Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier: vc3/4Bf/cu2IJKad5Ocu2m9TITcExwJxQseHYymaxm0=
Subject key identifier: C5:95:69:F9:E9:89:BC:0F:93:0D:91:D0:2B:C7:B8:0C:0B:61:5E:60
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial: 0198D54E629AC0F3BCA0889CA846872862B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: C+ZCF1MjhU2083fcgmwCqXydAAYaSksWhbg0Il3Zb0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:62:9a:c0:f3:bc:a0:88:9c:a8:46:87:28:62:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=c59569f9e989bc0f930d91d02bc7b80c0b615e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:b2:c6:bb:c3:a4:cc:bb:90:f4:e8:78:b6:
68:5d:b3:a0:c0:5a:64:ec:4f:1f:13:de:23:b4:a9:
e3:11:04:29:65:51:6e:00:79:99:b9:b2:eb:59:ae:
28:6f:3f:0b:ec:36:5d:bb:8f:40:6a:a4:d6:20:f1:
f5:21:90:70:d2:65:b5:20:2b:13:1e:9e:8e:03:36:
09:fd:24:6b:e7:ca:bd:9d:89:03:de:a4:a3:97:9b:
6f:cd:f5:dc:41:c8:97:58:2d:b1:63:a3:b1:8a:2c:
95:08:8f:25:92:54:54:9d:a7:ed:3a:a9:e1:d4:b5:
66:b0:7a:19:37:f8:e3:f8:09:46:6b:d3:75:af:d8:
af:79:61:51:2a:88:02:74:29:67:c0:b0:f4:b8:b0:
14:c2:f6:e0:10:3c:b2:ff:e0:6c:57:1c:c5:84:a0:
02:99:86:79:58:ab:09:a7:96:c7:03:da:a8:db:35:
5f:32:35:c5:24:a3:10:4b:07:b4:f0:a4:6c:ee:b9:
59:a1:67:8c:1a:7e:a3:09:f6:46:7c:a2:5a:30:e0:
b3:42:d6:6d:64:4a:d4:fb:d8:e2:51:03:60:97:b7:
72:93:95:d8:e8:50:a2:f5:7c:d6:c4:37:cc:71:fc:
d9:db:51:7a:63:25:62:eb:df:bb:55:97:ac:7f:c6:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:95:69:F9:E9:89:BC:0F:93:0D:91:D0:2B:C7:B8:0C:0B:61:5E:60
X509v3 Authority Key Identifier:
keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8a:cc:f8:74:20:89:01:69:f7:60:a9:b5:7b:4a:fa:41:87:
a0:52:e3:64:b5:a3:ae:4d:f2:b4:c5:ea:ad:f0:13:31:40:e3:
7a:40:c5:7f:54:82:97:b4:ec:4c:7b:2d:51:71:63:b7:3d:be:
e7:56:84:cb:b6:5d:7e:9a:ca:8c:70:7f:69:82:a9:fd:ea:94:
af:fc:1b:a3:96:13:8a:17:6b:dc:c2:c8:47:7f:6b:fc:83:5b:
a9:9b:7c:c7:42:a3:93:21:d8:87:36:57:e4:8d:e6:fb:e7:d3:
34:6a:07:b1:ed:8c:98:e4:52:c2:93:a9:41:7f:61:3b:88:ee:
ec:ce:53:37:db:ab:b3:16:ca:01:c0:cc:89:64:7e:68:7c:90:
8d:0d:7c:3e:6e:15:7e:83:fe:9e:d4:09:02:90:8e:df:6b:76:
84:99:ab:82:ff:9d:42:c7:6f:d6:38:5c:16:74:c0:7b:a6:f1:
96:38:9a:b1:18:31:14:06:a9:c3:45:87:8f:25:cc:45:fa:37:
a3:ba:03:bd:93:ae:d6:99:2d:39:9b:22:74:c9:e5:08:3f:95:
e4:20:93:26:82:d5:1a:4b:cb:b5:ce:a6:a0:2f:98:0c:a5:5b:
bb:0c:6a:46:82:31:40:b4:48:e4:78:4d:a5:b0:40:53:23:ca:
97:a3:87:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:20 2025 by rpki-client