Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
File: PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft (raw, json)
Hash identifier: p9wHuAKJyIdCDCN8pml1ql24ttqoKYU6kWkkUBU9QyA=
Subject key identifier: AC:F8:36:E1:FD:C6:FC:EB:FA:5D:89:78:9C:6E:18:E3:59:51:04:0F
Authority key identifier: 3D:2D:1A:DA:61:4C:68:E1:74:C4:DE:DF:55:99:6A:95:43:16:EA:E6
Certificate issuer: /CN=3d2d1ada614c68e174c4dedf55996a954316eae6
Certificate serial: 0197B6A148729D52D9DE36913ACB6FA9FCBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS0a2mFMaOF0xN7fVZlqlUMW6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:01:52 +0000
Manifest this update: Sat 28 Jun 2025 13:01:52 +0000
Manifest next update: Sun 29 Jun 2025 13:01:52 +0000
Files and hashes: 1: PS0a2mFMaOF0xN7fVZlqlUMW6uY.crl (hash: R3sWwSPoA4mtiOUqU0UJKQMvPp8msJXLMOgNKr/4y4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS0a2mFMaOF0xN7fVZlqlUMW6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:48:72:9d:52:d9:de:36:91:3a:cb:6f:a9:fc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2d1ada614c68e174c4dedf55996a954316eae6
Validity
Not Before: Jun 28 13:01:52 2025 GMT
Not After : Jun 29 13:01:52 2025 GMT
Subject: CN=acf836e1fdc6fcebfa5d89789c6e18e35951040f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:69:8a:02:86:25:96:37:e3:cb:35:dc:20:
6e:68:fd:ed:36:4d:8e:9f:f6:65:f8:86:a3:94:02:
93:a4:0d:db:1f:8c:6d:06:ca:a6:d2:f8:a1:1b:51:
aa:28:0f:73:41:86:43:ce:f6:9e:ae:ff:fe:dd:b4:
0f:9c:00:88:77:a6:4f:92:b7:1e:bd:02:4e:c9:e9:
38:68:98:b0:87:fe:95:e5:27:91:ce:8c:b8:2b:f5:
8a:a9:27:6a:cf:d8:b7:4b:f2:49:06:ec:27:8a:71:
6e:8a:9b:a1:24:4b:7d:a8:bc:9f:49:a1:65:7d:ca:
ae:d7:ba:62:f0:56:de:c1:60:6f:c2:4c:98:8a:4b:
66:1d:12:0d:9c:52:02:4d:60:04:d9:ad:62:70:af:
e3:25:d5:69:a4:27:e9:27:41:87:db:66:d6:aa:6d:
2c:19:c2:f2:4c:9e:f8:da:e6:ce:7b:36:16:94:1e:
bc:ae:ff:10:a0:74:0d:5f:a0:c0:0a:8e:b5:8d:f3:
97:02:a6:c4:ed:34:93:b4:c9:66:f8:c3:df:5f:59:
26:ca:04:7f:90:4a:b2:d3:8b:b7:47:ac:4d:8e:41:
df:05:b3:eb:e5:44:91:d1:44:e0:ce:e9:63:ef:00:
cc:e2:25:47:78:44:20:8d:c3:f0:b8:49:ae:a7:8f:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F8:36:E1:FD:C6:FC:EB:FA:5D:89:78:9C:6E:18:E3:59:51:04:0F
X509v3 Authority Key Identifier:
keyid:3D:2D:1A:DA:61:4C:68:E1:74:C4:DE:DF:55:99:6A:95:43:16:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS0a2mFMaOF0xN7fVZlqlUMW6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/fcbfd7-d785-4b06-88c5-486cae041e0e/1/PS0a2mFMaOF0xN7fVZlqlUMW6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ea:ce:53:46:01:3e:89:e4:53:a3:15:6e:e5:1f:37:04:8f:
68:67:a4:d7:24:2e:15:6b:67:bd:49:5d:80:44:f6:af:4d:d1:
51:95:b3:85:ca:c3:21:4e:f1:cd:d8:7f:3f:c8:23:fa:d5:ee:
3c:a7:30:e3:a1:eb:0d:45:2d:41:29:cc:31:cb:dd:53:b6:23:
10:82:a4:85:ae:8e:a4:ac:32:fb:51:c3:aa:05:a9:e2:93:93:
d0:22:32:9a:b4:da:36:11:e1:4f:54:a9:53:3d:0a:9e:8a:82:
24:8b:bf:c6:a8:63:78:a4:c0:4d:5e:7d:93:be:52:6f:20:07:
9b:72:e6:ef:71:16:71:36:0f:8d:9b:1c:2e:a1:f6:a8:05:d9:
34:b0:7e:f8:04:b8:44:d2:2a:1e:94:94:8f:43:d4:3e:19:f5:
d0:f8:6a:73:76:a0:64:77:14:a4:2c:38:1a:1b:a7:c2:02:fb:
45:92:8c:e6:e0:d7:74:cb:61:ba:2a:7f:fb:67:29:49:27:56:
89:6f:13:a5:cf:8b:b6:93:10:f3:db:55:62:2e:51:dc:2c:83:
02:98:4d:2c:b5:85:f3:ae:bb:13:bb:6b:99:72:e9:d8:38:66:
66:56:a0:8c:12:9e:c7:61:8e:43:23:1c:12:2e:5a:ee:9f:9f:
b8:0a:b6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:35 2025 by rpki-client