
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json)
Hash identifier: XrkdenyBMORdw+NBAKqNHck3sTdHzRchUYhOhVoGcCY=
Subject key identifier: 8B:F3:E8:6D:EB:14:29:CA:E9:D7:B1:04:EE:D2:58:B0:5C:27:52:F0
Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Certificate serial: 0196C9F275F89C5BD8E0A2551C2A7588EB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
Manifest number: 061F
Signing time: Tue 13 May 2025 14:00:32 +0000
Manifest this update: Tue 13 May 2025 14:00:32 +0000
Manifest next update: Wed 14 May 2025 14:00:32 +0000
Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: /Umx18IvUVnI00k3wBGZG0krhiBr79l6rpw3QGFkLyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:75:f8:9c:5b:d8:e0:a2:55:1c:2a:75:88:eb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Validity
Not Before: May 13 14:00:32 2025 GMT
Not After : May 14 14:00:32 2025 GMT
Subject: CN=8bf3e86deb1429cae9d7b104eed258b05c2752f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:f9:8e:65:13:26:cd:e1:45:7a:4e:06:d3:
c4:50:64:c7:38:93:0a:a5:d8:1b:e7:9b:c0:11:07:
59:79:56:91:e8:06:6d:b5:38:39:39:e5:dc:6f:f6:
13:b2:ae:ae:e7:7b:0d:09:03:56:15:6d:bf:34:2c:
dc:d7:39:48:3e:61:c0:b3:65:c7:70:9f:6d:a3:4e:
c4:7a:1a:62:3c:fb:3f:00:30:a0:8d:d5:9c:44:a7:
e7:f3:0f:da:13:a9:66:f0:4b:04:26:88:65:72:e4:
01:ce:ff:e3:60:83:76:ef:ae:c0:ae:5f:d3:49:e7:
7b:17:9b:1b:5c:90:f9:e2:e5:26:74:3f:aa:e9:33:
6d:b0:8e:07:9c:0d:70:32:3c:2c:7d:c1:9a:75:54:
74:bd:a4:c9:f7:e2:de:2c:0a:a4:ef:f4:6d:a1:92:
bc:88:d9:8b:98:4e:4a:ec:92:03:73:56:60:83:e2:
fc:f0:7e:88:7c:33:17:c1:47:64:52:ce:9d:fb:94:
d6:da:2c:b0:f5:52:61:6c:da:db:41:d0:27:c6:0c:
b1:0f:ff:7f:0a:27:b5:70:0a:bd:6c:74:5e:45:e4:
63:db:18:49:2c:45:43:f6:aa:a2:dc:dc:6a:e1:dd:
6c:d0:47:e1:8d:b9:21:66:ad:66:8c:cd:33:87:2a:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F3:E8:6D:EB:14:29:CA:E9:D7:B1:04:EE:D2:58:B0:5C:27:52:F0
X509v3 Authority Key Identifier:
keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fa:a6:59:a4:b6:e0:02:da:2d:cd:5e:1a:32:79:06:2b:0b:
8f:02:d0:36:1c:2f:80:b9:04:32:fa:df:af:c8:a4:bc:f6:af:
cc:ff:29:db:8f:e9:9f:07:ab:27:d6:8f:e8:bf:d8:ef:b7:e3:
0c:3e:39:dc:b2:ab:77:c1:7a:3c:b2:05:f0:28:87:48:e3:b2:
bd:92:1b:a1:ff:30:fc:da:09:0d:36:64:bb:93:95:1e:b1:b4:
19:32:f8:6b:fe:b0:ea:a7:2c:81:fa:49:16:44:d0:28:47:0f:
51:00:d5:5e:6c:b7:a6:48:c8:2d:e9:25:4f:c1:dd:ee:32:93:
99:bd:99:f9:29:4a:25:e6:62:eb:20:96:4d:6f:46:b7:75:bb:
4f:0b:42:fa:48:11:cd:eb:b4:e4:36:9f:35:87:87:fa:24:92:
94:48:73:2c:cb:03:80:3a:3f:df:06:d0:40:9e:68:04:8f:8e:
94:79:eb:48:b7:bb:8f:f4:18:10:cf:12:13:e4:12:ee:aa:5b:
14:f8:2e:98:94:f6:0c:54:66:06:ee:09:cf:06:a1:8d:c9:41:
43:d9:3f:89:33:cb:36:5e:ba:dd:e1:08:38:83:83:f3:99:c5:
90:38:bc:34:03:c5:59:3a:39:7c:dd:3a:8f:b7:34:b4:5b:bb:
88:19:13:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:28:22 2025 by rpki-client