Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
File: PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json)
Hash identifier: 3aU4jVQEk9M7qvYunTRYmQDh1MlH+OZVz4zla1PqWMQ=
Subject key identifier: 63:4C:E4:9E:BE:5F:22:0B:9E:17:BB:B8:95:F4:40:DD:2A:C4:99:96
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial: 0197B6A1C814FF3D376131FF6F45810170C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
Manifest number: 09BB
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: VyRYPCUH/PF6Qra+bhdSNj7UfaDuZK5EUmETrelpfc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c8:14:ff:3d:37:61:31:ff:6f:45:81:01:70:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=634ce49ebe5f220b9e17bbb895f440dd2ac49996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:6f:e4:78:d1:56:7d:02:59:da:81:19:1a:
53:89:d5:b6:9e:81:b7:bc:aa:cc:c8:50:32:3c:72:
55:cd:0c:27:69:ae:4d:90:19:59:08:c9:e6:ab:76:
64:31:06:d2:40:cf:75:9e:a9:fe:b0:de:80:84:88:
4f:e0:cd:a6:e5:ca:c6:df:e7:14:d5:3f:94:63:e4:
65:a7:80:f9:a8:ab:27:b9:d8:d7:3d:e4:a1:a9:ca:
ff:09:3a:4b:09:5c:e9:25:04:18:a9:5f:43:ad:54:
c6:04:26:d5:4c:81:27:2e:36:48:d2:56:7c:d0:01:
73:e3:ec:ff:29:95:4a:bf:4a:34:af:70:92:80:14:
47:aa:8f:43:cc:64:86:77:76:a3:af:1e:cc:19:2b:
0c:ae:c4:39:53:da:b9:58:7d:09:78:31:4f:a4:c0:
45:79:af:b8:ba:5e:b4:9b:27:ce:8d:06:28:85:ab:
8c:3e:c4:55:1c:58:8a:49:d0:57:2a:ce:16:30:90:
9f:99:eb:ac:68:fe:9b:1f:bc:14:b2:36:9f:4f:10:
1c:ee:64:8f:66:96:73:a9:6a:88:18:de:a8:f0:fd:
05:82:01:c6:00:b7:de:65:4b:bd:0d:24:76:60:39:
df:98:d4:74:52:71:9f:5e:37:41:a6:00:8f:cd:92:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4C:E4:9E:BE:5F:22:0B:9E:17:BB:B8:95:F4:40:DD:2A:C4:99:96
X509v3 Authority Key Identifier:
keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cb:10:dc:af:ba:87:d6:a3:03:ed:86:00:76:99:40:b4:83:
1d:45:8c:50:9f:91:88:55:5f:ae:94:23:21:10:23:9e:06:94:
9e:ae:be:af:9e:26:78:fd:ab:9a:5a:09:a4:20:ba:8a:21:61:
52:4a:06:3d:79:83:53:d2:b0:43:1b:e8:64:1a:19:eb:88:85:
0e:69:00:f9:64:8d:f1:ca:f7:1a:aa:28:c0:93:2d:25:17:c5:
61:73:c2:9b:cd:af:8e:8c:4d:e3:a3:95:3e:57:55:5f:b8:7b:
68:82:4c:9a:c5:46:02:3a:9f:b6:6d:7e:6d:32:58:3b:77:0e:
bc:2d:37:fd:24:d2:fa:bd:01:75:f0:09:1f:90:ce:8b:90:d4:
84:dc:fe:6b:6b:b8:07:b4:a6:31:8a:1e:e9:28:c7:b0:36:58:
70:ca:b0:cb:22:a8:13:7f:93:c0:c2:c3:b7:ac:d6:68:b7:14:
03:ef:56:3b:a9:e0:7e:4c:d3:71:74:94:15:57:51:4d:97:1c:
25:b3:cf:1d:68:c0:f4:63:56:30:e6:9e:f5:c6:78:d8:f3:9b:
36:b8:dc:63:d9:6f:41:69:d9:fc:83:57:af:ae:93:2c:26:83:
a8:22:bf:29:1f:f8:16:f4:a2:db:85:9f:b9:be:a7:8f:c5:ab:
95:94:fa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:26 2025 by rpki-client