Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
File: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft (raw, json)
Hash identifier: NaGsFwHabggOBlJ6rDwmnXeQhBtDxnLFfVtAKcFxbDU=
Subject key identifier: 36:05:B1:33:BF:25:EE:15:51:3C:CE:E6:E1:4A:C0:47:DB:65:DD:F3
Authority key identifier: 3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
Certificate issuer: /CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Certificate serial: 0197BA7D4E935CB79D8CF2A555879E204DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
Manifest number: 0DB0
Signing time: Sun 29 Jun 2025 07:01:03 +0000
Manifest this update: Sun 29 Jun 2025 07:01:03 +0000
Manifest next update: Mon 30 Jun 2025 07:01:03 +0000
Files and hashes: 1: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl (hash: YhYud45CjRRoazGI2yXIDXZtomBqCz1MaDuGTdnuHlk=)
2: yQbKC99XDhYm8cHYtCzNNvOq7pA.roa (hash: RfdjXnuMOAkekc3w4VyM+j8sngFlhqDHkrg6JoAkaVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:4e:93:5c:b7:9d:8c:f2:a5:55:87:9e:20:4d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Validity
Not Before: Jun 29 07:01:03 2025 GMT
Not After : Jun 30 07:01:03 2025 GMT
Subject: CN=3605b133bf25ee15513ccee6e14ac047db65ddf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:f7:f9:cc:c2:45:4e:d0:64:db:46:0f:14:
62:e7:2d:2c:2b:09:be:a8:23:d2:ef:64:e7:5c:72:
dd:4f:95:85:0c:3e:d6:e9:0d:19:7c:2f:d7:70:fd:
75:49:95:ef:5c:1f:11:c2:29:e9:1f:f1:d6:f8:30:
aa:78:18:9f:d9:f3:cb:c5:c0:f0:6c:61:0c:38:24:
a0:e4:d1:32:e8:46:48:4d:57:4a:bf:83:e3:63:eb:
07:4e:e0:4e:da:1f:12:fd:7e:05:8d:f3:ee:77:61:
f7:c8:3e:da:20:0d:45:e0:a9:f0:14:9f:d7:2b:84:
00:03:57:1a:9c:a3:2e:fe:ca:2b:88:b3:13:0b:44:
01:a5:d3:7a:b2:6a:3c:17:70:0e:8e:63:70:77:d2:
ef:39:45:ce:37:52:41:60:f8:14:89:47:66:73:30:
91:67:52:9e:5d:14:e8:93:33:f3:b2:e4:e9:81:1f:
36:fb:9c:c1:67:60:ce:7a:ef:99:81:19:2e:f1:99:
64:34:02:de:0b:e7:5e:87:7f:ec:c0:07:d1:2d:8e:
0d:b6:55:13:13:bc:25:56:49:bf:7b:bb:2f:29:a6:
59:db:67:5d:29:57:69:6a:08:0d:87:b8:bf:75:97:
c5:98:f7:20:aa:3d:22:bd:36:22:de:71:1f:f3:b6:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:05:B1:33:BF:25:EE:15:51:3C:CE:E6:E1:4A:C0:47:DB:65:DD:F3
X509v3 Authority Key Identifier:
keyid:3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:46:19:45:0d:47:aa:17:46:f7:04:7e:c6:04:ea:27:e2:82:
66:58:21:42:8c:8c:29:63:40:e8:4f:68:63:89:63:c4:fc:6b:
15:2e:05:16:88:7c:42:f4:51:e4:db:1f:2c:38:27:e3:07:63:
60:aa:5c:78:23:e6:35:65:ee:95:a4:8d:43:cb:ad:2a:2b:5f:
fd:4f:7d:36:c9:1f:60:21:50:3b:48:25:a4:e1:de:4e:8d:5a:
79:05:0e:00:b0:92:c7:83:7b:14:67:73:a9:c5:e6:0c:af:80:
ed:f5:92:71:e1:3a:75:69:11:ec:4e:d6:0b:1a:3b:37:5d:94:
cb:81:85:63:9d:92:46:1f:c2:3e:2e:83:e2:86:80:9c:08:68:
36:e0:46:40:e4:eb:81:c6:95:02:a7:9f:bf:83:84:33:e9:46:
32:19:68:f8:10:cf:f4:2f:3f:bf:0d:3b:f0:6c:f4:cd:42:9a:
67:b2:3b:cc:75:86:a1:8f:2f:37:8a:80:ea:99:5f:4b:28:ba:
a5:2f:be:62:20:90:2c:69:70:f4:88:35:83:97:19:4a:ba:3e:
0f:1a:8e:9b:3b:43:e4:c5:ed:3b:ce:8f:3a:45:64:51:f2:b8:
d1:97:e6:3b:f9:07:e6:16:c8:54:4f:96:d5:d3:9e:9c:64:c9:
a4:95:56:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:40:53 2025 by rpki-client