Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
File: PEHqRBeKcCxQcAACPRSp-cRyYOY.mft (raw, json)
Hash identifier: k7CyFJR1+dw/quAgmllp+t2oVOnfi0s/P//UsYT9yVk=
Subject key identifier: 05:56:AE:63:21:2C:5A:44:06:52:C5:B7:2B:67:57:14:10:E5:81:80
Authority key identifier: 3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
Certificate issuer: /CN=3c41ea44178a702c507000023d14a9f9c47260e6
Certificate serial: 01984589D3BC9DE52210A701D586D329E168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
Manifest number: 1003
Signing time: Sat 26 Jul 2025 07:01:57 +0000
Manifest this update: Sat 26 Jul 2025 07:01:57 +0000
Manifest next update: Sun 27 Jul 2025 07:01:57 +0000
Files and hashes: 1: PEHqRBeKcCxQcAACPRSp-cRyYOY.crl (hash: Pz4iaHMMI4g4lI+ubOFmFW9AkPWrBG6JpFP/ILCBFMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:d3:bc:9d:e5:22:10:a7:01:d5:86:d3:29:e1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c41ea44178a702c507000023d14a9f9c47260e6
Validity
Not Before: Jul 26 07:01:57 2025 GMT
Not After : Jul 27 07:01:57 2025 GMT
Subject: CN=0556ae63212c5a440652c5b72b67571410e58180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:04:fd:73:59:41:85:35:c9:a5:05:b8:13:
51:8b:c4:3a:54:69:47:ff:56:54:95:f4:aa:47:07:
81:65:42:8d:7e:ba:d9:02:5c:3d:bd:25:8f:36:3f:
2c:5b:3d:3f:7f:16:8c:bd:15:2b:2b:45:7a:8b:70:
cc:59:62:e0:45:8a:e7:da:46:05:15:6e:66:94:af:
10:26:ba:10:64:46:1a:04:f8:ad:d4:7a:81:66:a4:
30:18:63:11:a1:bb:58:6b:93:cd:2d:f4:07:db:27:
ec:b5:eb:d2:a2:c6:22:9f:39:9a:45:f3:42:cd:f0:
9e:6a:98:09:34:af:c3:55:94:46:71:5c:d5:fa:ca:
45:b4:be:e4:8b:be:a2:b1:14:75:71:cd:e4:41:c2:
38:60:f8:8c:91:b4:3b:8e:1a:44:18:b5:db:63:02:
5e:7c:e3:ae:50:53:15:be:9c:f1:b9:a5:ce:6a:92:
6a:24:e5:e1:66:fe:9d:85:69:bc:d8:96:8a:66:62:
28:71:84:a9:5c:a5:be:34:2f:df:e0:35:7e:41:94:
94:82:29:24:55:70:ad:f3:64:3a:8a:0b:bb:52:e7:
dc:a8:7a:45:a5:50:55:f8:74:6c:bf:52:26:ea:7a:
5d:7c:8b:f6:eb:31:28:f4:86:76:da:e2:d6:6b:e5:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:56:AE:63:21:2C:5A:44:06:52:C5:B7:2B:67:57:14:10:E5:81:80
X509v3 Authority Key Identifier:
keyid:3C:41:EA:44:17:8A:70:2C:50:70:00:02:3D:14:A9:F9:C4:72:60:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEHqRBeKcCxQcAACPRSp-cRyYOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/144941-1354-4869-aac2-747251e49242/1/PEHqRBeKcCxQcAACPRSp-cRyYOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:77:fe:80:c8:98:bb:42:e3:8c:be:25:46:8d:4f:df:73:0d:
c8:a9:6e:ca:63:f0:0a:16:09:ef:1d:22:1b:0b:fe:e3:c0:43:
bc:df:bf:52:3b:7e:7b:14:91:10:78:8d:db:94:0f:90:a6:4f:
aa:ab:08:4f:b2:d8:ea:1d:78:d0:ec:d3:c5:40:b4:4a:7b:93:
26:83:9b:ad:16:4c:e9:09:b5:39:11:2e:24:00:32:5b:1c:4f:
87:6d:c2:54:26:b5:f8:4c:30:9e:cd:65:70:48:6e:6c:e2:c5:
4f:03:b6:d1:86:c4:73:03:2c:e1:8a:9e:8a:7d:a0:2e:9e:0f:
5d:38:11:8e:99:13:ce:26:20:b4:5c:e2:3c:5a:b0:d3:45:78:
51:ef:76:20:1f:56:ce:e8:e6:4a:9f:66:51:d4:7e:c3:56:c1:
6d:74:ff:0f:97:74:b9:20:ec:8b:83:64:0e:3d:23:e3:6f:65:
71:33:1f:48:3c:aa:f4:6f:b0:2b:b0:d8:6a:df:6f:17:f4:65:
61:d6:d8:22:a5:d2:45:0f:1b:b0:5f:d5:66:0d:9c:39:99:63:
e4:9f:e4:76:c9:f2:3d:2f:0f:9e:35:b9:e3:2b:e0:c5:a2:eb:
3d:0f:e2:03:7e:67:ce:82:3a:c3:c3:b8:8b:92:e8:48:7a:66:
c6:fa:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:38:10 2025 by rpki-client