Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
File: PRf0av89iyHwD-6PY16uNKf0pNc.mft (raw, json)
Hash identifier: 5CH6KIf2K7SNWtnWczAWA/Ht659tT4FhOlP63PZC+xs=
Subject key identifier: F9:6D:FF:70:70:9B:97:B5:C0:20:53:A9:F4:10:91:00:5E:3F:F5:D7
Authority key identifier: 3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
Certificate issuer: /CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Certificate serial: 0197B88EE995FA810BC94352C6D4E76CF417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
Manifest number: 0AA4
Signing time: Sat 28 Jun 2025 22:01:03 +0000
Manifest this update: Sat 28 Jun 2025 22:01:03 +0000
Manifest next update: Sun 29 Jun 2025 22:01:03 +0000
Files and hashes: 1: PRf0av89iyHwD-6PY16uNKf0pNc.crl (hash: gQkvd0OTWEja9bv0TAS/lvL4DV7ae8zowfE/vEqHU5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:e9:95:fa:81:0b:c9:43:52:c6:d4:e7:6c:f4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Validity
Not Before: Jun 28 22:01:03 2025 GMT
Not After : Jun 29 22:01:03 2025 GMT
Subject: CN=f96dff70709b97b5c02053a9f41091005e3ff5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:44:33:c3:48:61:98:f7:02:35:72:fd:c2:
26:8e:43:08:7d:1e:1e:3c:0b:60:b6:ca:c4:39:5b:
59:56:54:21:4e:e9:a0:81:ac:5a:dc:28:02:bd:c4:
9a:ad:5b:91:b8:db:30:7d:36:42:3e:0d:c6:17:26:
15:a1:90:7f:af:88:3e:90:de:8f:ed:67:0b:31:e3:
53:2b:4a:bc:5f:86:0f:15:ec:d5:b1:f0:7f:ff:0a:
24:be:ec:72:3e:61:94:5a:a0:db:0e:cb:3d:a8:78:
87:b0:48:8a:02:f3:4b:ff:65:60:db:69:8a:09:a5:
ad:2f:9e:6d:dd:a2:11:18:63:63:7c:67:09:c0:92:
13:85:c2:63:90:35:bc:45:1e:3b:1a:ad:3a:8d:f2:
f5:00:0a:70:f0:f1:83:fb:90:77:6e:9c:68:43:d8:
dd:49:ea:f1:4f:85:93:e8:d3:b4:ea:24:bd:23:fd:
a3:3c:8a:38:59:9d:78:c1:e0:fc:47:bf:3b:85:9b:
ae:2d:58:32:aa:ae:50:e3:27:94:8d:7c:4d:4c:b5:
b9:2b:86:0d:5e:d6:d4:d7:58:e8:4e:11:dd:50:30:
2f:c8:27:c3:6e:ce:ae:c4:c3:61:77:d9:77:f8:ed:
2d:3f:8f:9a:ab:49:06:dc:99:6c:9b:69:23:d9:58:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6D:FF:70:70:9B:97:B5:C0:20:53:A9:F4:10:91:00:5E:3F:F5:D7
X509v3 Authority Key Identifier:
keyid:3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:06:09:9b:6f:09:30:23:4f:12:d7:a4:fa:96:c8:42:98:b9:
3c:a9:8b:a2:21:9f:88:58:5a:95:88:e3:33:6e:2c:c1:86:3a:
2c:ac:a3:cc:0f:08:0b:0c:2b:9a:0a:80:13:43:5b:52:f7:91:
06:19:f3:36:73:ae:41:24:b9:ac:4b:a5:55:a3:3c:bb:2d:a9:
37:e4:9d:cb:41:9a:a4:97:8d:36:c5:ba:c8:a5:77:69:ce:22:
4d:8c:f4:56:0e:a6:cf:f5:2f:37:68:e8:f2:a8:b5:29:17:ec:
cc:23:5b:c7:d6:dc:b3:ab:e5:24:b2:2d:19:15:2c:67:47:1b:
56:f7:bb:f0:29:4e:ab:b9:56:99:56:10:4a:c8:4b:7d:8b:c7:
34:da:82:d4:2c:d2:8e:ec:89:5b:2d:b9:a3:4c:8a:7a:9e:8a:
be:25:11:df:4f:4e:f2:ad:96:ac:b7:d4:ec:5a:87:20:4d:0f:
18:fc:b4:c0:2d:a8:90:54:f2:7e:17:0f:87:44:44:e4:74:78:
37:a4:db:07:1a:ea:91:da:67:1f:bc:ef:d7:40:c5:2e:4a:54:
6f:80:64:3c:27:76:78:cd:8a:01:29:4e:20:a8:cb:18:8a:da:
d8:db:88:8a:e4:52:9e:cd:a1:19:bc:c0:60:7d:ba:97:49:87:
8c:d1:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:16 2025 by rpki-client