Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json)
Hash identifier: oIKLkrq+wwvX76vYKvYYG9BzAdLg13tH3a21o1cvj1U=
Subject key identifier: FF:75:61:41:32:A0:1E:15:B4:41:5C:28:37:BD:55:03:03:50:DB:8B
Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Certificate serial: 0197B77C3C32CBF1C4E39864536CC7595165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
Manifest number: 069A
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: Fo3Dn7pFVQH3LRoEVV3cOnLa5En3CRfix68l1yN2/sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3c:32:cb:f1:c4:e3:98:64:53:6c:c7:59:51:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=ff75614132a01e15b4415c2837bd55030350db8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:ca:a8:7c:b0:75:3a:66:76:c0:4e:2f:88:
a4:30:71:35:5a:2a:eb:7b:c4:41:e4:df:dc:36:c5:
58:2b:df:55:ad:4e:1a:59:f5:e6:0d:56:71:55:9d:
91:e8:2c:1b:e1:cf:da:44:ff:26:b3:a9:b4:f4:99:
9f:1a:a5:60:2f:e0:ba:9e:2e:aa:cb:f9:35:8c:f8:
03:7f:63:47:5d:c1:38:cf:39:0d:12:99:d3:92:07:
48:bf:06:3c:c7:ef:8c:92:ee:07:97:62:38:a5:b5:
c4:95:6a:ac:ab:ea:c5:89:28:0a:59:51:b4:15:67:
0f:37:d9:f9:92:76:0d:2f:09:c4:d6:12:17:b8:06:
21:bc:56:d6:20:79:fe:60:ef:40:80:25:7c:ac:e6:
b7:75:21:bd:31:5a:f2:8d:76:41:95:f4:23:23:c1:
96:d9:df:cc:2d:f8:4c:e2:e0:f1:9d:8c:8f:86:94:
5f:34:bd:79:ed:1a:2e:da:d9:64:80:d6:b6:15:fc:
1b:b9:10:9f:a6:66:8b:c8:95:14:ee:fe:af:e9:ce:
fd:71:f3:b3:f7:59:c5:77:e7:5c:68:59:3c:58:f5:
2d:58:5a:11:91:c9:96:23:ef:41:a8:79:15:29:01:
6e:03:2c:cd:31:7f:a6:88:d5:fe:d4:12:1d:12:05:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:61:41:32:A0:1E:15:B4:41:5C:28:37:BD:55:03:03:50:DB:8B
X509v3 Authority Key Identifier:
keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3d:b9:ba:a1:c5:1b:98:ac:f4:0e:c6:67:34:f7:90:cd:9b:
04:1b:bc:84:2c:e0:66:d5:05:a8:e5:43:9d:75:bf:ec:b7:70:
22:99:4b:79:e5:95:43:44:80:e5:3c:4e:a1:92:6b:65:7d:1b:
6d:04:90:b5:a1:1a:da:e4:68:a8:a9:cb:89:6a:76:de:6f:98:
4f:f6:95:bd:89:9f:d0:57:c7:91:8c:07:38:1b:75:a1:8f:ea:
95:06:81:2f:79:db:e9:ed:07:94:2e:6b:46:fa:b1:f7:c1:24:
eb:c3:0b:7c:88:e3:b6:89:cf:d0:b4:b9:29:f1:31:68:0f:77:
63:3d:ba:19:c4:0f:80:21:23:68:45:b2:62:f2:79:8f:20:b4:
4d:5e:a4:e8:a5:b8:4b:39:e7:ff:93:04:24:22:47:f1:22:9c:
12:46:46:11:9c:49:c8:0c:59:9e:e4:af:f3:cd:76:87:37:5c:
5b:13:88:3a:fe:c8:e0:0a:6e:ad:39:16:e9:e7:55:d9:6d:a2:
13:94:95:23:a3:a5:7c:9d:9d:7c:b8:e7:7a:40:37:be:90:b5:
d0:5b:06:af:63:5b:03:79:d2:20:4e:f7:5c:b9:54:c6:27:93:
74:e6:24:06:32:b9:00:12:08:0a:ec:cd:c5:2b:6e:9b:06:d1:
ad:df:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:15 2025 by rpki-client