Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
File: Pq9YPXwbe09XMQE8iymLpQVGTlI.mft (raw, json)
Hash identifier: QcsA4/rjoWtPp20Ncfpvq1DuLhmo8b7fwhkKVoT6LXQ=
Subject key identifier: 37:5C:AE:B8:3B:0B:E4:80:21:4C:A5:84:8F:07:70:0A:93:C8:53:C3
Authority key identifier: 3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
Certificate issuer: /CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Certificate serial: 0197B5FC59151D0EE3F079E098AE58482097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
Manifest number: 11CE
Signing time: Sat 28 Jun 2025 10:01:43 +0000
Manifest this update: Sat 28 Jun 2025 10:01:43 +0000
Manifest next update: Sun 29 Jun 2025 10:01:43 +0000
Files and hashes: 1: Pq9YPXwbe09XMQE8iymLpQVGTlI.crl (hash: LHJyqrybaWus70WCplxR0xgPRqqvlcLz4sveJNhbSbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:59:15:1d:0e:e3:f0:79:e0:98:ae:58:48:20:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Validity
Not Before: Jun 28 10:01:43 2025 GMT
Not After : Jun 29 10:01:43 2025 GMT
Subject: CN=375caeb83b0be480214ca5848f07700a93c853c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:48:a3:96:a1:df:5c:36:12:a8:4c:a8:88:
79:af:f6:ae:6c:68:8f:17:16:20:92:48:0a:0d:6d:
51:f9:b1:aa:3a:42:38:1d:eb:3a:76:45:12:49:c0:
cc:5a:b3:97:7e:b6:a6:51:4d:ae:28:2e:37:91:87:
a3:83:37:db:3f:73:fc:a6:e9:fa:5d:de:9a:d4:b8:
4d:0a:43:64:fb:60:b9:86:13:bb:44:1e:63:b2:a3:
e1:7c:93:96:d6:85:a0:b6:53:84:6f:01:f3:89:f3:
2d:9e:8d:22:43:24:37:40:b9:a8:fb:6e:81:3c:cc:
fb:15:d5:e4:b5:09:2d:91:85:37:3e:8b:24:bd:1d:
a7:1b:46:2d:d0:55:1e:f2:ae:04:c6:ce:84:38:f1:
14:06:1f:de:7b:c7:b9:40:05:de:d3:cf:01:9e:c1:
90:ca:04:da:f9:04:3c:30:8d:e4:00:8c:7f:c6:e5:
28:c2:fb:e3:ed:6a:76:c4:cb:a4:dd:d6:87:d4:a1:
61:a2:ce:ee:a1:8b:d1:ae:4d:64:e9:c5:12:67:80:
40:aa:d4:03:46:5d:fe:4b:86:2a:9d:07:8f:45:de:
de:f3:2b:7c:3c:28:c4:ed:a3:b6:a4:e9:52:94:a2:
02:19:94:c4:ae:52:4c:3a:6c:ed:51:04:6f:4d:97:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:AE:B8:3B:0B:E4:80:21:4C:A5:84:8F:07:70:0A:93:C8:53:C3
X509v3 Authority Key Identifier:
keyid:3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:85:02:9b:ff:aa:20:d1:3f:a9:59:cb:0e:f8:25:08:5b:16:
a4:07:e6:24:61:dc:22:a4:a1:bb:c1:67:f7:eb:5e:53:8e:ac:
7b:f8:cf:d1:8e:35:d3:7a:38:d9:90:d2:a9:35:34:e7:e9:b0:
fd:9d:86:d2:b8:fb:19:b2:97:0b:93:63:4d:96:9f:93:eb:4f:
a0:5f:a7:c8:ac:97:ac:6e:cc:b4:eb:73:6d:01:b7:ce:b9:52:
6b:5a:21:9c:50:b3:6b:ad:5d:ef:2e:91:3f:bf:2c:fe:30:03:
14:c6:82:83:03:63:84:57:b2:90:fc:52:26:25:93:4c:f0:cc:
ef:12:f5:cd:bd:51:35:88:a4:89:3f:f6:d0:e0:a4:35:51:52:
96:48:14:31:75:a4:a7:63:d8:f0:84:ce:fc:a7:ab:b8:61:9a:
9b:4b:1b:6f:7d:36:7f:f6:05:f8:4e:f8:11:71:09:af:ed:a0:
2e:cc:ee:2f:0e:af:16:98:c6:46:c3:a1:04:97:4f:ab:cb:6e:
8a:bf:a3:65:2e:0d:f8:21:60:f6:c8:e0:a0:c8:41:42:ef:10:
fa:ba:00:d5:53:22:fe:d3:1f:d3:47:c8:9a:57:38:6b:20:49:
06:eb:6b:ae:e8:86:15:3b:b9:b7:f9:0d:b6:d5:50:03:8e:66:
82:5f:8a:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/FkVHQ7j8HngmK5YSCCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYWY1ODNkN2MxYjdiNGY1NzMxMDEzYzhiMjk4YmE1MDU0
NjRlNTIwHhcNMjUwNjI4MTAwMTQzWhcNMjUwNjI5MTAwMTQzWjAzMTEwLwYDVQQD
EygzNzVjYWViODNiMGJlNDgwMjE0Y2E1ODQ4ZjA3NzAwYTkzYzg1M2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/dIo5ah31w2EqhMqIh5r/aubGiP
FxYgkkgKDW1R+bGqOkI4Hes6dkUSScDMWrOXframUU2uKC43kYejgzfbP3P8pun6
Xd6a1LhNCkNk+2C5hhO7RB5jsqPhfJOW1oWgtlOEbwHzifMtno0iQyQ3QLmo+26B
PMz7FdXktQktkYU3PoskvR2nG0Yt0FUe8q4Exs6EOPEUBh/ee8e5QAXe088BnsGQ
ygTa+QQ8MI3kAIx/xuUowvvj7Wp2xMuk3daH1KFhos7uoYvRrk1k6cUSZ4BAqtQD
Rl3+S4YqnQePRd7e8yt8PCjE7aO2pOlSlKICGZTErlJMOmztUQRvTZd+HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdcrrg7C+SAIUylhI8HcAqTyFPDMB8GA1UdIwQY
MBaAFD6vWD18G3tPVzEBPIspi6UFRk5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHE5WVBYd2JlMDlYTVFFOGl5bUxwUVZHVGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kOThlODYtZTQxYy00NWUxLWJiZTct
OGUxOWM0ZGE4Nzk4LzEvUHE5WVBYd2JlMDlYTVFFOGl5bUxwUVZHVGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kOThlODYtZTQxYy00NWUxLWJiZTctOGUxOWM0ZGE4Nzk4
LzEvUHE5WVBYd2JlMDlYTVFFOGl5bUxwUVZHVGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYUCm/+q
INE/qVnLDvglCFsWpAfmJGHcIqShu8Fn9+teU46se/jP0Y4103o42ZDSqTU05+mw
/Z2G0rj7GbKXC5NjTZafk+tPoF+nyKyXrG7MtOtzbQG3zrlSa1ohnFCza61d7y6R
P78s/jADFMaCgwNjhFeykPxSJiWTTPDM7xL1zb1RNYikiT/20OCkNVFSlkgUMXWk
p2PY8ITO/KeruGGam0sbb302f/YF+E74EXEJr+2gLszuLw6vFpjGRsOhBJdPq8tu
ir+jZS4N+CFg9sjgoMhBQu8Q+roA1VMi/tMf00fImlc4ayBJButrruiGFTu5t/kN
ttVQA45mgl+KZg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:37 2025 by rpki-client