Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
File: PJUbD8U6RlditFJfyY3_AskMHpc.mft (raw, json)
Hash identifier: lJHPbiLK2ohWMIk/7i0XRxLC4APbVhkXfFbDqn9bt1Y=
Subject key identifier: 1E:B9:8B:F4:10:CA:4D:69:2A:4D:79:C8:0F:DD:7D:FD:64:A1:F7:B8
Authority key identifier: 3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97
Certificate issuer: /CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
Certificate serial: 0197B70F1CE605E64F8400F1280CD86B0F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
Manifest number: 0C43
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: PJUbD8U6RlditFJfyY3_AskMHpc.crl (hash: RiCRn4iVoeNb04jCpGGmu+nRuURX9CkIYVmp8uyF9PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1c:e6:05:e6:4f:84:00:f1:28:0c:d8:6b:0f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=1eb98bf410ca4d692a4d79c80fdd7dfd64a1f7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:f5:ca:b9:24:94:40:35:04:d6:01:60:c6:
20:94:fe:62:68:84:0f:64:92:59:3a:6d:a7:3e:a4:
5c:b4:51:f7:bb:a6:a2:7b:27:fb:cf:30:94:69:f4:
f3:82:54:83:2e:cd:b6:9f:76:5b:f0:dd:c4:c5:b8:
5d:c0:a3:f2:37:f0:a3:d3:a3:c0:0b:6a:44:b7:43:
6f:f6:7b:66:2b:f7:58:73:4f:a9:a5:92:28:d3:6d:
bc:cc:14:35:93:09:89:e0:2f:7e:f3:18:ef:29:3f:
3d:6a:a9:a6:6a:c9:80:16:aa:b6:b4:1e:9f:de:84:
6b:9a:65:07:65:ac:2e:92:d1:38:19:67:44:46:0b:
86:e1:52:86:56:9e:cf:43:a6:59:09:c7:7c:81:8c:
f1:9c:ad:b4:71:93:a5:7b:6d:3e:dc:d9:aa:4b:92:
1d:f2:46:eb:b4:91:d1:0b:09:b1:85:29:a9:98:1d:
8a:a5:7e:eb:a5:eb:84:77:f9:56:bc:b0:e5:b3:cd:
fd:fd:4a:2e:d4:60:5f:97:e9:64:1b:1e:9d:c1:cf:
d1:cd:ba:ec:d6:65:dd:34:0a:31:3f:c3:70:51:31:
22:b8:de:f1:36:32:20:04:4e:89:55:14:57:dc:25:
36:04:b1:38:38:9b:b9:aa:6e:46:28:f0:93:17:78:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B9:8B:F4:10:CA:4D:69:2A:4D:79:C8:0F:DD:7D:FD:64:A1:F7:B8
X509v3 Authority Key Identifier:
keyid:3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ff:69:03:49:a2:98:5f:89:90:03:24:2f:5d:9d:c7:01:ba:
36:c7:b1:af:43:24:d5:67:a9:42:0d:90:1f:b0:62:31:fe:48:
a5:90:ac:24:7d:f8:97:f0:46:0f:d4:fe:94:5e:a3:2f:32:61:
2c:ac:3b:56:b3:62:e1:98:fb:03:60:4e:d7:d4:f2:24:98:98:
94:94:55:bc:61:06:17:30:0d:ef:6f:af:fd:0b:ba:8a:73:22:
d9:d0:29:ea:f4:e7:ea:f6:46:02:71:12:44:07:2d:11:cb:e8:
92:d7:67:e5:ea:4d:92:ca:a6:bb:28:0c:20:21:aa:7c:5b:29:
5b:17:49:87:0d:0c:af:70:bf:4d:e6:cc:cb:14:60:53:5b:53:
11:70:53:78:1c:94:f2:fa:30:2c:1c:2b:85:8c:c7:8d:89:84:
56:d8:dd:c8:25:b5:b1:95:c5:12:96:a4:9e:61:73:ba:15:61:
dd:f9:1a:09:a0:8e:6e:65:ef:88:1f:8c:f8:63:3b:3f:20:5a:
52:68:08:6d:f4:c6:fa:62:fe:ac:ef:99:3b:04:8b:62:d6:50:
cb:47:4e:d7:cc:e3:b1:19:ba:2d:0b:9e:31:f8:ed:5a:73:39:
26:97:48:d8:eb:37:5d:26:fa:29:ca:72:ca:d6:25:ad:7e:24:
4b:12:35:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:21 2025 by rpki-client