Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier: o3uPiVj6ih7xoN2MRg+byzKX7k47mZXB4JhxGj47qr0=
Subject key identifier: BC:8F:25:A1:B9:21:71:F5:95:30:C1:46:AC:4F:9A:12:3A:33:A5:AF
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 0197B820E07E9F118A5AD884F3BD2653CDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 20:00:51 +0000
Manifest this update: Sat 28 Jun 2025 20:00:51 +0000
Manifest next update: Sun 29 Jun 2025 20:00:51 +0000
Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: 1tvcIIyuIeKhqHCi3etAik9ZyZC9sIRPH2mPOOTrABU=)
2: tJh122419FX7oJQGYtZtkXOvqn0.roa (hash: 80WcSAxcwtJA+++UZrQ3DpOoXBp5rklUr6m+pRMbNZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e0:7e:9f:11:8a:5a:d8:84:f3:bd:26:53:cd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Jun 28 20:00:51 2025 GMT
Not After : Jun 29 20:00:51 2025 GMT
Subject: CN=bc8f25a1b92171f59530c146ac4f9a123a33a5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:17:08:fe:85:e4:70:9f:7f:6a:2a:1c:d1:
4f:12:25:93:b1:08:89:16:53:5a:f8:b7:d1:44:2a:
b2:76:38:2f:f6:17:8a:e3:c0:ff:8e:08:54:11:3d:
bf:14:52:ae:f2:72:48:8a:31:37:70:dc:f9:32:8d:
27:86:03:e6:3c:03:e7:76:63:2a:67:40:bb:95:00:
4f:38:48:71:cf:ab:ca:67:44:d5:0a:d3:cb:27:5e:
ee:4c:a5:e5:80:f1:39:34:e0:ce:37:48:fb:39:1e:
42:24:54:e6:1a:3d:db:c8:31:7d:06:8a:2a:7f:5c:
d1:c4:70:cf:d6:4a:95:f6:e3:97:cc:f8:bd:17:18:
07:c8:f8:a6:a0:c6:e6:21:1e:2d:66:54:a3:9f:db:
d6:41:56:18:3a:e0:ec:0a:bf:a5:f2:0e:7b:ea:32:
3b:64:ae:7a:98:21:b4:fd:9e:49:c1:d1:cb:11:f5:
ef:0e:d4:39:fd:8d:dd:22:73:1d:17:e0:aa:26:68:
19:d6:ad:53:48:ab:75:77:a1:44:87:bc:6f:62:44:
30:ae:82:2e:89:66:ab:1e:e0:30:b5:17:65:4b:0a:
e5:b8:00:62:39:36:1f:de:a3:2b:3c:4b:b2:e3:c9:
a1:23:df:2d:44:ca:08:71:81:dc:da:d8:ad:e3:58:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8F:25:A1:B9:21:71:F5:95:30:C1:46:AC:4F:9A:12:3A:33:A5:AF
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d0:24:5a:db:92:92:cd:88:78:38:2f:73:1c:7f:0f:75:6d:
e8:17:dd:68:e6:13:0d:cd:7b:b4:27:5e:b0:db:d4:b4:a3:8c:
8c:87:a6:77:eb:e2:a9:30:9b:d0:74:5a:68:30:6c:5a:65:5a:
d7:b9:a2:12:72:31:46:fe:ff:28:30:58:15:77:23:cf:91:9a:
eb:2e:e3:57:fd:9c:fe:3a:f8:66:46:c2:ca:e4:20:fc:e0:96:
7a:3d:28:8a:01:ea:2d:17:83:99:cc:31:f4:f6:85:db:1d:ec:
38:66:6a:29:c0:1a:bd:0c:ef:4d:d5:fa:01:36:f0:ca:cb:dd:
d1:00:65:94:58:11:09:e3:fd:e4:3d:9d:c6:82:e8:0b:7d:0a:
59:e7:ca:33:67:76:08:56:bd:a2:53:f7:95:ff:28:99:25:42:
e5:05:cb:66:df:1b:ff:e8:d6:8b:9d:0b:32:0f:b6:22:71:08:
ab:be:b9:1b:63:7c:a0:5b:51:39:69:b6:28:79:ab:a7:10:a9:
2d:6f:57:7f:4a:a6:8e:a7:67:1a:ad:26:65:a9:18:4b:f8:8b:
f1:1b:9f:c6:e7:61:34:9d:87:f9:27:c9:36:76:d5:82:4f:33:
8e:50:df:8c:8a:9d:14:cd:7b:1e:21:74:d3:88:fe:a5:a8:3a:
9d:de:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:09 2025 by rpki-client