Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json)
Hash identifier: pdT/YHk8omGZwmj7yJpE23OszX2FwXAA1Getvo/uZUc=
Subject key identifier: 39:A6:2B:C2:81:4B:9D:C8:44:E9:E4:90:3C:37:09:00:35:2C:25:5C
Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Certificate issuer: /CN=a4c9f067007684facca9be8ce02da4676c09972a
Certificate serial: 0197B70E8610501F84F7585540962FA4247B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
Manifest number: 05EC
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: OMGc5drbm7tguDiZjeuVaWwBHefKZ3P7wHfzvjwTe48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:86:10:50:1f:84:f7:58:55:40:96:2f:a4:24:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=39a62bc2814b9dc844e9e4903c370900352c255c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:6b:7c:ab:82:50:22:6d:f4:5f:54:07:98:
d1:e7:b0:72:15:78:7f:8a:33:34:06:3b:8c:db:72:
b4:b5:44:51:5b:b4:08:c4:14:9a:90:71:f1:ef:bd:
dd:31:bc:5b:fa:6c:a3:00:d5:69:7d:5b:95:f9:00:
2a:f5:6a:32:45:6d:7d:e9:d9:fc:d1:60:12:8f:aa:
55:42:ca:5a:c0:e8:14:42:3e:eb:54:7e:ce:d1:09:
61:60:55:3b:00:1f:52:54:37:a5:5d:4a:9a:26:b8:
7b:e9:08:5a:81:04:9f:9f:5c:38:ae:88:75:1e:80:
47:92:54:7e:5d:c5:10:94:ac:05:ce:3f:39:3e:39:
da:15:c2:db:08:bc:95:17:c4:42:3d:c1:3f:46:8a:
82:46:dd:09:67:d8:9d:01:e0:4f:1d:f3:c9:93:e8:
af:d0:4c:01:9b:2d:8e:76:ca:6c:b9:f3:65:54:36:
a3:dc:ac:e6:9e:ea:07:29:2b:76:32:2e:ee:48:f8:
ff:53:74:f2:86:ec:8c:cd:3b:d6:75:5a:14:ca:34:
bb:fe:df:e9:0f:d8:f7:0b:14:17:64:96:74:12:26:
9a:66:43:1c:52:76:80:86:f0:fb:73:ad:65:f6:8a:
82:34:88:85:ec:4b:af:8d:3a:24:d6:cc:33:4c:99:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A6:2B:C2:81:4B:9D:C8:44:E9:E4:90:3C:37:09:00:35:2C:25:5C
X509v3 Authority Key Identifier:
keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:11:c0:b3:37:66:95:11:7c:38:76:ef:7a:c2:2e:34:78:b9:
25:b3:6b:ca:7f:52:61:56:fb:80:56:0b:29:95:58:cb:4b:f6:
bf:7e:3f:7c:3c:b3:ce:83:7c:95:ed:4a:5e:c3:11:5b:d4:8d:
d2:ba:d9:bd:f7:db:4c:81:46:bb:b0:a1:26:74:c2:cb:7a:11:
4c:4d:ca:15:ea:55:0d:5c:96:0f:30:08:85:42:12:03:7c:b2:
f2:a9:7d:ac:55:78:40:2b:14:d3:f1:ef:8a:13:4d:48:60:09:
5c:73:5e:b5:a9:15:51:06:2f:a5:27:ac:f0:15:6f:f9:df:b5:
5d:35:a0:f6:14:ad:24:14:e9:0d:ba:fc:4c:0a:8c:60:5f:c2:
f6:11:96:a6:ff:23:87:c8:5e:3b:37:ad:bd:e0:73:a3:76:4a:
08:b4:8c:59:d6:70:28:40:a5:c3:41:50:41:af:98:de:06:ed:
0b:50:a5:84:4b:d1:ca:ab:4f:e8:d0:6b:27:3f:40:14:6d:f4:
c5:79:1f:04:8a:ab:c5:7a:80:62:03:b5:65:2f:7c:9d:a3:5a:
f7:99:de:3f:a6:7c:17:02:21:9c:af:a3:09:af:38:50:87:c1:
a2:79:91:96:56:b3:3a:18:b1:a2:e1:47:42:5a:a7:03:7b:9d:
57:21:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:27 2025 by rpki-client