Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: iGxU4orgsgO90+JDZ/WC3FlSpFndXNxwcGOloH0S4Kw=
Subject key identifier: 3F:9A:54:C2:2F:16:3D:B0:66:54:2E:EE:49:26:ED:1B:3D:71:9A:36
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 019747E798CF3254E2FD1C1A86B7C3347DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 02D8
Signing time: Sat 07 Jun 2025 01:00:49 +0000
Manifest this update: Sat 07 Jun 2025 01:00:49 +0000
Manifest next update: Sun 08 Jun 2025 01:00:49 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: CjzFJbwRaebcnffcEph3aAoMk+h2VCGdNrxZqVgBQ6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:98:cf:32:54:e2:fd:1c:1a:86:b7:c3:34:7d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Jun 7 01:00:49 2025 GMT
Not After : Jun 8 01:00:49 2025 GMT
Subject: CN=3f9a54c22f163db066542eee4926ed1b3d719a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:49:3b:46:ac:05:ef:37:02:39:0e:33:3c:
0b:87:22:39:1f:0c:51:ef:59:0e:cd:ec:1c:4d:85:
f6:b9:0f:65:70:0d:98:1c:45:5f:39:96:a7:52:85:
6a:d6:2b:ad:a5:62:bf:43:6d:38:cd:be:5e:de:45:
12:13:f4:c1:ff:ec:63:35:ae:6c:da:96:4f:62:38:
d1:02:31:72:44:61:ec:1b:88:e7:4f:bf:50:8a:15:
ab:fd:43:69:d6:ea:db:1e:f5:10:8e:c7:53:b8:2d:
9b:0b:cc:81:e4:c0:ab:20:20:a1:fa:db:74:04:7d:
f0:81:b2:cd:90:db:fa:00:d0:df:76:5d:03:48:5d:
f4:42:f3:fa:a8:3e:4b:41:7e:74:e0:53:f2:83:c9:
2a:37:de:7f:eb:03:38:1a:73:7d:9a:de:90:6a:d3:
68:e4:b8:44:2a:f8:39:fc:db:96:d1:ba:21:da:0c:
dc:68:59:53:19:6e:c2:01:28:b6:97:36:2a:e0:16:
2b:74:61:9b:60:74:cf:67:67:03:c7:11:8b:80:09:
a5:73:bb:4a:02:f9:f3:97:73:8f:c9:97:e7:31:77:
4e:cc:05:b3:74:e3:6d:74:4a:81:3b:fd:be:b3:49:
df:6d:ca:6f:9e:95:a5:26:3f:fe:b6:25:29:96:7d:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9A:54:C2:2F:16:3D:B0:66:54:2E:EE:49:26:ED:1B:3D:71:9A:36
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:94:d4:37:d5:eb:76:80:bc:64:4b:3a:2a:13:a1:9c:37:f7:
d1:a8:7b:e2:38:41:81:8a:ed:46:3d:58:a4:d5:d1:7f:91:8c:
f9:cb:56:8f:b2:1e:a2:7e:31:e8:30:ab:b5:50:d9:99:f7:b5:
cd:01:ac:03:fd:6b:bc:1d:13:d9:61:a2:26:32:66:94:25:76:
bb:2c:9f:eb:a0:35:fa:fb:92:0c:aa:d2:4b:3d:a1:27:18:82:
1d:e6:4c:b5:5a:a3:96:30:a0:3a:10:5e:59:3b:4f:13:f4:81:
0d:c6:0b:cd:b4:51:b9:11:eb:90:2e:2c:52:88:89:95:36:13:
f3:09:b0:b9:4c:4c:58:24:15:f5:af:12:20:fe:1f:18:33:a2:
f9:88:2d:d1:2f:02:bc:7e:f2:07:d4:8d:40:f7:6d:47:d9:e7:
89:ed:97:23:ac:fe:53:22:3b:8e:c5:ba:fa:35:12:9e:a0:1d:
c4:c6:b8:7f:45:f4:4e:28:64:4b:ab:3b:31:60:72:4f:41:d7:
bd:fa:80:00:7f:60:cd:26:fc:35:4c:a7:97:da:d0:d1:43:12:
70:cd:d1:8a:44:93:83:af:f9:02:52:8e:f0:b9:cb:3a:df:0f:
ee:9d:9a:89:a2:02:4e:08:cf:5c:8f:de:4a:4a:61:2d:f3:9f:
c3:3f:c6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:25 2025 by rpki-client