Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
File: Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json)
Hash identifier: 3P3/e/yK5hdE0A6ELru1HLSxAgAnOFWOJ++/b82LSgA=
Subject key identifier: 3C:BB:7F:A8:8A:38:56:2E:5C:7E:B4:8D:57:38:15:62:3E:57:77:0E
Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Certificate serial: 019849D3AB7AEBC4EB0A8A32A08D30D54F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 03:01:05 +0000
Manifest this update: Sun 27 Jul 2025 03:01:05 +0000
Manifest next update: Mon 28 Jul 2025 03:01:05 +0000
Files and hashes: 1: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: r9b3Oln/QczgavY+EZA98B5r9RPy3rEw1YqJLp4sWOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:ab:7a:eb:c4:eb:0a:8a:32:a0:8d:30:d5:4f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Validity
Not Before: Jul 27 03:01:05 2025 GMT
Not After : Jul 28 03:01:05 2025 GMT
Subject: CN=3cbb7fa88a38562e5c7eb48d573815623e57770e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:20:b7:f2:ab:91:0b:6c:a7:d5:f9:f8:b0:
f8:97:35:5e:b7:d6:d2:0b:b3:7a:45:aa:41:67:f3:
28:9b:93:2a:f9:cf:c6:2f:f9:e8:94:bf:10:e2:b7:
f4:b0:8b:ab:59:37:2e:4d:c9:f4:7a:fe:8e:44:46:
26:9d:c0:29:c4:e5:49:e7:2f:74:ff:7a:90:0a:ad:
a4:55:8f:fc:96:2c:95:69:55:dc:e6:79:84:df:2b:
31:98:41:5a:36:14:79:81:34:6a:3d:f8:9b:68:62:
fc:a6:e4:79:e3:a7:cd:67:f0:02:a5:8d:82:4b:42:
ea:62:97:2b:d4:55:ab:8d:63:10:31:12:f3:11:c1:
7b:21:0f:2e:c4:7d:14:40:8e:a5:7e:3d:bb:fc:7d:
24:6f:73:97:5e:40:85:53:5e:0b:17:15:d8:97:6f:
09:b1:ca:a3:09:b4:41:5b:26:b4:7b:b0:fb:0f:e5:
d2:53:6f:b6:7e:db:b7:41:8e:50:2a:80:5f:27:49:
4d:54:83:b2:22:05:da:e1:78:fa:0c:3b:52:0f:99:
45:da:b1:88:5a:8d:b4:6a:12:bc:18:ac:77:fa:d0:
f7:c8:ec:3d:a7:41:de:df:af:c5:bc:f5:ed:9c:41:
f3:1c:f8:17:df:04:cb:85:d7:e7:c8:5a:2d:64:cc:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BB:7F:A8:8A:38:56:2E:5C:7E:B4:8D:57:38:15:62:3E:57:77:0E
X509v3 Authority Key Identifier:
keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b5:52:8a:14:06:12:f8:93:28:42:7e:43:87:fd:70:f6:d5:
bb:a6:45:ee:f3:ea:28:dd:b9:c5:35:a5:f3:f6:3c:78:7e:53:
50:8f:f9:fb:74:a0:b4:ee:da:46:37:0d:41:c5:f7:61:1e:c4:
2a:b8:d7:53:01:54:9b:15:7f:51:69:a8:90:ba:42:82:ae:83:
1d:0f:e5:1b:54:0b:7b:3c:51:55:69:17:af:02:2f:2c:be:bd:
23:c4:04:6c:da:4a:4a:cc:99:f5:94:b0:ee:34:4e:0e:5b:65:
81:a0:a6:b3:d8:06:60:5b:51:18:99:c0:1b:fa:fb:a8:f8:5d:
b9:87:38:cc:f9:83:a0:ed:d4:6f:53:66:46:a0:74:3c:a3:85:
46:28:be:30:cc:1f:b0:cd:88:53:90:b8:5e:6c:5c:20:2c:43:
bf:03:f7:29:6b:81:0b:3a:15:27:91:a5:2b:92:97:21:46:01:
59:bb:d2:25:1a:c1:cb:7e:2f:e7:ab:38:28:62:e3:0e:32:c2:
ae:12:4c:17:56:42:63:f9:2b:bd:56:b5:6a:38:ea:78:fc:10:
89:7e:17:ca:b8:fc:36:84:53:42:86:62:ce:78:98:10:16:8b:
d8:c7:07:db:7b:e8:71:41:6d:ae:13:b4:87:33:3b:76:ae:5f:
3f:fb:4b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:48:20 2025 by rpki-client