Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier: kd62SgxB+EQ0j8kHZhEXoxSSmdgrTfaa64zN7DhAKFE=
Subject key identifier: C2:4E:5B:18:16:85:B2:CD:0D:72:30:E5:AD:8D:73:79:E5:7A:08:0F
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial: 0197B6A1B8478BA46491B63C6F3E80C0BBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number: 0743
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: A90KdD6i9DoEUkiUX4qW1ekDx6MxEmtz1G3u1T+iksI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b8:47:8b:a4:64:91:b6:3c:6f:3e:80:c0:bb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=c24e5b181685b2cd0d7230e5ad8d7379e57a080f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:3f:d3:fb:8f:09:ab:22:8f:59:39:ef:a6:
de:82:99:5c:bb:d5:18:74:8b:47:8c:8a:c0:68:a9:
b4:45:89:45:bc:e3:89:09:f3:1d:fd:38:d5:b7:b5:
d1:41:24:0e:96:01:16:8a:81:d6:53:a2:c4:6c:68:
a0:62:90:c8:6e:85:54:97:27:2a:64:ab:92:f6:a9:
fa:b0:e2:76:1a:01:33:d8:cc:50:87:ce:3b:f6:1b:
ce:81:b4:62:70:13:63:4f:ac:f0:c1:1c:a8:bf:6a:
f8:0f:d3:ce:a5:88:2a:27:e5:f4:62:79:cb:1d:07:
6a:36:78:30:56:f4:b1:8a:eb:44:45:a4:fc:8e:1b:
61:9f:d9:80:a6:24:c3:49:f6:32:12:2f:14:11:49:
0f:fa:b7:3e:5f:83:8d:e1:a0:9e:3d:d3:b5:29:b9:
78:65:d2:86:51:ed:64:3a:c0:79:b1:94:25:79:75:
3a:7f:0d:a9:9b:a6:74:62:a0:a7:ac:10:5b:bb:e7:
9c:9b:6c:f2:4c:c9:ff:c4:d5:1a:60:b9:84:28:0e:
72:14:43:22:58:5f:c3:d7:a1:90:5b:6b:d2:1d:a9:
a8:50:5a:7c:33:29:9f:23:7a:17:96:37:1a:8f:19:
b2:af:65:33:f5:55:40:ba:3d:95:f7:ec:76:a8:2c:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4E:5B:18:16:85:B2:CD:0D:72:30:E5:AD:8D:73:79:E5:7A:08:0F
X509v3 Authority Key Identifier:
keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4f:61:d7:4a:15:e5:5d:81:87:88:8f:7d:22:7c:01:fe:28:
89:42:cb:44:1a:bf:6d:04:84:24:84:c9:28:7f:25:7f:a7:e2:
b9:48:66:d1:26:a5:d2:b6:90:a6:81:a8:35:d7:29:23:96:3c:
bd:5a:56:12:16:e3:78:3c:64:8a:7f:ed:0b:c5:f9:0e:8e:fd:
8a:d2:92:be:60:3c:00:c2:fa:f6:48:19:31:8b:1a:bf:2f:9e:
ee:79:28:34:5b:61:0a:18:3c:f5:06:66:3e:48:33:cf:98:a3:
03:13:4b:b6:96:96:3b:01:58:62:b8:58:b9:8a:9d:d6:f7:da:
df:75:17:76:5e:d3:b9:70:cc:c2:b2:2e:dd:79:5d:34:a6:b4:
46:53:7f:c7:55:66:c0:4c:70:d4:e2:4b:1e:2d:94:8e:8b:d8:
51:70:f4:05:57:b4:bf:c6:94:d4:95:2a:44:64:df:9d:00:10:
4c:00:93:f3:cb:3a:48:5c:94:96:4e:ae:a8:52:ab:ec:a3:2d:
e5:c8:07:06:8c:b8:20:50:3e:95:7b:2e:20:6f:0b:c1:ed:55:
98:17:82:58:4c:66:95:d8:48:53:c1:f5:50:ae:14:04:53:36:
fd:93:24:10:51:71:96:33:e0:bb:72:bd:6e:3a:8b:0e:2c:ec:
0c:f4:3b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:26 2025 by rpki-client