Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
File: PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft (raw, json)
Hash identifier: 5bI2vEra7tSnZOo3i+JA+zG4wVEEkHqz1ks3YPLS02k=
Subject key identifier: 26:67:35:B5:C4:5A:F5:A3:D5:53:2B:33:CB:68:85:3A:05:24:8B:65
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 0197B7EA863068217089CBEA627D4FAF149E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
Manifest number: 1089
Signing time: Sat 28 Jun 2025 19:01:29 +0000
Manifest this update: Sat 28 Jun 2025 19:01:29 +0000
Manifest next update: Sun 29 Jun 2025 19:01:29 +0000
Files and hashes: 1: PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl (hash: poFeR+14XjtAk3tzJyWiSzj5o+pR9mI3CXjIVTSjT3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:86:30:68:21:70:89:cb:ea:62:7d:4f:af:14:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jun 28 19:01:29 2025 GMT
Not After : Jun 29 19:01:29 2025 GMT
Subject: CN=266735b5c45af5a3d5532b33cb68853a05248b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:a5:6c:fe:9a:3d:29:20:9a:5b:54:46:7b:
58:21:4a:7d:7a:1d:01:04:b5:0c:24:0c:98:8d:67:
ed:42:0e:bc:fa:db:2d:85:b3:67:85:1e:82:08:86:
d9:16:bf:a6:83:18:a2:91:a4:d0:f9:30:f0:d9:d3:
9f:0f:21:d9:08:91:2f:b1:b4:50:a0:6c:ae:9f:d9:
77:e3:77:9a:d9:46:45:7e:43:d2:e2:1a:1d:e6:86:
e0:e1:30:2c:38:d7:65:ce:d2:ee:31:15:e2:b4:d2:
9d:a4:47:e5:64:ee:69:a4:f2:04:36:8a:3f:2d:e7:
63:8c:a4:35:97:2b:22:f5:7b:68:f4:e8:11:40:58:
12:f3:16:b3:40:68:a2:43:97:bf:a3:31:f7:1c:ae:
a4:a1:32:00:b2:b4:95:48:11:86:c8:dd:78:bc:9e:
aa:30:50:70:ef:12:b3:14:d2:bd:0c:42:e1:7e:82:
36:82:80:a6:3f:6f:92:8d:f8:e8:ce:6c:59:a6:7d:
8f:c9:77:07:f8:6a:a1:9c:9d:fc:4f:53:92:59:61:
19:30:0c:b2:b6:a6:1e:97:5a:7d:90:8a:50:5a:ef:
bb:b2:ed:78:2e:4e:90:e8:d3:bc:a5:f2:4e:50:bd:
0a:9b:3a:66:30:67:7f:55:f4:d4:93:5f:6d:cf:ea:
86:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:67:35:B5:C4:5A:F5:A3:D5:53:2B:33:CB:68:85:3A:05:24:8B:65
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:da:cf:ed:3f:c2:91:53:9d:ac:91:a5:25:55:cc:a1:95:3a:
cb:e7:5d:7c:43:09:bd:ea:80:05:a2:b9:28:35:65:c2:e0:a3:
c5:7e:da:85:88:2b:8d:e7:4c:a9:ee:40:a3:b4:29:0f:da:f7:
0d:49:62:cf:60:fb:96:bf:72:c4:e8:78:bb:44:23:51:6b:47:
7f:41:0a:ca:65:87:29:07:87:24:2e:a2:b2:14:ce:a2:a4:32:
fc:cf:2f:aa:ad:85:dd:4a:86:49:6e:64:ce:70:3b:55:82:ff:
e4:98:81:41:e9:ac:fb:a0:26:8c:97:9c:68:97:26:85:73:ee:
85:68:4e:ac:be:03:1d:4a:94:c5:7c:37:79:ed:64:0f:0d:80:
11:ec:73:9d:59:64:6b:26:96:81:bd:ea:f3:76:5f:e6:76:07:
f2:7c:41:2d:a6:c0:08:a9:67:f3:63:d4:c6:91:d6:fd:93:5f:
ed:82:7e:2d:3d:9e:c4:d3:f3:8a:b2:da:19:82:07:58:84:e2:
a6:6d:b7:90:20:80:61:fb:a2:f5:6f:38:1d:16:97:79:b9:e6:
44:fb:1b:25:ee:29:36:b8:b8:79:b7:45:11:ee:15:f1:83:27:
d1:9f:6b:83:e8:af:60:20:0b:a5:8d:80:e4:d1:b3:70:91:5f:
84:47:39:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:24:32 2025 by rpki-client