Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft (raw, json)
Hash identifier: xgX8Fsl4PC9XSybWrjK62KGRm1Mbp8ypfRG0VmyBT7Q=
Subject key identifier: D8:56:04:35:35:28:F7:9D:F5:FB:7B:3C:09:3A:DC:C1:85:E7:EF:47
Authority key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Certificate issuer: /CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Certificate serial: 0197B6D72F9F621FDDCD24217DD35351F272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl (hash: llsA0P/y1SRI0qB5lV3iiZUgPXCfcE3qghpBcLwx/wc=)
2: itPEMbOZFFR8e5L5AvpBnlFEedQ.roa (hash: pIQ9iWRr1eE7BBGNob9EZxPiOkZPJVC3FeL7vrrHIjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2f:9f:62:1f:dd:cd:24:21:7d:d3:53:51:f2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=d85604353528f79df5fb7b3c093adcc185e7ef47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:45:e8:32:9b:0e:cb:d7:90:c7:99:51:22:
3d:77:0d:26:51:78:ce:16:9b:82:96:9d:fe:e1:c6:
4c:c4:c5:da:2d:10:30:b5:51:a8:7b:f1:75:d1:6e:
83:ee:78:fe:df:6d:a2:2c:c5:ff:d3:a3:be:ed:98:
9c:6c:b1:76:c2:f7:74:05:66:4d:e3:e6:a4:25:d0:
09:4b:39:32:6b:a3:b5:2e:00:a7:84:5b:2e:e6:b4:
e4:37:0b:30:70:95:aa:34:a9:16:48:ed:10:8c:e4:
a1:f3:c4:54:24:92:d1:34:a5:bc:ec:e7:35:1d:1e:
30:65:51:fd:c1:fd:18:d4:c6:75:ae:65:dc:2a:10:
89:06:1f:24:1a:6b:c0:15:ff:e5:70:ad:7f:70:fe:
37:b2:24:00:8f:04:f7:b5:c4:e0:85:98:31:20:30:
96:c3:bc:a1:54:1d:40:68:d3:42:00:06:c8:3d:5c:
97:ac:5d:9d:0e:fe:0b:9f:a9:64:c8:b6:08:e0:41:
9c:2f:20:53:b0:8f:1e:96:e7:d5:48:3c:ac:17:bc:
ff:7b:0f:4d:57:a6:05:be:61:00:03:bc:1f:fe:b1:
64:e2:14:3c:68:66:90:4c:ff:1b:80:2f:6a:3e:00:
0f:07:f1:a1:70:b3:f0:33:8f:f5:59:d2:9e:45:e1:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:04:35:35:28:F7:9D:F5:FB:7B:3C:09:3A:DC:C1:85:E7:EF:47
X509v3 Authority Key Identifier:
keyid:3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ca:91:4b:3a:19:97:6a:9a:41:8a:33:e1:29:90:b7:bd:c6:
99:c2:4d:a4:22:a4:44:5d:a2:25:f6:d5:ed:1b:4d:9f:75:8d:
cf:ff:bd:d4:74:0e:85:89:49:a3:17:8a:5c:39:e3:c8:5b:cc:
3d:81:7a:2b:92:b5:3b:89:f6:db:8a:43:f3:18:a3:8a:ca:14:
6a:ab:14:6f:5a:d6:51:88:f9:46:54:1c:4e:c1:31:bd:1a:61:
cd:63:eb:d8:b0:64:23:ce:18:79:d3:91:0c:6f:ec:0e:34:ef:
30:66:40:c3:28:4c:73:bb:d7:5c:70:21:35:a2:0e:d7:df:f4:
36:e2:28:4b:5b:34:3c:36:12:e2:44:fa:ee:01:91:f1:69:0f:
f6:48:25:77:91:e8:1d:83:f4:0d:21:59:b6:9a:02:7f:c8:f2:
93:b0:ed:20:3d:37:19:d1:e4:e7:b9:1f:6b:3e:40:b9:9b:ca:
24:62:d7:21:dd:45:2f:75:5f:33:34:e3:46:c0:9c:d8:3e:ab:
1a:2d:51:ba:ab:ed:ae:f9:81:12:13:f1:2d:fe:9d:b5:ba:74:
33:b2:d1:6e:11:d9:af:76:04:a6:05:5e:d9:99:32:39:b5:0b:
b3:4a:6a:71:97:87:75:23:69:86:bc:e6:74:c6:bd:19:1c:2f:
fa:cc:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:09 2025 by rpki-client