Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
File: pkLcUMWwgtCc5unHvqeug3EHPvI.mft (raw, json)
Hash identifier: Q2c8DygL+xxAZh9tFmbtRr2MNiKoZLFnjZ4wepj7w+8=
Subject key identifier: 04:C0:C0:1E:46:56:7B:42:5F:5D:6E:72:B6:44:54:79:AE:EB:64:01
Authority key identifier: A6:42:DC:50:C5:B0:82:D0:9C:E6:E9:C7:BE:A7:AE:83:71:07:3E:F2
Certificate issuer: /CN=a642dc50c5b082d09ce6e9c7bea7ae8371073ef2
Certificate serial: 0197B6A0B665339BA2E64B3A4EF1BD72FA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:01:15 +0000
Manifest this update: Sat 28 Jun 2025 13:01:15 +0000
Manifest next update: Sun 29 Jun 2025 13:01:15 +0000
Files and hashes: 1: pkLcUMWwgtCc5unHvqeug3EHPvI.crl (hash: 94zLLIbW7IG+eo6sjfMei9tO3hUMSD0F1vxpO7b13mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b6:65:33:9b:a2:e6:4b:3a:4e:f1:bd:72:fa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a642dc50c5b082d09ce6e9c7bea7ae8371073ef2
Validity
Not Before: Jun 28 13:01:15 2025 GMT
Not After : Jun 29 13:01:15 2025 GMT
Subject: CN=04c0c01e46567b425f5d6e72b6445479aeeb6401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:aa:4b:80:ae:52:8b:ee:12:38:f8:fa:78:
48:49:e5:ed:c8:81:96:b7:ef:3a:45:92:4b:a5:e6:
55:a4:15:c3:93:a9:a3:4f:5f:3b:47:2f:c6:26:47:
c9:41:4b:27:79:04:17:7b:8f:2f:ad:37:23:47:a9:
0f:45:fb:71:ca:f0:a2:9d:09:5d:64:cd:47:5e:19:
c0:56:02:8c:73:78:76:65:dd:0d:39:9c:f9:d1:dd:
a8:e6:86:07:30:be:45:6a:52:ed:bb:36:27:b1:65:
c8:5d:e0:e9:94:4a:27:2d:e1:0c:2b:5a:af:bd:eb:
aa:dd:6f:09:a8:09:44:01:4a:b0:d7:05:cd:cc:91:
9b:c2:07:84:3d:01:2c:56:d0:f2:f1:9f:61:7d:03:
d7:c0:ee:c1:7b:ff:be:37:58:2e:df:e2:7c:70:b3:
e2:31:b2:00:f4:ee:78:0f:0c:84:95:1d:94:b0:cd:
e4:2e:e7:e0:91:10:28:4b:29:3c:a0:31:c8:39:10:
2b:f9:89:89:62:17:7e:39:f3:b9:2a:24:91:c7:5b:
7e:c6:f0:64:c7:53:21:eb:4b:fb:a3:35:82:ec:10:
b6:af:fa:d0:0f:fe:72:71:b0:83:1b:60:d5:03:53:
b1:f1:d9:0c:66:fe:a1:ab:3c:53:1b:e9:93:2e:8d:
fc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C0:C0:1E:46:56:7B:42:5F:5D:6E:72:B6:44:54:79:AE:EB:64:01
X509v3 Authority Key Identifier:
keyid:A6:42:DC:50:C5:B0:82:D0:9C:E6:E9:C7:BE:A7:AE:83:71:07:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:33:67:fc:c6:98:2d:cf:a7:9b:ac:74:b5:67:62:f9:1e:12:
51:99:3b:02:25:da:42:a0:ac:65:9a:37:e6:03:07:16:ee:60:
2b:9e:3d:68:7f:dc:7b:f0:99:4e:57:5f:e1:91:6d:14:a3:5d:
6a:0e:cc:ac:bf:8f:ee:e5:9a:62:00:59:d7:bd:bb:45:cc:01:
c1:2b:4c:e7:e4:b8:b2:73:43:5e:ee:7e:d8:98:39:cb:2f:ea:
b6:f3:25:f2:4c:80:6d:7f:4d:cb:8e:b5:64:6b:61:c2:55:be:
21:be:d1:ed:36:61:80:70:e9:ac:3c:d1:13:95:1f:33:ae:5d:
b2:1d:07:4c:80:b7:d0:ab:00:cb:85:97:59:40:e4:3f:d8:d1:
ae:31:1e:47:a1:05:52:70:0c:7a:2f:2e:7b:05:1f:ef:3e:14:
6c:50:b8:aa:b8:de:6a:12:c1:8e:10:c3:4b:0b:d3:7a:78:0b:
e6:55:74:ea:66:86:ef:bc:bc:61:98:50:ab:4c:f8:74:1c:ac:
62:04:27:ff:d6:49:dd:95:a2:6d:e7:00:8a:f0:cd:9f:2f:20:
32:ac:00:5e:38:9f:4e:e2:99:d8:ab:63:b1:94:5c:5f:98:e0:
ca:b7:eb:9e:97:28:f2:7d:93:df:e2:1a:61:dc:df:28:b4:15:
7e:fb:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:58:00 2025 by rpki-client