Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
File: PP7M1r9kBrDPRPaCuTzYbjNGUko.mft (raw, json)
Hash identifier: fh1kK3TAww0lk9cXUE4Fqeo4PR2J8FKTTq7ui7w157g=
Subject key identifier: D6:E3:F3:99:D4:26:E6:FD:1F:25:46:B0:E7:EB:C2:27:9E:8F:3F:77
Authority key identifier: 3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
Certificate issuer: /CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Certificate serial: 0197B88EFA30E2DA238B4AE7B31DA55B1E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
Manifest number: 112C
Signing time: Sat 28 Jun 2025 22:01:07 +0000
Manifest this update: Sat 28 Jun 2025 22:01:07 +0000
Manifest next update: Sun 29 Jun 2025 22:01:07 +0000
Files and hashes: 1: PP7M1r9kBrDPRPaCuTzYbjNGUko.crl (hash: BFhu+uWubDAvc5zRpM7y0Oy4YfMPf708c49OxcOS3Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:fa:30:e2:da:23:8b:4a:e7:b3:1d:a5:5b:1e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Validity
Not Before: Jun 28 22:01:07 2025 GMT
Not After : Jun 29 22:01:07 2025 GMT
Subject: CN=d6e3f399d426e6fd1f2546b0e7ebc2279e8f3f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:ab:5a:a2:3e:3d:d3:6f:61:52:ae:37:3f:
34:f4:91:e6:7f:80:85:7b:41:45:c4:1f:b1:d7:20:
36:4a:e2:b0:dc:c7:b5:54:84:92:a0:a4:ea:f2:a5:
24:1c:7e:b4:5d:48:10:65:8b:8c:7c:64:18:b4:d3:
e0:f5:d1:f1:b8:89:24:c6:cc:52:c8:8e:00:a5:ad:
29:ed:6a:92:d0:5b:b8:11:91:a1:11:cf:90:96:80:
df:52:e2:43:c4:bc:49:ab:05:38:cd:45:a9:fa:5d:
2b:9c:a0:2b:21:96:8c:f0:77:bd:bd:b0:28:c7:6f:
27:a8:f5:98:b9:2c:6f:25:f6:33:45:05:fa:77:c2:
b7:93:cf:44:aa:13:a5:4f:b1:34:a6:14:b2:08:5a:
90:f5:f2:bc:ec:d7:41:0c:ea:f4:dd:44:cf:01:1f:
6a:25:15:35:0e:f9:dc:58:ab:5b:43:1f:1c:59:6d:
ac:c7:4a:c9:2a:73:66:d4:8f:ba:cc:bb:54:9e:8e:
8a:43:fe:8d:b4:37:6e:da:44:82:c3:5e:47:ea:3e:
7b:95:72:6c:57:f9:bb:a2:66:86:8f:2f:e3:76:ff:
42:92:41:5d:b0:55:89:a0:21:95:79:13:71:9d:1a:
b9:38:49:07:0b:9e:ab:a2:9f:56:4e:93:a6:08:6a:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E3:F3:99:D4:26:E6:FD:1F:25:46:B0:E7:EB:C2:27:9E:8F:3F:77
X509v3 Authority Key Identifier:
keyid:3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1d:b0:2e:13:24:00:03:47:00:d9:db:78:37:df:73:63:6f:
77:f2:4d:1b:92:95:ea:4a:4e:04:54:50:5d:e2:b1:30:0b:3c:
43:f7:6a:7c:0b:df:37:ff:8e:e1:1f:73:c4:f8:1c:63:e7:16:
ac:c2:31:87:79:5f:4a:3b:3f:ec:1c:5d:6a:25:19:a4:77:80:
0c:97:ca:52:92:99:2e:7c:98:9c:32:ff:9c:80:c2:5b:a7:d7:
6d:66:4d:ad:0e:d3:52:02:7c:a8:2c:3e:ec:a3:9d:9c:fb:6d:
0d:2b:fc:fb:39:42:00:92:d2:66:98:a2:6c:c1:2b:be:5e:2d:
93:6a:bb:5d:98:b1:41:7d:4d:28:97:1c:6d:1e:eb:cb:e6:52:
04:b8:71:f6:65:08:e7:5d:f6:98:05:3e:66:81:69:b0:05:3a:
ce:ec:5b:6c:45:00:d0:0b:e0:cc:dc:0c:06:be:27:ca:6d:5e:
01:f3:77:39:03:96:a7:26:1d:7b:8c:be:89:00:88:34:1a:be:
8e:0a:22:b9:39:84:25:06:bf:52:ea:2d:d5:f7:21:26:40:7b:
6e:5f:04:bf:e0:c6:72:ce:fc:c3:80:4a:9a:2e:26:62:2b:26:
c9:2e:7f:a2:2c:61:a1:68:48:a6:ed:f5:39:6d:b8:52:5b:2c:
18:2f:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:31 2025 by rpki-client