Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
File: Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json)
Hash identifier: XS3e9RxZDc9hB+wnv1i3Cmks2vjBPQWaOKaaIWXhrOw=
Subject key identifier: 37:93:71:B6:78:1E:8D:17:C3:A3:B4:A5:3D:93:E4:51:A4:37:73:1B
Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
Certificate issuer: /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Certificate serial: 019848531226AD94242B2BCDFB5F50A987DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 20:01:00 +0000
Manifest this update: Sat 26 Jul 2025 20:01:00 +0000
Manifest next update: Sun 27 Jul 2025 20:01:00 +0000
Files and hashes: 1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: nYSs5f2gDnwDF4wUPfHK8YA/sa9IfJQ0snlCo66IcYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:12:26:ad:94:24:2b:2b:cd:fb:5f:50:a9:87:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Validity
Not Before: Jul 26 20:01:00 2025 GMT
Not After : Jul 27 20:01:00 2025 GMT
Subject: CN=379371b6781e8d17c3a3b4a53d93e451a437731b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9b:b0:ca:1f:0c:b1:af:6e:fe:00:ba:40:02:
2a:da:b3:36:c9:b9:b3:bd:b9:58:4e:bc:12:a5:9b:
a5:53:95:cc:c0:1b:33:fe:ed:86:d4:f2:79:0a:6c:
bf:7c:5c:52:b1:3b:aa:42:72:9a:5c:f4:88:3b:d5:
28:4e:77:d7:fc:91:da:67:4f:40:c3:fe:b2:48:9e:
1d:a7:d6:96:80:ca:0f:89:ac:fd:4b:31:ad:b2:3d:
e6:64:32:1b:58:f4:8b:39:3a:73:f9:24:f4:87:c5:
f0:8c:55:72:08:f2:36:3c:c4:12:52:7e:75:af:c0:
a5:a2:a2:cc:0e:35:13:6c:a5:37:b1:9b:d3:ce:4f:
c6:cb:7a:6e:8d:88:b7:26:47:7c:f1:fb:d4:7a:27:
c7:95:43:ad:93:34:43:1a:8f:18:53:39:aa:d3:05:
c4:06:c1:73:73:7a:fb:6d:c1:00:5e:04:7c:12:4b:
19:0d:f6:a7:a0:bd:5b:ee:f9:65:b8:e5:2a:5d:5c:
f2:08:e4:74:94:65:97:72:97:b3:3e:25:9a:dc:cf:
1f:aa:5a:3f:b9:56:fc:bd:7b:64:bd:f2:44:cd:9d:
3c:40:cb:ad:6e:a2:3e:3f:ec:fe:f7:34:bc:42:13:
88:8b:a4:5a:72:75:3c:6b:08:44:4a:2d:9c:e4:cf:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:93:71:B6:78:1E:8D:17:C3:A3:B4:A5:3D:93:E4:51:A4:37:73:1B
X509v3 Authority Key Identifier:
keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:dc:64:05:2c:b4:5c:11:a3:e2:bd:cb:18:91:23:33:10:72:
50:41:0b:b6:da:1b:2c:9b:ae:c4:92:c2:fa:54:92:91:fe:0f:
0a:64:07:ed:e1:a2:26:fc:41:70:25:f9:4b:de:fb:8f:b2:2b:
3d:9f:11:c5:ee:af:19:53:bd:75:29:67:0e:dd:7f:54:06:d6:
d3:7f:49:de:13:e0:ae:69:7f:f2:f9:30:e8:0a:c9:8f:92:c6:
a7:ca:97:fd:97:b4:ac:d4:08:30:e4:ee:15:05:90:b8:b1:94:
62:6f:27:46:15:1f:74:56:71:bd:99:e4:41:79:e8:32:8e:9a:
a8:8b:5e:44:30:5b:70:f9:39:0a:9f:e9:d2:0a:19:ce:55:8f:
b1:0b:93:44:0b:45:58:9b:b8:e4:20:c0:4b:12:04:4d:f0:bd:
7b:1e:12:77:4b:3a:ec:c0:4c:6b:62:b1:c8:60:aa:4d:86:79:
21:15:fc:fd:24:49:35:d6:b0:19:33:7b:00:f8:57:bf:f1:75:
4e:b7:b2:00:46:3e:e8:aa:88:30:54:b6:b6:bd:d2:68:bd:40:
65:3e:ef:63:82:18:5b:c5:d0:15:4f:ec:ca:57:40:ac:39:56:
17:10:86:3b:64:2b:04:7d:9c:2d:90:8f:7f:68:c1:d3:34:db:
24:d8:f1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:28 2025 by rpki-client