Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File: pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier: jRk4rxIehCzHxKFq9P8rjh3FPTIJD8m4noq5f+y1cxg=
Subject key identifier: C9:45:1C:55:A4:50:0F:9C:45:D3:00:DB:FF:91:43:A6:A3:8B:0C:3A
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial: 0197B6A1298759EBA45A3EB3472CC545CB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:01:44 +0000
Manifest this update: Sat 28 Jun 2025 13:01:44 +0000
Manifest next update: Sun 29 Jun 2025 13:01:44 +0000
Files and hashes: 1: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: MCGIt6/PiuxqOa24GZLrmCSUskJKlJyEVqN2NDCps5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:29:87:59:eb:a4:5a:3e:b3:47:2c:c5:45:cb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Validity
Not Before: Jun 28 13:01:44 2025 GMT
Not After : Jun 29 13:01:44 2025 GMT
Subject: CN=c9451c55a4500f9c45d300dbff9143a6a38b0c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:8a:39:ec:6c:03:fc:6c:4c:8d:5e:31:85:
a2:a3:4f:69:01:d8:47:fa:4c:5c:27:28:ee:22:80:
16:00:0c:09:95:0c:b5:79:cd:4d:40:7f:b0:85:2f:
d6:fe:80:7b:46:67:ec:55:b5:a2:26:8f:ed:fa:69:
5e:68:b5:9d:88:fb:53:1b:02:b5:04:cf:f4:1a:f9:
a0:5a:c7:6d:51:23:c6:66:3e:44:a8:77:9c:76:c1:
a5:c4:ca:5a:fd:ef:0b:a7:f3:cf:5e:53:d0:f3:2c:
65:5a:dd:1b:aa:ec:be:3a:1b:05:09:73:f9:a9:67:
69:16:71:d7:92:87:c9:d0:61:aa:62:96:72:a5:9d:
51:3f:f7:7f:cf:1a:6c:84:6e:a6:5c:a1:0e:4d:8e:
1d:8b:a0:40:bb:ea:12:d5:f1:50:ce:0b:7c:48:26:
67:1f:ea:29:bb:6a:68:27:a6:fc:d6:4f:8f:d6:d0:
13:ea:75:c0:0b:5d:f9:9a:9f:e2:bc:ec:0e:c4:a8:
09:f4:de:e8:85:be:8e:d5:d3:60:5c:e7:d6:f6:82:
b6:6d:a4:3d:cd:43:3d:6b:2b:32:0e:54:52:69:8d:
63:03:5c:d7:c7:85:6a:60:6f:95:20:73:72:64:79:
b5:eb:cf:73:6f:9f:a5:2b:89:b4:16:85:95:95:89:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:45:1C:55:A4:50:0F:9C:45:D3:00:DB:FF:91:43:A6:A3:8B:0C:3A
X509v3 Authority Key Identifier:
keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:35:fd:b1:9b:3d:92:a5:1a:47:87:9d:c6:24:45:3e:42:7d:
63:d1:df:cc:e9:9c:85:45:9a:5d:31:1a:1e:ab:bd:87:df:18:
79:e1:50:27:c3:08:e4:98:a5:fc:ac:f2:87:dc:39:3b:1d:86:
14:ba:80:bf:c6:23:d6:4a:3f:8f:4e:7c:09:65:d5:8d:d0:25:
a9:c8:71:68:c8:1c:8c:d5:17:6d:e2:b7:ba:94:0d:5f:35:d8:
8a:28:e9:a6:7c:6b:78:47:81:7a:b6:36:55:67:ec:7c:6c:90:
1b:66:1e:55:cd:fa:7f:37:13:7d:ab:ca:ed:8f:35:67:d1:12:
0b:84:58:82:0a:7e:d8:20:7e:3f:7e:00:00:26:80:71:b3:55:
11:61:5c:5d:1d:b9:92:30:58:0a:48:b1:f3:7f:26:4d:4f:48:
4a:03:fc:54:a9:21:bc:b5:30:7e:29:3f:17:39:55:d8:a0:d4:
dd:0f:6a:5a:0c:0a:a0:4a:08:f0:07:d7:08:fa:00:e3:45:ce:
f2:56:c2:7f:b6:94:b1:0e:0a:38:ff:01:e1:9c:e4:1d:36:a5:
bd:82:b5:c5:5e:ad:88:c5:e5:f5:fe:95:41:bb:be:ca:a5:1c:
c5:e3:63:54:60:5b:a2:4d:02:71:65:bf:43:bb:60:63:3a:54:
9d:54:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:18 2025 by rpki-client