Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File: pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier: xibzfQAVRCyhEVqr36Klb6jMBTQIizMR5GStTECnyXE=
Subject key identifier: 83:D3:43:33:70:89:89:00:B8:7B:26:32:6F:22:59:A0:BC:20:90:17
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer: /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial: 0197BA7D555B32B7FB93EC66460B3CF255AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 07:01:05 +0000
Manifest this update: Sun 29 Jun 2025 07:01:05 +0000
Manifest next update: Mon 30 Jun 2025 07:01:05 +0000
Files and hashes: 1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: PDtIK1q6sf+LrjQ9zD2nr54qXBPgQt0Q2whE2btvSRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:55:5b:32:b7:fb:93:ec:66:46:0b:3c:f2:55:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Validity
Not Before: Jun 29 07:01:05 2025 GMT
Not After : Jun 30 07:01:05 2025 GMT
Subject: CN=83d3433370898900b87b26326f2259a0bc209017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:37:76:ff:49:c9:cd:d0:fe:21:c9:4f:c9:
21:bf:d3:63:5c:f5:0d:8a:3f:d4:65:14:5c:64:ba:
39:2b:81:c8:61:09:33:5e:9c:68:b1:f2:b7:82:1e:
96:30:d6:e1:af:0f:05:56:00:87:d4:85:e5:68:29:
b0:66:05:c5:df:85:98:77:db:55:cc:f1:32:e2:cb:
fe:1b:92:aa:23:22:04:bd:a9:0a:1e:f5:81:a7:04:
da:bb:c7:87:30:53:6d:8b:ea:fc:b1:de:52:c7:c7:
19:33:e1:49:1b:74:ff:f5:17:66:dd:8c:cd:ef:16:
e2:58:e4:a8:b1:05:18:18:06:ea:a0:8c:89:02:71:
10:3c:ff:d6:f6:df:62:f4:05:b7:5a:18:c6:d4:60:
54:cb:af:53:83:7d:be:ad:38:a0:27:89:c2:91:e5:
f4:21:88:0f:27:27:27:69:69:7b:70:77:5e:dd:d3:
ea:5c:81:ba:56:af:78:a3:84:96:ab:3b:15:48:99:
bd:50:ce:39:34:76:5d:06:37:b5:4e:44:11:07:82:
0e:13:c1:b6:b2:b4:b8:04:93:a2:1c:03:7c:8c:fb:
a7:b6:8f:3a:59:25:43:f1:38:59:84:0e:a3:c2:ef:
f7:7c:b6:df:8a:f1:50:1f:bd:b5:7b:bb:34:56:f2:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D3:43:33:70:89:89:00:B8:7B:26:32:6F:22:59:A0:BC:20:90:17
X509v3 Authority Key Identifier:
keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:31:01:20:cd:6a:d3:07:fc:ef:0f:2f:b1:3e:d3:7f:53:cb:
dc:da:4e:c0:48:a1:f5:11:8c:c3:79:d1:00:c2:1d:bd:c6:64:
a3:9f:cf:09:01:26:ed:6e:d9:82:b3:6b:c7:1d:a0:c2:cf:4b:
53:25:6f:ef:07:37:9b:08:4e:d3:6e:9f:e4:9f:11:fd:9a:85:
8f:75:35:51:2c:48:7b:ff:40:cc:d8:71:af:10:39:ce:06:b4:
aa:30:b9:04:ef:f5:31:3c:57:4e:61:e0:33:06:57:a6:0b:62:
2d:8e:dd:fb:b1:07:96:d4:14:73:96:58:62:e0:08:bd:ba:a8:
b6:ea:1c:24:be:92:ef:66:e2:e3:33:5e:5c:53:8e:63:cd:53:
f2:fa:93:63:2c:e2:85:a7:76:73:10:f4:db:67:ae:4f:ee:20:
cf:00:90:2a:24:3a:db:27:1d:4f:3f:25:66:4e:89:f1:3a:e0:
52:d7:6e:15:bf:33:c3:ce:a4:97:bc:66:06:ff:f3:ac:65:7b:
ab:5b:1e:88:58:71:91:ff:48:62:dc:d4:a6:bf:67:5a:eb:90:
58:fc:f6:6e:00:c4:db:85:f1:3d:32:45:9f:be:e6:15:6b:53:
d2:e5:7f:19:5e:ab:63:5e:b8:4a:cc:e5:d2:81:0d:3f:65:2f:
31:de:45:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:20:30 2025 by rpki-client