Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier: tNIN5Om7scidLYEkzciX6fUH2I7OMgACyYpqZ0f43Yw=
Subject key identifier: 2B:0E:06:CE:C5:5F:1E:D6:9E:30:0F:C5:84:84:ED:74:AD:4D:43:0C
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial: 0197BB5936BD195B46E2338D9892C16EE4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 11:01:15 +0000
Manifest this update: Sun 29 Jun 2025 11:01:15 +0000
Manifest next update: Mon 30 Jun 2025 11:01:15 +0000
Files and hashes: 1: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: 55U6LOZrWQvEErGGQ69VWFQ/A1RK01g1Q+gV29pnkRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:36:bd:19:5b:46:e2:33:8d:98:92:c1:6e:e4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Validity
Not Before: Jun 29 11:01:15 2025 GMT
Not After : Jun 30 11:01:15 2025 GMT
Subject: CN=2b0e06cec55f1ed69e300fc58484ed74ad4d430c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:f4:35:37:06:2c:dc:88:f0:91:dd:2a:01:
6b:d1:21:02:d1:7a:84:67:0e:f2:41:56:ee:ac:90:
cd:68:8e:8d:58:0b:74:2e:0c:35:3e:d8:24:ec:97:
4f:11:62:29:5f:36:c0:5f:08:4b:0e:9f:71:5a:cf:
65:f5:cd:e6:17:96:2d:dd:79:eb:32:ac:7a:7f:64:
c8:6f:16:6b:6c:96:2f:52:29:a7:89:7c:de:23:ed:
15:5f:d6:22:da:3c:6e:61:f8:94:8c:44:05:a2:2c:
4c:18:44:f4:cd:58:bd:97:b6:0f:87:fd:19:ad:5d:
b9:87:83:dc:37:62:7c:88:a1:20:46:e0:9d:69:83:
22:3c:a1:fa:e2:f2:6a:d9:04:d5:a8:62:94:34:bd:
17:c1:98:a8:db:09:bd:63:8c:86:35:b9:f1:a6:05:
19:82:8a:24:c0:19:a0:5b:08:2d:a5:74:16:40:6d:
24:a3:5d:16:60:f2:c3:c8:e5:0a:73:20:a8:f4:12:
9f:4a:26:c8:0a:41:da:3a:41:e9:63:6a:a6:56:04:
79:08:e8:19:cb:7f:06:e6:02:b1:c2:b2:9e:86:37:
95:0f:87:b1:31:92:53:1e:b3:6f:14:c2:49:49:30:
a5:11:99:2b:47:2b:9b:8d:90:91:70:18:bf:ff:95:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0E:06:CE:C5:5F:1E:D6:9E:30:0F:C5:84:84:ED:74:AD:4D:43:0C
X509v3 Authority Key Identifier:
keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:be:16:82:6a:c6:25:77:e1:a5:fe:76:ee:54:ed:3a:eb:fd:
76:30:79:c7:1c:fd:d1:13:3b:84:c3:0e:f9:50:5c:2e:67:ab:
6c:c1:ea:6a:f6:90:b2:a1:b5:dc:d7:74:d3:30:50:09:e9:2c:
db:16:2b:55:15:b5:99:99:ed:85:8d:b6:81:b2:23:ca:24:c1:
d2:4e:a1:79:f3:35:e9:e6:a9:ec:bf:4f:01:13:f7:52:d5:06:
cf:70:5e:f9:e7:7c:82:dc:74:7b:b7:5a:e7:aa:5c:f2:a1:c1:
43:83:b1:f1:d5:1c:6b:7d:7b:ae:87:9b:41:6a:7e:0e:c0:95:
9e:c0:40:86:03:b2:b5:ca:b8:30:d7:65:35:aa:b4:24:a8:d1:
24:a9:73:dd:da:76:db:bf:b4:da:72:db:64:8f:6d:6f:85:5b:
e9:c3:50:2f:7c:b9:2f:8f:da:18:f3:06:39:2d:fc:42:9a:d5:
2c:d4:7d:ff:09:c3:e6:81:d7:0f:56:96:66:b8:be:1e:ef:03:
9c:04:23:73:2e:f0:ad:84:e3:68:46:d1:11:c8:3e:3e:ea:e4:
17:58:6d:21:cc:41:fd:75:be:ee:77:b8:4c:d0:55:97:6c:3d:
fc:57:9c:64:fb:ed:b3:3d:9c:4b:f3:c9:8e:00:e6:da:79:40:
61:80:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:54:33 2025 by rpki-client