Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
File: PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft (raw, json)
Hash identifier: rTdOuymbl9TFMi4yPBwgdM1q1Ub4qycQbdHkUB98m9I=
Subject key identifier: E7:02:53:45:35:BE:29:4E:F9:80:D7:46:53:1B:9B:2C:5B:B3:B9:09
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0198D5BBACCE6C6ED6BB17FE2B7CE3E9FB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
Manifest number: 111D
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl (hash: lujWPJv/u9/bgwHTRnvZnQzIDUiU3T830culVNfKg4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ac:ce:6c:6e:d6:bb:17:fe:2b:7c:e3:e9:fb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=e702534535be294ef980d746531b9b2c5bb3b909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:75:06:20:7d:12:15:e7:87:6b:dd:58:1c:
32:50:7b:d9:68:3a:04:bf:ec:b4:e3:32:1b:1c:9e:
f2:0a:6f:ec:ec:00:59:24:3f:90:b0:d3:18:4a:45:
69:f3:c4:a0:86:da:6c:62:47:e1:de:6c:e8:ea:87:
f0:39:88:5a:22:d0:6f:6c:b2:36:07:6f:d6:8c:bd:
80:b7:88:41:01:bc:80:33:ad:b4:2c:60:c3:4d:2e:
f1:3a:28:0e:7a:a5:31:23:13:70:f4:be:e4:b6:e8:
32:e2:b7:17:3e:12:fc:9b:9f:a1:78:fa:60:90:41:
10:2c:4d:31:c3:82:9e:ef:3b:92:f5:e9:ad:35:da:
86:4f:c9:cc:9f:cf:17:57:a6:63:11:08:df:89:a6:
13:77:64:ee:2c:d9:dd:c5:0c:9f:cf:2b:49:8e:9b:
f2:a4:c1:a7:e3:75:81:eb:d1:3a:9d:e0:1c:f5:b6:
c2:16:09:07:b2:f4:b3:51:bf:2b:65:6b:c5:17:59:
75:4f:86:70:23:6b:7b:16:08:86:fb:1d:79:21:fd:
a0:96:13:31:38:40:02:7a:b6:9e:56:a2:ad:72:cd:
e9:28:8d:98:71:ef:7d:e7:1d:02:7e:05:4b:d8:ae:
99:d5:da:d0:de:b3:db:ab:f3:29:2a:84:85:f6:69:
a9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:02:53:45:35:BE:29:4E:F9:80:D7:46:53:1B:9B:2C:5B:B3:B9:09
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:08:6b:fd:54:1a:ec:ca:ea:8f:85:52:65:31:9a:a8:43:96:
5f:1d:9a:04:aa:e4:d8:a7:6e:6f:5e:fe:50:1c:ec:51:f2:c5:
74:df:9c:84:c4:c4:4a:28:e9:dd:76:ad:82:a3:2c:40:76:98:
9e:b0:c6:42:1d:93:0b:3a:df:11:de:81:55:45:92:9f:53:d4:
3e:4a:4b:7f:a7:34:56:c9:00:da:c4:73:6b:04:54:16:13:0a:
b3:32:4f:b1:47:5e:44:9f:6c:07:30:a0:42:08:93:5a:6c:15:
77:a0:d9:ae:20:a8:9b:f2:95:52:50:57:ce:4a:f8:3f:27:91:
24:7d:26:15:6c:30:da:2b:14:26:ac:d5:4d:85:f5:a8:a3:89:
9d:ae:e1:e1:7c:0d:64:8a:51:fa:b8:3b:dd:98:ac:9e:2e:b8:
d2:46:32:cc:69:38:6d:c6:12:33:85:94:b4:62:76:01:c7:82:
e5:08:f4:a2:58:3c:91:3d:dc:8e:db:a2:e3:75:9d:d5:c0:8d:
b9:e3:02:ed:2e:f7:a2:08:4f:6b:75:37:a7:7d:3d:5e:09:aa:
99:ad:64:62:2f:d8:02:cb:ae:b2:b0:bf:e3:0d:7f:d1:ba:c1:
84:1c:fd:99:51:72:89:a9:de:1b:1b:ff:54:9d:9f:9f:70:b5:
c5:58:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:16 2025 by rpki-client