Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
File: PP7M1r9kBrDPRPaCuTzYbjNGUko.mft (raw, json)
Hash identifier: bpOzTfhfeV1WAqu/8p7lquFiVPs5wTiIBNhsj1F9ZR4=
Subject key identifier: D3:E6:84:44:7B:BC:BD:BF:54:24:84:E9:CD:B0:E2:4E:5B:6B:C8:3D
Authority key identifier: 3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
Certificate issuer: /CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Certificate serial: 01984964F5617852C005F7EFE5703C13D36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
Manifest number: 1177
Signing time: Sun 27 Jul 2025 01:00:09 +0000
Manifest this update: Sun 27 Jul 2025 01:00:09 +0000
Manifest next update: Mon 28 Jul 2025 01:00:09 +0000
Files and hashes: 1: PP7M1r9kBrDPRPaCuTzYbjNGUko.crl (hash: G7l8YRLcaDNy5RJzDk+bkb7HNddX8O96I4sE/lI32Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f5:61:78:52:c0:05:f7:ef:e5:70:3c:13:d3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Validity
Not Before: Jul 27 01:00:09 2025 GMT
Not After : Jul 28 01:00:09 2025 GMT
Subject: CN=d3e684447bbcbdbf542484e9cdb0e24e5b6bc83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:82:17:2f:7d:74:d9:9b:c6:74:31:79:52:
88:d3:c5:06:e4:30:4d:cb:52:9c:3f:c3:03:2e:42:
50:cb:b1:ed:2b:b5:d7:5a:0d:78:4a:bb:77:ff:06:
72:11:0c:86:09:98:1a:8e:07:91:49:f5:20:7a:78:
b8:75:80:64:3d:31:ea:19:d5:92:47:e0:8f:14:7a:
4e:eb:c5:8b:04:e2:e9:4f:d1:0f:be:ef:65:ca:87:
3d:18:ce:bb:1f:f8:14:63:8c:b2:1f:de:4e:ca:cc:
af:38:de:d3:31:d7:33:ff:3e:87:b7:15:1b:ea:cc:
93:df:6f:1e:3e:53:7f:cf:20:f3:dd:0d:6f:3a:73:
b1:ad:26:8e:dc:00:55:e2:1b:8e:9b:b2:7e:66:79:
90:fb:ae:07:19:d4:f3:01:f6:a8:cf:71:2b:2b:ef:
4a:4d:cf:04:ee:9a:e2:01:0b:26:12:8a:bb:53:dc:
7b:c2:96:23:a1:ad:d9:ba:0d:1c:b7:46:e4:19:80:
2f:ac:b2:87:1f:ea:88:96:f4:66:c0:d3:15:20:fd:
35:6b:28:76:28:6b:8a:45:eb:db:b0:f9:9e:86:69:
4c:1b:85:bc:4c:64:02:b7:c7:70:ee:2d:15:20:53:
91:18:60:8d:ce:ff:d6:26:e9:c6:28:e3:9a:02:34:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E6:84:44:7B:BC:BD:BF:54:24:84:E9:CD:B0:E2:4E:5B:6B:C8:3D
X509v3 Authority Key Identifier:
keyid:3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:28:5a:5b:ee:74:ae:cc:a4:63:75:86:0a:f8:40:48:f1:c1:
01:c6:dc:10:a0:0e:d6:ff:42:92:23:b8:a3:0b:40:98:4f:75:
e5:83:b8:58:01:56:79:a1:95:e7:15:b0:7c:a4:7d:80:62:4a:
d7:d3:90:24:f6:c1:4a:1f:2a:01:bb:81:d7:54:86:ab:66:16:
a5:f7:6f:d1:61:f9:5a:e7:20:9b:94:41:e0:ab:a2:12:f1:28:
c8:ba:77:81:90:4e:54:fa:f4:0d:d9:22:3e:aa:21:41:86:f5:
ec:f1:d0:95:92:b4:6d:0f:57:18:70:91:d2:45:f6:41:19:71:
eb:29:a0:5b:68:05:02:27:9a:5b:42:2a:1e:b7:05:80:3f:ac:
81:f1:70:e0:8a:39:a1:71:71:12:2a:fa:34:9a:c9:46:de:77:
1b:71:a7:77:c7:b8:7c:03:43:34:ea:c3:32:92:ed:f9:c0:0d:
b2:c9:c3:d1:87:e2:31:13:a6:95:2b:29:30:94:15:9d:fb:e8:
e8:f5:1a:7c:c9:90:de:00:c7:32:39:11:04:7b:9f:44:62:a1:
e2:f8:53:6a:4b:36:49:3d:1e:da:a9:20:7f:a8:7f:84:cf:56:
73:a4:d8:7b:3f:fd:36:2d:e6:65:c9:0e:cd:4c:9c:e0:06:23:
f2:ef:67:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:40:26 2025 by rpki-client