Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File: PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier: LNkX1flPIWzwL+2ZyXNr9+mgKyVLfokf0JVZMRddKyU=
Subject key identifier: CD:57:47:2C:1F:4B:BB:AF:F7:E8:15:54:F5:93:8D:CF:1E:73:AC:15
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 0197B89093601369D9E41C0539EC250EA28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number: 12DD
Signing time: Sat 28 Jun 2025 22:02:52 +0000
Manifest this update: Sat 28 Jun 2025 22:02:52 +0000
Manifest next update: Sun 29 Jun 2025 22:02:52 +0000
Files and hashes: 1: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: nOlfNDoIzNftWwKBkq1WmdvRXR+R3Lmr2A0Y2Q8uX4o=)
2: UMngkvwaRjIoN5eBBlFi84sCo3g.roa (hash: a8obNUaAoXy5QpQYwb8sCwj2NbkRTv7ZWZ/OkpJ4CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:93:60:13:69:d9:e4:1c:05:39:ec:25:0e:a2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Jun 28 22:02:52 2025 GMT
Not After : Jun 29 22:02:52 2025 GMT
Subject: CN=cd57472c1f4bbbaff7e81554f5938dcf1e73ac15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:ee:d0:40:4b:85:70:cf:2d:d3:7d:98:f2:
a4:52:a3:7b:74:ab:fa:8b:08:5d:12:1f:b7:51:7c:
e6:93:fc:83:0e:63:96:54:1e:04:09:5d:ed:ff:5a:
c7:40:e3:d5:23:1b:02:34:24:cd:5e:86:31:31:47:
8b:ac:ea:9a:8a:7c:82:4b:fc:36:74:2f:5b:7c:0d:
61:76:f6:b4:ca:2f:df:17:78:1b:c0:0d:79:0f:0d:
bb:6f:cd:19:22:68:8e:f4:ad:f5:a9:fa:af:62:17:
3c:f9:bd:bb:62:3d:fc:8a:71:a4:38:38:d2:c1:5d:
39:cf:f3:17:3d:ca:7d:d9:ed:5c:11:fb:3b:95:c4:
58:9e:b5:03:c2:52:ac:cf:99:4a:df:3b:d0:93:61:
95:17:75:45:d8:91:44:79:0f:0b:72:b4:5e:08:9b:
31:ea:2c:60:72:06:a7:90:30:2c:84:f7:62:59:d2:
d0:a5:01:7b:13:6a:ea:1f:77:d5:1b:d0:76:9c:d4:
2b:a1:b7:58:a6:a1:ef:33:b9:b5:c3:c9:1a:75:95:
b9:08:d9:d8:ff:1b:93:16:68:ee:71:23:6c:58:82:
28:66:cb:84:3b:0a:7e:89:b6:23:3a:5b:b0:49:35:
68:bf:ce:84:7b:94:d8:e6:d3:03:29:0c:22:73:5a:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:47:2C:1F:4B:BB:AF:F7:E8:15:54:F5:93:8D:CF:1E:73:AC:15
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:da:d3:69:1a:53:1a:ea:31:16:9d:aa:cf:13:63:6d:b0:1a:
4f:15:60:6f:76:9c:83:0c:4f:e0:1a:62:5e:47:3e:7d:11:2d:
dc:04:d0:14:62:58:18:cc:03:80:de:0e:1a:b2:5b:06:ee:c8:
13:cd:1d:9c:27:49:3e:28:a3:08:9e:43:b6:91:8c:44:c2:cc:
c9:ce:94:e7:93:84:b5:00:04:6f:f1:ae:04:8f:ae:3c:40:1c:
fd:94:2e:f8:d3:c4:44:f5:bd:8c:4d:c1:0c:3d:5b:20:83:77:
98:ac:7e:2b:a6:cc:18:c6:3a:5f:98:6d:60:b4:2b:86:57:bb:
61:94:b3:80:92:7b:4e:77:41:1e:23:d0:32:d6:e7:b5:78:9c:
67:1c:78:c7:5a:45:52:8e:fa:df:c1:9f:86:62:b2:7b:b0:b6:
e3:03:32:a6:6b:c5:9f:55:cc:9c:48:36:4c:ec:0f:e2:42:4a:
e2:db:31:6b:f1:f3:4a:46:59:72:55:8a:b2:8c:bd:32:94:90:
42:6c:9b:b3:fe:d5:a5:1a:17:c3:87:c8:0f:07:54:36:b4:e5:
3c:51:5f:48:32:e3:2d:ca:1c:be:0a:6c:bd:0f:99:1b:45:3f:
4a:66:81:94:48:91:60:84:b3:30:e7:4b:48:37:ba:c6:7a:b8:
1e:48:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:13 2025 by rpki-client