Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
File: PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json)
Hash identifier: qCjMqxSP/aWUACIP6wd28OBmChCvzQZiLQ6DDhpk57M=
Subject key identifier: 4F:A3:05:5F:B1:3B:FE:34:E4:48:2A:5E:DF:4A:7B:D6:FF:C6:65:49
Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
Certificate issuer: /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Certificate serial: 0197B88FB2B5F69EF858218979E1ED30DA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
Manifest number: 08DE
Signing time: Sat 28 Jun 2025 22:01:54 +0000
Manifest this update: Sat 28 Jun 2025 22:01:54 +0000
Manifest next update: Sun 29 Jun 2025 22:01:54 +0000
Files and hashes: 1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: 8HkfR94Jawr1EKyVaOjvPD6AOIhB/qSl8+X45H0iQcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:b2:b5:f6:9e:f8:58:21:89:79:e1:ed:30:da:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Validity
Not Before: Jun 28 22:01:54 2025 GMT
Not After : Jun 29 22:01:54 2025 GMT
Subject: CN=4fa3055fb13bfe34e4482a5edf4a7bd6ffc66549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:7b:66:94:c2:b1:ac:6f:b5:f8:9d:32:5d:
4e:75:9e:11:8b:da:8c:d7:82:ec:b2:b7:a2:2f:25:
2d:60:e8:25:3b:9e:f3:39:81:08:8a:80:18:c8:6e:
d1:43:d8:31:d2:37:34:0a:55:db:e2:f3:53:c4:61:
85:cc:b1:f3:c7:b2:a5:72:51:9c:13:e5:c2:1a:4b:
de:31:dc:7d:86:b1:13:5a:c5:fe:c7:99:48:3b:6b:
9d:bc:9c:4e:e9:46:76:68:52:2c:24:c9:a1:87:46:
d3:34:ec:86:cc:6e:5d:6b:16:45:62:4d:ff:70:fa:
be:99:0b:9e:43:4a:e7:fd:c3:98:0b:7d:e0:5e:aa:
b3:dd:a4:51:c9:16:12:83:71:3f:24:0d:14:0b:b3:
9b:cd:29:a4:32:ec:44:f6:6e:06:e1:62:d9:2a:36:
37:9a:a9:f2:f3:72:29:be:52:db:22:c1:33:ff:81:
4e:2e:f6:59:77:74:dd:0f:39:fb:97:be:67:2e:17:
a4:11:00:39:84:63:88:64:4a:55:a2:ce:b9:e8:17:
ca:8c:f4:91:21:36:13:0e:61:76:20:1a:e8:1e:76:
10:1c:4a:86:65:00:35:c5:92:e6:66:55:5c:12:75:
2f:c8:86:1b:75:80:59:ea:42:28:48:37:ea:5b:fb:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A3:05:5F:B1:3B:FE:34:E4:48:2A:5E:DF:4A:7B:D6:FF:C6:65:49
X509v3 Authority Key Identifier:
keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d7:b9:bf:93:5b:14:50:9a:8c:31:cb:7d:5e:f6:88:a5:d3:
6f:f3:21:3e:63:c7:57:c8:b3:b7:6b:11:50:86:49:15:40:31:
9c:4d:d9:cd:1f:30:0c:f2:f7:42:ae:0b:3d:5f:62:a2:41:61:
f7:0d:56:b6:73:c0:79:38:a0:65:72:62:04:c5:7a:92:26:4e:
28:85:f0:c6:f7:ba:b8:49:a9:6b:c5:74:f7:81:6b:6d:e5:a9:
4c:50:eb:61:71:4c:dd:b1:15:53:71:9f:3a:11:a5:af:8a:d1:
98:d3:f2:c5:ab:c6:13:95:3e:5b:7f:af:ec:34:c8:04:7f:74:
d2:74:bf:8f:3f:d3:1c:65:ce:ee:4d:5d:96:ae:d0:7f:1c:72:
2d:a1:7f:d2:4b:25:04:1b:63:b9:14:a5:15:51:70:38:2f:56:
f4:f1:b2:68:57:39:1c:bc:80:2f:e6:60:1c:eb:8e:c0:ed:83:
b5:53:77:c3:00:a3:68:a0:e7:38:6a:d9:1e:ad:be:5b:44:6b:
c7:ad:51:7a:35:54:be:44:2c:96:25:a2:a0:01:43:40:26:69:
62:2c:3a:14:c9:0e:ba:98:4b:2d:32:35:b0:0d:8c:7d:ac:af:
78:84:85:f6:0e:e0:af:38:db:1f:f2:b2:c3:73:8d:6f:14:89:
22:d3:b9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:19:19 2025 by rpki-client