Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
File: PtWjaKny40iTSpFIiEVZQ2I_lus.mft (raw, json)
Hash identifier: xYdZC+5fPoqLZZNJGS18aZgfw1XpiKN4sEnvXang1jo=
Subject key identifier: 9B:DF:B7:B4:6E:6F:CE:3D:98:FD:6D:C9:71:65:73:9F:FE:10:A9:0C
Authority key identifier: 3E:D5:A3:68:A9:F2:E3:48:93:4A:91:48:88:45:59:43:62:3F:96:EB
Certificate issuer: /CN=3ed5a368a9f2e348934a914888455943623f96eb
Certificate serial: 0197B88F379ABBE2CAE6CD07327A87AA94EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
Manifest number: 1199
Signing time: Sat 28 Jun 2025 22:01:22 +0000
Manifest this update: Sat 28 Jun 2025 22:01:22 +0000
Manifest next update: Sun 29 Jun 2025 22:01:22 +0000
Files and hashes: 1: PtWjaKny40iTSpFIiEVZQ2I_lus.crl (hash: sVT0A3hNohHgE+/PVizQnThGd7fsd2uxLNXHDgf7+YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:37:9a:bb:e2:ca:e6:cd:07:32:7a:87:aa:94:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed5a368a9f2e348934a914888455943623f96eb
Validity
Not Before: Jun 28 22:01:22 2025 GMT
Not After : Jun 29 22:01:22 2025 GMT
Subject: CN=9bdfb7b46e6fce3d98fd6dc97165739ffe10a90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:fe:c2:0d:89:ee:a6:73:fb:40:8d:81:36:
5f:c7:fe:cc:14:c0:52:f9:14:7a:63:5d:fe:4c:19:
0b:c9:17:ee:42:3a:44:ee:d8:78:d8:b2:d5:f1:15:
15:17:38:51:56:b7:57:35:36:80:19:c3:19:b0:6d:
12:08:e0:68:ff:ea:cb:09:1e:ce:f0:22:e4:4c:bf:
a5:ce:07:91:7b:7f:05:a6:a4:ce:69:ab:ba:ed:1b:
dd:ae:9b:ec:5e:0c:fd:b3:c3:46:10:4b:2a:7f:c1:
7a:67:31:36:3d:ee:2b:7f:40:e8:01:1e:bf:3f:88:
f8:84:96:33:38:fd:4e:85:0d:a1:66:c4:39:13:4f:
01:a8:2a:51:e4:21:42:a4:8a:bd:81:e3:83:36:12:
54:a8:90:ca:de:0d:04:72:f3:c0:9a:17:be:d5:37:
0c:4f:13:c9:0d:3f:7f:8c:93:31:8a:b2:0b:09:7e:
72:c6:6f:3b:32:6f:52:43:3d:24:cd:7e:67:25:ab:
7c:2d:36:79:26:d1:a8:fd:94:7e:9e:cc:68:09:61:
ca:70:90:2f:b0:de:71:cc:6f:48:9c:a8:36:13:f2:
c6:61:32:a2:e8:d5:e9:80:ad:f7:a3:f5:b2:3b:cb:
a2:ed:d7:ce:42:69:57:54:27:4b:e9:ca:ce:8c:e5:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DF:B7:B4:6E:6F:CE:3D:98:FD:6D:C9:71:65:73:9F:FE:10:A9:0C
X509v3 Authority Key Identifier:
keyid:3E:D5:A3:68:A9:F2:E3:48:93:4A:91:48:88:45:59:43:62:3F:96:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ee:c2:b3:bf:13:a6:15:07:b6:46:04:38:c4:fe:ea:f7:81:
78:4c:02:0f:95:aa:a0:1d:a1:5c:58:15:17:18:d1:da:74:24:
4f:28:57:bf:ba:08:60:12:b9:db:8e:eb:4e:88:87:37:00:92:
bd:cd:30:b0:f0:43:32:33:24:28:30:a1:9f:0c:a2:a1:21:95:
74:1d:34:0e:ec:29:d7:9a:90:2e:a2:54:21:36:be:e6:86:43:
61:03:1d:80:c8:3d:05:53:73:f6:a6:ff:36:a8:17:a1:51:bd:
a1:a0:d2:e8:f2:b4:a9:c3:a5:a3:33:df:4e:e9:2f:80:14:d2:
c2:43:20:a7:ec:bb:5d:ee:01:51:83:37:7c:5a:85:41:4b:f0:
da:95:38:a7:05:da:68:33:c4:a7:ac:6e:a2:3d:0e:18:4e:d1:
23:fb:cb:db:d8:dc:0c:1a:f5:d8:2d:08:7e:ed:cf:6f:12:39:
e5:56:1c:fa:a8:43:65:c8:56:0d:9c:bd:54:86:66:53:a3:3c:
7e:b8:53:36:86:66:ac:c5:ca:09:41:e8:ca:9a:c3:1c:fa:c2:
6e:08:2f:7f:5c:95:a7:44:fc:a2:c7:27:3d:e2:94:c2:45:dd:
55:42:cb:bf:8b:33:c3:75:a2:d2:bd:19:0e:de:99:05:05:7a:
7b:d9:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:27 2025 by rpki-client