AD:C3:A2:4F:90:D1:A8:4C:95:CD
X509v3 Authority Key Identifier:
keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:74:a9:ce:c4:df:67:39:a7:ce:81:82:d8:71:d7:f5:08:41:
19:df:a7:50:f5:e6:ea:83:3e:15:ad:93:88:f5:e9:54:80:e1:
11:ae:d8:e2:47:2f:40:1f:64:64:e4:9b:6c:ad:8f:bf:52:c1:
bb:00:53:35:e8:08:90:9f:62:57:71:9b:21:5e:79:13:30:75:
8d:cc:93:42:db:5e:92:c2:e7:57:47:3e:dd:e5:c8:29:d1:3d:
3c:ce:5d:2a:35:51:f4:9e:d5:0e:e0:d2:a5:8d:77:5a:20:eb:
ee:f5:78:e3:af:1d:d3:ff:dd:87:81:2a:ac:aa:d6:4c:bb:8d:
d5:f2:c2:2e:39:7a:95:cc:f7:4c:42:4a:a2:66:7e:ad:ff:2d:
a2:a8:9a:9f:0a:3f:d0:12:27:ba:ca:96:c5:43:cd:c8:f4:db:
6a:82:dc:07:1b:45:42:3f:aa:cb:f4:e2:61:d9:98:90:ec:91:
10:37:11:99:99:f4:44:fd:6f:ac:79:eb:62:76:68:99:39:dd:
d5:69:f5:b0:cf:6b:03:b9:56:bd:c2:26:86:7a:d4:ff:ff:ca:
ed:e3:e8:d9:ed:f0:26:9b:7a:be:9b:39:ad:55:dd:82:68:5d:
b6:b0:c0:06:52:2f:77:d3:83:12:d3:11:24:02:9e:15:5a:c6:
47:c1:2d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:05 2025 by rpki-client