Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: cJ5HrtvNQxR9otdMwtGjLrqP1ryMNreHzK9FGyQFYwA=
Subject key identifier: 27:D3:7F:DC:2A:60:6E:9C:BE:E9:B0:A7:44:2D:D7:C0:7C:66:FF:C6
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 0197B7B31AF03447AD53EA66593BB364DED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 0494
Signing time: Sat 28 Jun 2025 18:00:57 +0000
Manifest this update: Sat 28 Jun 2025 18:00:57 +0000
Manifest next update: Sun 29 Jun 2025 18:00:57 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: HOvkMDKbc4IvmmmTlDEOI2Z9+sd1Cc7vgpmLiluFU4c=)
2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1a:f0:34:47:ad:53:ea:66:59:3b:b3:64:de:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Jun 28 18:00:57 2025 GMT
Not After : Jun 29 18:00:57 2025 GMT
Subject: CN=27d37fdc2a606e9cbee9b0a7442dd7c07c66ffc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:34:e1:0d:7d:27:d1:d1:7d:46:a1:2c:31:
e6:21:3d:22:7b:76:fd:de:5b:81:73:fc:7c:7d:79:
0b:7b:75:5a:0e:ee:98:b4:d1:6f:5f:6c:a9:4b:ab:
2a:6e:6f:6b:c5:fb:2e:53:54:2e:96:67:fc:e3:64:
17:61:7e:4f:6c:5c:c8:2f:4a:66:74:1e:fe:f5:18:
82:cb:34:bc:6e:da:66:9a:b9:5a:bd:71:b0:83:08:
26:0a:79:1a:ef:f9:4f:57:88:6d:36:7f:0f:c1:32:
49:2f:f8:a8:0e:4b:bf:3c:4b:a9:e9:37:4f:a9:cd:
fa:de:a9:17:fb:91:53:07:6c:3d:ad:cd:76:e6:ee:
54:ea:3c:2a:94:d9:7c:eb:4a:58:3c:2a:c1:9f:c5:
6f:d8:f3:fa:fd:39:e7:92:3e:a8:73:0f:4c:4b:2a:
7d:c6:e1:ad:9e:97:93:ea:96:59:a0:ea:c7:78:52:
0d:20:a0:9f:46:09:e8:fa:d3:e7:7b:27:ea:44:83:
c2:7d:ff:91:eb:99:7a:2a:aa:77:d1:59:5a:8d:0c:
a7:68:a1:12:13:7c:79:e2:eb:b1:6a:7f:2c:cb:18:
fc:24:31:02:ee:10:bd:27:66:b7:9c:93:c0:b4:07:
7c:02:d1:fe:6c:e7:c9:c2:73:3c:be:e0:ae:6c:96:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D3:7F:DC:2A:60:6E:9C:BE:E9:B0:A7:44:2D:D7:C0:7C:66:FF:C6
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1f:c2:b0:c2:8d:27:79:20:e0:64:a7:26:6e:70:76:c3:1c:
27:03:c6:43:61:6c:6d:64:da:a2:ae:eb:54:4a:6e:9f:7f:d0:
69:69:4c:f9:09:d4:69:73:0d:9a:2e:ab:f1:d9:1f:73:fe:05:
69:f8:a6:6e:3f:14:53:95:e5:7e:97:6b:5c:4e:21:9b:ca:0c:
48:3e:2b:2a:2f:de:c2:bd:13:98:cc:06:6b:5d:c8:63:07:2d:
86:44:46:b4:0b:b2:58:20:ab:33:a9:b8:9f:7f:6d:fa:26:93:
63:b0:bd:2b:73:18:c6:87:9e:54:50:c0:48:73:d5:e1:cc:bd:
78:63:64:c6:50:8c:40:77:f8:95:6a:7f:98:55:55:5f:fe:c1:
25:60:1b:48:17:43:35:8f:84:11:35:a1:e8:8e:37:38:6a:2b:
57:f6:15:36:70:8c:29:19:d1:f0:64:0d:7d:51:a4:60:8f:23:
d0:99:23:a3:b6:48:ef:e0:a0:31:7b:92:dd:79:45:b0:71:db:
6f:5a:3d:e8:e3:69:98:f3:21:eb:be:8b:4f:44:56:d6:52:f7:
31:5c:8a:31:18:76:18:93:61:53:20:94:48:48:f6:b0:2b:1c:
a7:c2:88:af:14:f6:e4:22:6e:a7:7c:1a:38:08:27:f5:67:8e:
70:d7:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:30 2025 by rpki-client