Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
File: PQJjyVdcvQESY66Ig5p4iLdPoHY.mft (raw, json)
Hash identifier: 5GokV3yaa3En7aQzfu4XFIcbxJCQtj8SLYf03K7Uy1E=
Subject key identifier: B5:5C:D2:19:58:45:C6:7D:58:AB:2C:D2:77:1D:18:1B:5C:0A:A6:6C
Authority key identifier: 3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
Certificate issuer: /CN=3d0263c9575cbd011263ae88839a7888b74fa076
Certificate serial: 0197B6A154A9D45F0A24A5402951118B130C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
Manifest number: 10E0
Signing time: Sat 28 Jun 2025 13:01:55 +0000
Manifest this update: Sat 28 Jun 2025 13:01:55 +0000
Manifest next update: Sun 29 Jun 2025 13:01:55 +0000
Files and hashes: 1: PQJjyVdcvQESY66Ig5p4iLdPoHY.crl (hash: m/QsbFxAcAUP80qBZZ4oLH+D0mFh0VkkzqgJZgbToA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:54:a9:d4:5f:0a:24:a5:40:29:51:11:8b:13:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0263c9575cbd011263ae88839a7888b74fa076
Validity
Not Before: Jun 28 13:01:55 2025 GMT
Not After : Jun 29 13:01:55 2025 GMT
Subject: CN=b55cd2195845c67d58ab2cd2771d181b5c0aa66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:fd:7c:f9:d5:c4:0e:0d:a1:21:e2:97:2b:
47:44:72:6c:7d:ee:01:cf:f9:0a:3c:a1:cd:3c:c4:
47:cf:3e:ab:c4:01:45:36:5f:09:5b:da:2e:d6:4f:
d8:b7:48:76:87:05:f2:f1:32:25:fd:ce:d3:6c:28:
e5:07:33:54:d8:78:4c:7f:77:ae:5b:65:77:22:fc:
2b:2c:6f:32:72:09:d0:71:4b:dc:31:21:cb:03:84:
4e:bb:38:ea:46:cf:82:aa:10:ee:fa:1c:e3:99:38:
86:aa:25:84:f9:e6:f8:60:8a:c5:5a:50:57:75:e8:
ea:fc:55:ae:99:4d:6a:5c:18:6d:5a:4e:a6:4a:92:
18:a5:c3:05:ed:b5:31:77:2f:79:85:02:46:13:a8:
eb:67:30:18:ab:75:54:88:17:cd:14:71:0c:a7:ba:
b7:7a:3c:d4:3c:e2:5d:43:11:5b:3b:a7:59:45:89:
09:4b:08:c6:84:a4:19:cd:f1:80:e6:60:e1:3e:c3:
80:63:6e:d5:d2:df:e1:10:7b:ef:85:d2:98:91:63:
98:2a:15:d8:3f:6f:c1:f4:99:68:ed:bd:1e:d6:21:
0c:ab:2d:8b:41:fc:a2:de:3c:b6:94:72:bc:7b:71:
50:aa:68:25:cb:ba:ca:59:93:60:23:a2:36:57:46:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:D2:19:58:45:C6:7D:58:AB:2C:D2:77:1D:18:1B:5C:0A:A6:6C
X509v3 Authority Key Identifier:
keyid:3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e2:c6:86:3c:18:f1:79:5b:d2:82:4a:ab:b8:63:3d:dc:83:
75:fd:cf:b7:05:6e:81:2c:8d:d8:bc:ba:5f:02:ac:3a:22:d3:
f2:1b:e3:9f:3f:bd:16:dc:ea:ea:fb:bc:3b:0d:21:74:4b:69:
c1:6c:6b:54:21:76:cf:66:3f:f1:2d:9e:d4:ba:23:ae:0f:7f:
a1:0d:d1:24:9c:40:36:11:50:8f:9e:6e:39:c7:24:b7:5a:87:
8a:92:55:da:2a:c8:1e:70:98:94:70:68:fb:dc:23:d0:32:df:
0c:06:5e:1d:da:74:f4:9a:47:fd:af:41:27:7e:45:ad:0a:0c:
68:3e:82:19:77:b1:f0:37:f9:f5:96:f6:a7:19:db:55:86:32:
a8:42:ec:21:f3:c4:57:ea:78:9e:5f:b6:3a:85:bb:7e:af:a6:
c0:b1:06:d4:06:ae:71:52:8e:c9:c1:7f:fb:0b:f3:3e:59:4f:
53:c9:27:f6:56:2d:e2:9b:09:43:17:e3:19:f6:bb:57:49:4b:
e7:1f:a9:7d:15:2e:0a:a9:42:33:7d:7f:d5:19:55:1e:58:34:
bd:44:0e:a5:64:8f:9b:0e:d9:ef:f4:a2:52:0b:81:74:b3:49:
34:4f:9b:a0:e3:45:b3:2a:0b:29:f3:d9:fa:79:5e:f8:af:db:
8c:0b:b6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:22 2025 by rpki-client