Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
File: Pq9YPXwbe09XMQE8iymLpQVGTlI.mft (raw, json)
Hash identifier: 2t2CahxYKDC9WqJd5x2jX9ijepX0OTU8NGMXdelIx3w=
Subject key identifier: D8:F3:95:D2:47:7F:77:42:0E:11:68:1C:DB:6E:C4:AE:F7:84:1F:04
Authority key identifier: 3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
Certificate issuer: /CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Certificate serial: 019848C0BC314D5B9CE492CD374F9DED246C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
Manifest number: 121A
Signing time: Sat 26 Jul 2025 22:00:47 +0000
Manifest this update: Sat 26 Jul 2025 22:00:47 +0000
Manifest next update: Sun 27 Jul 2025 22:00:47 +0000
Files and hashes: 1: Pq9YPXwbe09XMQE8iymLpQVGTlI.crl (hash: aX+5vcjsoQLPRCQOa7Iy1PDCI5I5TxgW3s1ppqmIfY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:bc:31:4d:5b:9c:e4:92:cd:37:4f:9d:ed:24:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Validity
Not Before: Jul 26 22:00:47 2025 GMT
Not After : Jul 27 22:00:47 2025 GMT
Subject: CN=d8f395d2477f77420e11681cdb6ec4aef7841f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:e1:fb:32:03:36:e6:fe:05:99:74:c5:9e:
df:b1:e2:27:39:ed:95:ca:87:2d:b7:73:08:42:0c:
69:aa:ef:fc:76:89:b3:38:3c:09:fa:34:2d:6d:f2:
97:87:ae:39:6a:db:9d:bb:ab:bf:0a:b4:42:cc:97:
6f:ad:39:d6:10:6c:b4:e5:66:fe:73:36:ae:97:55:
05:06:9f:d4:0b:f9:7e:ee:a4:3f:4b:4b:e2:8f:f6:
cb:11:dc:f5:d4:64:87:2b:74:c1:2e:3e:8c:49:ef:
eb:84:5c:86:64:0e:e2:80:79:8e:df:cb:a1:62:6b:
81:f8:ad:93:24:1d:b6:e8:0b:ad:10:36:df:86:66:
a3:fc:99:81:02:9b:4a:8a:4b:0e:ff:ca:8d:fe:23:
cc:77:7e:31:c3:ce:48:a4:b7:da:4a:e0:5d:d9:2d:
d1:9a:b7:c3:a9:81:e4:29:23:e2:2f:d8:88:66:99:
4f:3e:73:74:0a:e0:78:ed:a6:22:67:fb:c8:71:cc:
29:a7:4e:8b:69:0e:48:da:7c:14:43:8b:d8:d2:69:
38:03:0f:e6:b9:ab:e9:2b:07:95:16:c5:56:a8:d3:
bf:01:88:e9:79:5e:7d:4f:bb:d9:21:f0:53:e4:2b:
4e:72:19:3c:cd:99:2c:47:0f:20:79:77:41:da:ef:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F3:95:D2:47:7F:77:42:0E:11:68:1C:DB:6E:C4:AE:F7:84:1F:04
X509v3 Authority Key Identifier:
keyid:3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fa:4e:7a:ec:b7:0b:8c:3a:50:02:dd:e4:4f:2f:35:c0:b0:
5d:67:5a:73:b9:37:68:76:ac:1d:5f:5b:76:98:4d:25:67:1b:
6d:8b:b9:65:0b:88:36:23:a3:f8:db:ad:9a:43:ba:f7:7c:84:
9b:57:e4:26:34:43:39:5d:cb:d2:74:e7:eb:f7:f5:13:6f:f5:
fe:82:9f:9d:cc:1a:bb:93:ed:af:04:44:d9:de:73:98:7b:58:
18:a6:38:09:89:d2:84:6d:a2:14:a2:44:eb:2a:1b:0b:02:ba:
b2:e9:f7:3e:1e:a2:2b:62:0c:33:e3:ba:c1:c6:23:69:93:26:
ac:23:43:b8:86:04:3e:7c:7b:3a:e3:cd:4c:25:51:3e:be:31:
06:40:16:ef:e5:87:70:cf:54:08:5d:72:3f:26:b4:fd:b9:42:
d8:d0:22:17:6e:05:de:cc:30:50:26:23:96:4d:b9:63:19:b5:
54:48:81:60:df:65:6a:78:d9:e2:c3:f8:61:4a:02:5c:3b:ae:
ad:5f:82:14:37:b5:9d:75:dc:63:3d:ed:54:d7:c8:1f:3a:2e:
b1:d6:4b:d9:49:be:b4:4c:cc:ae:06:57:f8:99:c2:22:c2:f3:
b1:67:7e:f6:50:3c:fc:b1:73:63:b2:43:0c:bb:96:be:8d:1a:
e7:9c:c9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:53 2025 by rpki-client