Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
File: PRgTEVbDK1enN4cYxgiq46mWXCs.mft (raw, json)
Hash identifier: OVPMCONgD6XA8iEB25hlQdv4g2YR+SiPfbZ8dX3+tEw=
Subject key identifier: B8:35:8A:32:4B:35:C8:20:6B:F2:6D:36:F3:B4:73:49:5C:BF:FC:98
Authority key identifier: 3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
Certificate issuer: /CN=3d18131156c32b57a7378718c608aae3a9965c2b
Certificate serial: 0197B6A1CA3B031BB321F4CC69477883F3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: PRgTEVbDK1enN4cYxgiq46mWXCs.crl (hash: e9Ym7s+M+DNU+USU6ci+KzmMooVzetkrhiaPkXMSmnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ca:3b:03:1b:b3:21:f4:cc:69:47:78:83:f3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d18131156c32b57a7378718c608aae3a9965c2b
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=b8358a324b35c8206bf26d36f3b473495cbffc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:af:b2:07:ff:b6:42:a4:ee:ff:b5:36:cd:
f0:8e:6a:2f:90:c7:9f:0a:26:16:1b:4e:b0:48:1f:
47:6c:ef:e2:eb:85:1d:86:9c:db:87:cf:5b:87:a8:
3d:10:04:ac:5a:06:48:df:fc:07:b1:3c:36:4d:f4:
ed:b7:ce:04:f5:d1:63:c3:32:64:df:37:54:7c:bb:
9f:64:54:6e:7c:3c:98:09:7b:28:ce:15:b0:a5:4c:
be:95:ff:22:ee:75:01:10:2a:b1:84:0e:a5:92:b5:
c5:d3:ec:12:ba:e6:9f:77:43:cf:02:8c:5b:39:c5:
d9:82:52:30:22:29:a7:61:64:ee:97:7e:ba:32:8c:
6a:29:57:27:39:45:2c:78:92:22:31:f1:83:31:32:
40:b9:fb:b0:de:b1:36:c9:38:8e:0a:e3:56:91:27:
96:ce:49:04:50:d7:77:34:1c:10:04:69:0c:e6:a3:
ca:7d:7b:78:fe:8f:17:97:03:cd:a8:34:c2:20:58:
6c:c8:15:86:e9:e4:b0:76:0e:6d:72:3b:56:cd:36:
1a:1c:f2:52:ad:d2:b7:94:e4:bb:36:d0:bd:96:82:
cf:fc:16:fb:85:85:ad:d4:07:7c:90:f3:91:9a:bb:
69:38:3d:bd:e7:30:ef:f2:9f:c5:f1:28:fa:b1:40:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:35:8A:32:4B:35:C8:20:6B:F2:6D:36:F3:B4:73:49:5C:BF:FC:98
X509v3 Authority Key Identifier:
keyid:3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:31:39:91:6c:6e:8e:62:30:46:89:3c:81:10:91:d3:65:b9:
ee:50:6c:ed:0d:48:74:64:79:2a:96:65:5a:47:87:eb:a7:b2:
35:6d:09:25:0c:2e:86:80:0f:5f:37:34:14:51:8d:54:c2:d0:
43:d0:f7:3b:0d:cc:96:78:ec:56:c1:7c:d2:ee:3d:f2:a1:68:
bc:c1:d6:c0:d5:f6:b0:f9:fd:1c:80:db:cc:d8:db:ba:c3:5c:
9b:e8:ab:6d:ab:cb:0a:e5:da:4d:54:bb:e3:e8:51:9d:3a:53:
e0:26:c0:31:94:77:29:cd:ba:db:20:06:28:92:c1:1b:11:1e:
5d:99:88:48:02:2b:08:d7:20:2e:2d:b9:77:04:88:cd:2e:31:
68:49:09:77:4c:8f:52:bd:30:a8:4e:5a:1f:18:ba:94:f7:e9:
9a:ab:c6:67:9e:2d:b1:d8:62:a4:ee:b7:c2:1b:c8:59:de:3a:
a5:f9:1c:4c:84:50:43:68:6a:cc:50:c3:c6:8c:8d:6a:3f:3c:
1f:23:70:92:cb:5e:7d:19:cc:22:fc:71:44:06:3a:49:dc:a3:
43:83:0c:41:1d:10:2e:41:b3:9e:33:99:9a:96:0b:48:9a:e7:
96:a4:50:02:35:cd:f7:27:65:aa:d0:ce:14:67:2b:39:e3:0d:
66:45:ea:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:05 2025 by rpki-client