Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
File: PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft (raw, json)
Hash identifier: TpF2AzxbLPIoFv2lLiniEYYFUoW5w2zmNNgCem/T/Hg=
Subject key identifier: 6E:42:88:50:4C:81:F7:16:7A:73:8F:E7:F5:D5:70:2F:11:62:1B:94
Authority key identifier: 3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
Certificate issuer: /CN=3c1415421685ace3682f161d310d92726cdfb097
Certificate serial: 0197B6A15179F401CDCED475B2DC39BF749A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:54 +0000
Manifest this update: Sat 28 Jun 2025 13:01:54 +0000
Manifest next update: Sun 29 Jun 2025 13:01:54 +0000
Files and hashes: 1: PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl (hash: ArBO+EtrDiEbuFwezlUeU8AsTm8ReBY455S7eThJ3hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:51:79:f4:01:cd:ce:d4:75:b2:dc:39:bf:74:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1415421685ace3682f161d310d92726cdfb097
Validity
Not Before: Jun 28 13:01:54 2025 GMT
Not After : Jun 29 13:01:54 2025 GMT
Subject: CN=6e4288504c81f7167a738fe7f5d5702f11621b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:05:74:fc:df:a3:e4:65:85:8f:c2:c3:2a:
f8:1a:ca:14:50:5f:30:54:2b:7a:1d:2d:04:8d:f9:
a2:27:66:e4:53:e4:93:ae:e9:34:37:cf:01:a2:f4:
37:00:fd:df:7f:5d:00:df:91:dc:b3:a9:7e:bc:9e:
ca:13:b1:e9:f4:db:1a:b7:c1:95:7f:21:96:e4:36:
f6:17:e9:19:04:50:39:d2:fe:7f:23:d4:a8:86:58:
74:52:0e:de:16:39:64:6c:8f:be:9a:3b:20:46:23:
b1:21:5b:92:01:56:25:b8:dd:40:15:d9:86:70:a1:
76:c3:76:34:2d:f7:33:50:4c:10:01:5d:07:b7:ae:
56:94:7a:21:91:eb:dd:58:98:1e:cc:a9:67:11:46:
f4:84:10:57:35:0e:ea:af:3f:31:68:11:a9:d5:d7:
1e:2f:4f:2c:1b:9f:07:c4:61:ed:f7:42:75:b9:07:
15:71:db:97:d9:4d:68:c0:01:0a:31:26:51:bb:b6:
19:26:2b:e7:69:3d:2d:67:68:d1:4e:6d:b8:8a:ed:
c3:78:4e:b8:d2:b7:e6:b9:4f:fe:b2:f7:63:29:2c:
ec:40:ff:60:c5:a8:9e:2b:a7:d7:a2:2c:7f:9d:13:
3b:a5:41:f6:e9:a2:82:9c:ce:e5:75:ac:a7:f2:ee:
41:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:42:88:50:4C:81:F7:16:7A:73:8F:E7:F5:D5:70:2F:11:62:1B:94
X509v3 Authority Key Identifier:
keyid:3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3c:74:3b:03:08:dd:f5:e4:34:c8:fa:b6:12:f0:2c:5e:e2:
e3:ce:56:71:c1:23:74:8f:80:42:e6:dc:a6:37:cc:08:d2:81:
17:89:bb:22:a0:5f:c2:aa:71:dd:7a:1a:66:da:97:02:dc:68:
1d:34:92:d2:11:4f:0b:d0:71:ea:d7:b9:ff:80:00:cb:e1:6b:
53:0f:bb:84:f7:e8:b8:3c:d8:22:de:73:84:30:d0:52:62:f2:
70:68:7c:59:c5:17:fc:2d:46:32:61:23:b7:75:2d:e9:08:a3:
99:7a:50:15:23:99:00:98:ac:b3:3f:ec:61:c7:4b:8e:c1:2e:
bf:3c:ee:46:b4:12:97:ef:a6:95:cc:3b:6d:b2:e1:b3:bf:cb:
6e:72:94:d2:c5:d2:eb:ec:4d:af:1a:4f:14:a7:e7:45:04:fb:
a1:cd:6f:48:97:3f:50:0f:be:6d:34:2d:a1:4c:28:d7:13:62:
bd:ca:29:37:95:13:b5:9d:1d:82:e6:03:24:fa:3b:fc:f6:71:
72:52:84:65:6b:c2:cb:80:bf:8b:ad:c9:57:3c:d0:da:f2:06:
ef:21:21:c9:08:a7:2d:1d:48:37:73:94:aa:40:63:70:96:80:
b3:94:df:ed:fa:83:54:1b:55:c3:1d:80:92:f2:db:11:82:ba:
35:c6:60:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:00 2025 by rpki-client